Logout notifications always red X (failed)

[Petr Hroudný]

st 11. 8. 2021 o 21:31 Cantor, Scott <cantor.2 at osu.edu> napísal(a):

> The only obvious dfference I can think of is the addition of SOAP support,
> which until 4.1 often hijacks the outbound logout step, but in that case
> there is zero chance that logout would actually be working, counter to your
> original post.
>
>
SAML tracer shows outbound logout flow is the same in both versions:
- IdP sends LogoutRequest to SP's /Shibboleth.sso/SLO/Redirect endpoint
- IdP receives appropriate LogoutResponse with status Success on
/idp/profile/SAML2/Redirect/SLO
endpoint.

idp-process.log contains:

INFO [Shibboleth-Audit.Logout:283] -
x.x.x.x|2021-08-11T16:54:56.273633Z|2021-08-11T16:54:56.292906Z||
https://example.org/shibboleth||||||||true||Redirect|||Success|||Mozilla/5.0
(Macint
osh; Intel Mac OS X 10.13; rv:90.0) Gecko/20100101 Firefox/90.0

so the LogoutResponse has probably been correctly received and recognised
by the IdP.

That would mean, that only the logout status webpage is for some reason
unable to fetch correct status and always prints red X.

Thanks, Petr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210811/da5c2a28/attachment.htm>