<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
David,
<div class=""><br class="">
</div>
<div class="">The difference is that when you arrive at the broken Docker version, it thinks you're brand new, never before seen. When you logout of production, it recognizes you fine. That could be because of cookies, but it's probably not.</div>
<div class=""><br class="">
</div>
<div class="">I presume it'd log something on a logout request even if it thought there was no active IdP session, so the most logical combination of the two issues would be that you're landing on different IdP's entirely when you come back.</div>
<div class=""><br class="">
</div>
<div class="">I'd look closely at the delta between web flows. The front channel should give you a pretty good idea what's going on.</div>
<div class=""><br class="">
</div>
<div class="">You shouldn't need to understand IdP session management in depth to debug this one. It should be pretty much cookies/local storage unless you've customized things.</div>
<div class=""><br class="">
</div>
<div class="">Sorry, not much to go on,</div>
<div class="">Nate.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Oct 4, 2016, at 1:37 PM, David E. Newswanger <<a href="mailto:David_Newswanger@berea.edu" class="">David_Newswanger@berea.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<div id="x_divtagdefaultwrapper" style="font-size: 12pt; font-family: Calibri, Arial, Helvetica, sans-serif;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class="">Logging out of the broken Docker version takes me to:<span class="Apple-converted-space"> </span><span class="">/idp/profile/Logout;jsessionid=502910252EEEAB7310CD165D57926C04?execution=e1s1</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class="">Logging out of the production one takes me to:<span class="Apple-converted-space"> </span><span class="">/idp/profile/Logout?execution=e10s1&_eventId=propagate</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span class=""><br class="">
</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span class="">What would be causing the logout event to not get recorded in the logs?</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span class=""><br class="">
</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><span class="">Where do I go to look at the session management? I've never had to directly debug cookies before, so any pointers on how to do this would be helpful.<br class="">
</span></div>
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class="">
</div>
<div id="x_Signature" class="">
<div id="x_divtagdefaultwrapper" style="font-size: 12pt; font-family: Calibri, Arial, Helvetica, sans-serif;" class="">
Thanks for your help
<div style="margin-top: 0px; margin-bottom: 0px;" class=""> David Newswanger</div>
<i class=""><span style="font-size: 10pt;" class=""></span></i></div>
</div>
</div>
<hr tabindex="-1" style="display: inline-block; width: 473.328125px;" class="">
<div id="x_divRplyFwdMsg" dir="ltr" class=""><font face="Calibri, sans-serif" style="font-size: 11pt;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>users <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a>>
on behalf of Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>><br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, October 3, 2016 4:42:57 PM<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span>Shib Users<br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>RE: Routing Problems with SLO</font>
<div class=""> </div>
</div>
</div>
<font size="2" style="font-family: Helvetica; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-size: 10pt;" class="">
<div class="PlainText">> I'm working on migrating our IdP from Tomcat to a Jetty based Docker<br class="">
> deployment. At the moment, everything works except for SLO. When a<br class="">
> request is made to idp/profile/Logout, it appears as though<br class="">
> logout_complete.vm is being rendered instead of logout_propagate.vm and<br class="">
> so the user remains logged in. I don't see anything useful in the logs however<br class="">
> I'll include them at the end of the email just in case.<br class="">
<br class="">
Your logs are not showing any use of the logout feature.<br class="">
<br class="">
-- Scott<br class="">
<br class="">
--<span class="Apple-converted-space"> </span><br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a><br class="">
</div>
</span></font><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To
unsubscribe from this list send an email to<span class="Apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>