You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2006/11/13 00:57:43 UTC
DO NOT REPLY [Bug 40775] - Single-sign on session invalidation not working as expected
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40775>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40775
markt@apache.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WORKSFORME
------- Additional Comments From markt@apache.org 2006-11-12 15:57 -------
I have tested the following sequence of events using the latest source from SVN.
- set up 2 webapps, A & B, both using FORM authentication
- enabled SSO
- request non-existant, protected resource from A -> login.jsp
- enter user/pwd & submit -> 404
- request existing, protected resource from B -> resource shown, no login prompt
- logout of B
- request existing, protected resource from A -> login.jsp
As I understand it, in the last step you saw the protected resource.
I am going to resolve this as works for me. If you still see this issue please
run you test cases with the latest stable version (5.5.20 at the the time of
writing this comment). If you still see the same problem, please re-open this
issue, attach you test case and I will investigate further.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org