[Freeipa-users] FreeIPA WebUI Logout logs back in

[Mauricio Tavares]

On Apr 28, 2015 11:33 PM, "Dmitri Pal" <dpal at redhat.com> wrote:
>
> On 04/28/2015 05:11 PM, Christopher Lamb wrote:
>>
>> HI All
>>
>> I have just tested with the FreeIPA Web UI public demo
>> https://ipa.demo1.freeipa.org/ipa/ui/
>>
>> Using the public demo, when I log out, I get returned to the login
screen,
>> as expected. This allows me to log in with a different user.
>>
>> With our own installation FreeIPA, from exactly the same browser, I get
>> logged straight back in to the Web UI - which makes logging out
pointless.
>>
>> still confused ...
>
>
> Do you have a kerberos ticket on your local system?
> Do klist.
> See which tickets you have.
> If you have tickets do kdestroy - this will remove the ability to SSO. If
you then try to use your IPA server you will have the same experience as
with public demo.
>
      I think the user case Chris is alluding is

1. Login to your desktop as you
2. Login then to IPA server as an admin user that has nothing to do with
your everyday user account.
3. Rinse and repeat
>>
>> Chris
>>
>>
>>
>> From:   Dmitri Pal <dpal at redhat.com>
>> To:     freeipa-users at redhat.com
>> Date:   27.04.2015 21:31
>> Subject:        Re: [Freeipa-users] FreeIPA WebUI Logout logs back in
>> Sent by:        freeipa-users-bounces at redhat.com
>>
>>
>>
>> On 04/27/2015 12:39 PM, Christopher Lamb wrote:
>>>
>>> Hi All
>>>
>>> When I use the logout dropdown the WebUI (top righthand corner of the
>>> screen), it logs me out, then immediately reloads and logs me right back
>>
>> in
>>>
>>> again to the Users screen.
>>>
>>> This prevents me from logging in with a different user.
>>>
>>> The FreeIPA Server is 4.1.0 on OEL 7.5.
>>>
>>> I am using Web UI from an OSX workstation (Firefox and Safari).
>>>
>>> We did not have this behaviour with FreeIPA 3.0.0
>>>
>>> Thanks for your help
>>>
>>> Chris
>>>
>> Try kdestroy and then logout.
>> I am not sure it worked differently in 3.0 may be you tried 3.0 when
>> your Kerberis ticket already expired.
>>
>> --
>> Thank you,
>> Dmitri Pal
>>
>> Sr. Engineering Manager IdM portfolio
>> Red Hat, Inc.
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project
>>
>>
>>
>>
>
>
> --
> Thank you,
> Dmitri Pal
>
> Sr. Engineering Manager IdM portfolio
> Red Hat, Inc.
>
> --
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150428/25a1ac86/attachment.htm>