User logs out via caslogout but logs back in without authentication
Shawn DeArmond - September 25, 2008 - 18:20
| Project: | CAS |
| Version: | 5.x-3.0 |
| Component: | Miscellaneous |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
Jump to:
Description
Using:
Drupal 5.10
cas module 5.x-3.0
phpCAS 0.6.0-1 (also tried 0.5.1-1)
Users can log in via cas. That works fine.
When the users log out via caslogout, they are logged out of the site, but as soon as they click the cas login, they are not redirected to my cas server, and are not asked for their credentials. They are re-logged into Drupal automatically.

#1
There is a cas logout menu item that you can enable instead of the drupal logout menu item that should provide the functionality that you're looking for.
Dave
#2
Oh and there's a logout url config setting that you may need to play with as well.
#3
Yeah, I found the logout menu item. That wasn't the problem.
I entered my CAS server logout URL into the "Logout destination" and that worked. I was hoping that Logout destination would be some other web site I could point users to AFTER they were successfully logged out.
Thanks. I'm happy that it works.
#4
I've got a similar issue.
I've got both CAS Log in and CAS Logout enabled (with drupal's default log in/outs disabled). When I initially access the site when I click the CAS Login, it redirects me to the CAS login page, after logging in I am returned to my drupal site as a logged in user. When I click CAS Logout, I am "logged out" of drupal and can't access anything, but the next time i click CAS Login, it automatically logs me in without going to the CAS login page. I suspect CAS is not really logging me out right now and have tried setting the logout redirect option to https://localhost:8443/cas/logout. When i log out the URL will return as https://localhost:8443/cas/logout?ticket=XXXXXXXX, but again, there is no log in screen the next time i click log in. Any ideas why this is?
Using:
drupal 6.14
cas 6.x-1.0
phpCAS 1.0.1
CAS Settings:
CAS server: localhost
CAS port: 8443
CAS URI: /cas
CAS PEM certificate verification: Do not verify the certificate
Is Drupal also the CAS user repository? No
If Drupal is not the user repository, should cas highjack users with the same name? Yes
Should Drupal user accounts be automatically created? Yes
Redirect user on logout? Yes
Logout destination: https://localhost:8443/cas/logout
#5
Try a trailing slash on the cas uri. It looks like you're not actually hitting the cas logout page. This is often dependent on how cas is installed.