The issue discussed here, http://drupal.org/node/103268 doesn't seem to be resolved for version 1.5. I don't believe there is a patch or fix for this version yet. Still have the same issue with version 1.5. Is there a patch available?

Dan

CommentFileSizeAuthor
#7 Secure Site - Drupal.png60.31 KBAnonymous (not verified)

Comments

junyor’s picture

The fix for that issue is included in 5.x-1.5. Would you please provide a step-by-step method of reproduction for the issue you're seeing?

Anonymous’s picture

Well I'm definitely using 5.x-1.5. Basically the exact same issue as the subjects suggests and the discussion in the link above I posted. I can login just fine with any of the accounts created. When I logout I get the login dialog popup. Logout link path is index.php?q=logout. Nothing in the watchdog regarding. Using HTTP Auth.

junyor’s picture

You're logging in on an unprotected page? Are you logging out on an unprotected page, too? Which pages are protected and are you using the white list or the black list?

Anonymous’s picture

http://www.olivelovers.com/admin/

Every page is protected. Not sure what you mean about black list and white list.

junyor’s picture

If every page is protected, you should expect to see the auth dialog on logout. However, that doesn't seem to be the case since http://www.olivelovers.com is unprotected. How about a screenshot of the Secure Site settings page?

darren oh’s picture

I believe it is necessary to show the log-in dialog in order to get the browser to stop sending log-in credentials. We have done a number of browser-specific tweaks so that the user only needs to see the log-in dialog once after logging out, but if it is not shown at all, the user cannot log out.

If a user cancels the log-in dialog, it should stop being displayed on public pages. Please close this issue if that is what happens.

Anonymous’s picture

StatusFileSize
new60.31 KB

Screencap as requested

junyor’s picture

Status: Active » Closed (fixed)

Based on those settings, you should expect to get an HTTP Auth dialog any time you logout. #103268: Log-in dialog is displayed on public page after log-out is about sites with some pages not protected by Secure Site.