Question

I have following the LdapAuthenticationHowTo to configure my Apache server , it works fine with the authentication. However, when I try to click "log out" at the left top of the page , it does not log me out. It happens on both Firefox and IE 6. Later , I try to roll back my LDAP authentication changes and use back the .htpasswd authentication , it works fine.

Environment

-- ChongGeeKoa - 07 Jun 2006

Answer

If you answer a question - or have a question you asked answered by someone - please remember to edit the page and set the status to answered. The status is in a drop-down list below the edit box.

As soon as you are delegating authentication to the Apache server, there is unfortunately no way to log out - only closing the browser will do that. Apache authentication is done with HTTP headers, and once a browser is authenticated, it will continue to send these authentication headers. Only TemplateLogin offers a possibility to log out, because in that case authentication is done at TWiki level with a session cookie.

I'd assume that the left bar would not bother to offer a "log out" link with Apache login, but maybe I am wrong here...

-- HaraldJoerg - 09 Jun 2006

Harald is correct. I also agree that perhaps the left bar could be more intelligent about offering the log out link only when it knows it can actually log the user out. I ended up removing it from ours because too many people would complain about it even though it was explained a hundred different time in many different ways why log out did not work.

-- RobLeach - 12 Jun 2006