Question

I have following the LdapAuthenticationHowTo to configure my Apache server , it works fine with the authentication. However, when I try to click "log out" at the left top of the page , it does not log me out. It happens on both Firefox and IE 6. Later , I try to roll back my LDAP authentication changes and use back the .htpasswd authentication , it works fine.

Environment

-- ChongGeeKoa - 07 Jun 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

As soon as you are delegating authentication to the Apache server, there is unfortunately no way to log out - only closing the browser will do that. Apache authentication is done with HTTP headers, and once a browser is authenticated, it will continue to send these authentication headers. Only TemplateLogin offers a possibility to log out, because in that case authentication is done at TWiki level with a session cookie.

I'd assume that the left bar would not bother to offer a "log out" link with Apache login, but maybe I am wrong here...

-- HaraldJoerg - 09 Jun 2006

Harald is correct. I also agree that perhaps the left bar could be more intelligent about offering the log out link only when it knows it can actually log the user out. I ended up removing it from ours because too many people would complain about it even though it was explained a hundred different time in many different ways why log out did not work.

-- RobLeach - 12 Jun 2006