Changed my 'Log Out' link to look like this: <dtml-call "REQUEST.set('form_action','/ewing/acl_users/logout')"> <A HREF="&dtml-form_action;" TARGET="_top">Log Out</A> Which when rendered (according to view/source) comes out as: <A HREF="/ewing/acl_users/logout" TARGET="_top">Log Out</A> ...but the result is still the same, I'm not logged out. This looks like a simple variable replacement, I shouldn't need to POST a form to the logout script should I?

-----Original Message----- From: Aseem Mohanty [mailto:aseem@neurobehavioralsystems.com] Sent: Wednesday, June 19, 2002 2:32 AM To: Riggs, David Cc: zope@zope.org Subject: Re: [Zope] Log Out Problems With Cookie Authentication (&LDAPUserFolder)

try this:

<dtml-call "REQUEST.set ('form_action', '/test2/acl_users/user_logout')"> <a class="menu_link" href="&dtml-form_action;">LOGOUT</a><br>

what you wrote didnt work for me either so I kinda copied the form way of doing it. Quite frankly I dont know why this works and the other doesnt... but if anybody knows I would be grateful for the explanation..

AM

Riggs, David wrote:

...

Hi all,

I'm using Zope 2.5.1 under Win2k, and authenticating users via the LDAPUserFolder (1.5beta1) with cookie based authentication. I've got a logout link that looks like this:

<a href="/mysite/acl_users/logout">Log Out</a>

Where the acl_users object is my LDAPUserFolder, and the logout object is a custom form I've placed in it that looks like this:

<dtml-call expr="RESPONSE.expireCookie('__ac',path='/')"> <dtml-call expr="SESSION.invalidate()"> <dtml-call expr="RESPONSE.redirect('/mysite/index_html')">

The redirect works, but what I expect to happen is that the user should be presented with the login form, instead they are presented with index_html and are most definitely not logged out (user Anonymous does not have 'view' permissions while Authenticated does). In fact, I can't seem to kill the session without closing down the browser entirely.

Could anyone give me any pointers to using cookie based authentication, or let me know what I'm doing wrong in this case?

Thanks!

David A. Riggs Science Applications International Corporation - SAIC (304)284-9000x201 driggs@asset.com

-- ================================================================== Aseem Mohanty

Neurobehavioral Systems Inc, 828 San Pablo Ave, Albany, CA 94706 (R) 510 7696011 (M) 510 3014871 (O) 510 5279231 =========================================================== -- David A. Riggs Science Applications International Corporation - SAIC (304)284-9000x201 driggs@asset.com