Log Out Problems With Cookie Authentication (& LDAPUserFolder)
Hi all, I'm using Zope 2.5.1 under Win2k, and authenticating users via the LDAPUserFolder (1.5beta1) with cookie based authentication. I've got a logout link that looks like this: <a href="/mysite/acl_users/logout">Log Out</a> Where the acl_users object is my LDAPUserFolder, and the logout object is a custom form I've placed in it that looks like this: <dtml-call expr="RESPONSE.expireCookie('__ac',path='/')"> <dtml-call expr="SESSION.invalidate()"> <dtml-call expr="RESPONSE.redirect('/mysite/index_html')"> The redirect works, but what I expect to happen is that the user should be presented with the login form, instead they are presented with index_html and are most definitely not logged out (user Anonymous does not have 'view' permissions while Authenticated does). In fact, I can't seem to kill the session without closing down the browser entirely. Could anyone give me any pointers to using cookie based authentication, or let me know what I'm doing wrong in this case? Thanks! David A. Riggs Science Applications International Corporation - SAIC (304)284-9000x201 driggs@asset.com
try this: <dtml-call "REQUEST.set ('form_action', '/test2/acl_users/user_logout')"> <a class="menu_link" href="&dtml-form_action;">LOGOUT</a><br> what you wrote didnt work for me either so I kinda copied the form way of doing it. Quite frankly I dont know why this works and the other doesnt... but if anybody knows I would be grateful for the explanation.. AM Riggs, David wrote:
Hi all,
I'm using Zope 2.5.1 under Win2k, and authenticating users via the LDAPUserFolder (1.5beta1) with cookie based authentication. I've got a logout link that looks like this:
<a href="/mysite/acl_users/logout">Log Out</a>
Where the acl_users object is my LDAPUserFolder, and the logout object is a custom form I've placed in it that looks like this:
<dtml-call expr="RESPONSE.expireCookie('__ac',path='/')"> <dtml-call expr="SESSION.invalidate()"> <dtml-call expr="RESPONSE.redirect('/mysite/index_html')">
The redirect works, but what I expect to happen is that the user should be presented with the login form, instead they are presented with index_html and are most definitely not logged out (user Anonymous does not have 'view' permissions while Authenticated does). In fact, I can't seem to kill the session without closing down the browser entirely.
Could anyone give me any pointers to using cookie based authentication, or let me know what I'm doing wrong in this case?
Thanks!
David A. Riggs Science Applications International Corporation - SAIC (304)284-9000x201 driggs@asset.com
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
-- ================================================================== Aseem Mohanty Neurobehavioral Systems Inc, 828 San Pablo Ave, Albany, CA 94706 (R) 510 7696011 (M) 510 3014871 (O) 510 5279231 ================================================================== "I saw `cout' being shifted "Hello world" times to the left and stopped right there!!" -- Steve Gonedes ==================================================================
Riggs, David writes:
I'm using Zope 2.5.1 under Win2k, and authenticating users via the LDAPUserFolder (1.5beta1) with cookie based authentication. I've got a logout link that looks like this: ... The redirect works, but what I expect to happen is that the user should be presented with the login form, instead they are presented with index_html and are most definitely not logged out (user Anonymous does not have 'view' permissions while Authenticated does). This might be a caching problem. Did you try to reload the page?
Dieter
participants (3)
-
Aseem Mohanty -
Dieter Maurer -
Riggs, David