The mailing list for listmasters using Sympa

["Stefan Hornburg (Racke)" <address@concealed>]

On 8/31/20 1:48 PM, Kazim Koybasi wrote:
> Hello Stefan,
> 
> Login works but logout does not work. It does not redirect to logout_path 
> so it always stays logged in.
> 
> Regards.
> 

Hello Kazim,

in this case please file a bug.

Regards
         Racke

> 
> On Mon, 31 Aug 2020 at 14:36, Stefan Hornburg (Racke) <address@concealed 
> <mailto:address@concealed>> wrote:
> 
>     On 8/31/20 1:28 PM, Kazim Koybasi wrote:
>     > Hello Stefan,
>     >
>     > It seems that sympa omits logout_path. Whatever I write as 
> logout_path it does not give error and it says "you have
>     > logged out". When I press login it does not ask for CAS login and 
> immediately log in the sympa web interface.How can I
>     > proceed for this issue? Should I file a bug?
> 
>     Hello Kazim,
> 
>     Login doesn't work either? In that case try to add the regexp 
> configuration parameter to auth.conf:
> 
>     cas
>       regexp .*
> 
>     Regards
>            Racke
> 
>     >
>     > Regards.
>     >
>     > On Mon, 31 Aug 2020 at 14:19, Stefan Hornburg (Racke) 
> <address@concealed <mailto:address@concealed>
>     <mailto:address@concealed <mailto:address@concealed>>> wrote:
>     >
>     >     On 8/31/20 11:55 AM, Kazim Koybasi wrote:
>     >     > Hello Stefan,
>     >     >
>     >     > I do not see this message in sympa.log with loglevel 3 setting.
>     >     >
>     >     > Regards.
>     >
>     >     Hello Kazim,
>     >
>     >     that's odd and looks like a bug. I would like to reproduce the 
> problem, but unfortunately I don't have a CAS
>     server
>     >     at hand.
>     >
>     >     Regards
>     >             Racke
>     >
>     >     >
>     >     > On Mon, 31 Aug 2020 at 12:15, Stefan Hornburg (Racke) 
> <address@concealed <mailto:address@concealed>
>     <mailto:address@concealed <mailto:address@concealed>>
>     >     <mailto:address@concealed <mailto:address@concealed> 
> <mailto:address@concealed <mailto:address@concealed>>>> wrote:
>     >     >
>     >     >     On 8/29/20 1:15 PM, Kazim Koybasi wrote:
>     >     >     > Hello Stefan,
>     >     >     >
>     >     >     > Whatever I change logout_path. It does not give errors. 
> It seems to ignore this parameter also I did
>     not see any
>     >     >     > redirection to CAS logout URL in apache logs.
>     >     >     >
>     >     >     > Regards.
>     >     >
>     >     >     Hello Kazim,
>     >     >
>     >     >     I think this is the relevant part of the code:
>     >     >
>     >     >     # Logout from WWSympa
>     >     >     sub do_logout {
>     >     >         wwslog('info', '(%s)', $param->{'user'}{'email'});
>     >     >
>     >     >         delete $param->{'user'};
>     >     >         $session->{'email'} = 'nobody';
>     >     >
>     >     >         if (    $session->{'cas_server'}
>     >     >             and 
> $Conf::Conf{'auth_services'}{$robot}[$session->{'cas_server'}]) {
>     >     >             # This user was logged using CAS.
>     >     >             my $cas_server =
>     >     >                 
> $Conf::Conf{'auth_services'}{$robot}[$session->{'cas_server'}]
>     >     >                 {'cas_server'};
>     >     >             delete $session->{'cas_server'};
>     >     >
>     >     >             $param->{'redirect_to'} =
>     >     >                 
> $cas_server->getServerLogoutURL(Sympa::get_url($robot));
>     >     >             return 1;
>     >     >        }
>     >     >
>     >     >     Unfortunately there is no debug log messages for the logout 
> URL.
>     >     >
>     >     >     If WWSympa does the redirect, this log message should be 
> triggered:
>     >     >
>     >     >      } elsif ($param->{'redirect_to'}) {
>     >     >             $log->syslog('notice', 'Redirecting to %s', 
> $param->{'redirect_to'});
>     >     >             _redirect($param->{'redirect_to'});
>     >     >      }
>     >     >
>     >     >     Do you see this message?
>     >     >
>     >     >     Regards
>     >     >             Racke
>     >     >
>     >     >     >
>     >     >     > On Fri, 28 Aug 2020 at 14:24, Kazim Koybasi 
> <address@concealed <mailto:address@concealed>
>     <mailto:address@concealed <mailto:address@concealed>>
>     >     <mailto:address@concealed <mailto:address@concealed> 
> <mailto:address@concealed
>     <mailto:address@concealed>>>
>     >     >     <mailto:address@concealed 
> <mailto:address@concealed> <mailto:address@concealed
>     <mailto:address@concealed>> <mailto:address@concealed 
> <mailto:address@concealed>
>     >     <mailto:address@concealed 
> <mailto:address@concealed>>>>> wrote:
>     >     >     >
>     >     >     >     Hello,
>     >     >     >
>     >     >     >     Sympa version is 6.2.56 and auth.conf is like below.
>     >     >     >
>     >     >     >     cas
>     >     >     >        base_url https://xxx.xxx.edu/cas
>     >     >     >        non_blocking_redirection        on
>     >     >     >        auth_service_name Login
>     >     >     >        login_path /login
>     >     >     >        logout_path /logout
>     >     >     >        ldap_host xxx.xxxx.edu:389 
> <http://xxx.xxxx.edu:389> <http://xxx.xxxx.edu:389>
>     <http://xxx.xxxx.edu:389> <http://xxx.xxxx.edu:389>
>     >     >     >        ldap_get_email_by_uid_filter (cn=[uid])
>     >     >     >        ldap_timeout 30
>     >     >     >        ldap_bind_dn CN=XXX,DC=XXX,DC=local
>     >     >     >        ldap_bind_password XXXX
>     >     >     >        ldap_suffix OU=XXX,DC=XXXX,DC=local
>     >     >     >        ldap_scope sub
>     >     >     >        ldap_email_attribute mail
>     >     >     >
>     >     >     >     Regards.
>     >     >     >
>     >     >     >     On Fri, 28 Aug 2020 at 14:04, Stefan Hornburg (Racke) 
> <address@concealed <mailto:address@concealed>
>     <mailto:address@concealed <mailto:address@concealed>>
>     >     <mailto:address@concealed <mailto:address@concealed> 
> <mailto:address@concealed <mailto:address@concealed>>>
>     >     >     <mailto:address@concealed <mailto:address@concealed> 
> <mailto:address@concealed <mailto:address@concealed>>
>     <mailto:address@concealed <mailto:address@concealed> 
> <mailto:address@concealed <mailto:address@concealed>>>>> wrote:
>     >     >     >
>     >     >     >         On 8/28/20 12:58 PM, Kazim Koybasi wrote:
>     >     >     >         > Hello,
>     >     >     >         >
>     >     >     >         > We installed sympa 6.2.56 on a different server 
> to apply the upgrade process and we set it
>     to auth
>     >     from
>     >     >     CAS. It
>     >     >     >         > successfully logs in but logout does not work. 
> It seems logout_path in auth.conf does not apply.
>     >     How can we
>     >     >     >         solve this?
>     >     >     >         >
>     >     >     >         > Best regards.
>     >     >     >
>     >     >     >         Hello Kazim,
>     >     >     >
>     >     >     >         what is the Sympa version on the current server?
>     >     >     >
>     >     >     >         How does your auth.conf look like (with sensitive 
> data redacted) ?
>     >     >     >
>     >     >     >         Regards
>     >     >     >                  Racke
>     >     >     >
>     >     >     >         --
>     >     >     >         Ecommerce and Linux consulting + Perl and web 
> application programming.
>     >     >     >         Debian and Sympa administration. Provisioning 
> with Ansible.
>     >     >     >
>     >     >
>     >     >
>     >     >     --
>     >     >     Ecommerce and Linux consulting + Perl and web application 
> programming.
>     >     >     Debian and Sympa administration. Provisioning with Ansible.
>     >     >
>     >
>     >
>     >     --
>     >     Ecommerce and Linux consulting + Perl and web application 
> programming.
>     >     Debian and Sympa administration. Provisioning with Ansible.
>     >
> 
> 
>     -- 
>     Ecommerce and Linux consulting + Perl and web application programming.
>     Debian and Sympa administration. Provisioning with Ansible.
> 


-- 
Ecommerce and Linux consulting + Perl and web application programming.
Debian and Sympa administration. Provisioning with Ansible.

Attachment: signature.asc
Description: OpenPGP digital signature