CAS Single Sign-off

cas-server-3.3.2
Roller 4.0.1
Acegi-security.10.3-sample-tutorial.war
Cas-client-core-3.1.3.jar Cas-client-3.1.3-release.zip under the modules directory
CAS address is Http://p.cn:8080/cas

Previous article is a single sign-on http://blog.csdn.net/laorer/archive/2010/06/30/5705016.aspx
This article is about configuring a single point of logoff encountered problems, as well as the workaround

1.
After logging in Via Http://p.cn:8080/cas, and then logging out via http://p.cn:8080/cas/logout, it is always impossible to log off successfully, by HttpWatch viewing the content submitted, when found to log out, there is no related cookie, Card here for a long time, and later found that the cookie is secure for the sake of true, if the cookiesecure in the Ticketgrantingticketcookiegenerator.xml file is changed to False, it is possible to unregister the successful , but this can be a security issue, the best way is to log off by HTTPS, that is, by http://p.cn:8443 (SSL port) to log off.
For a cookie, see:
Http://www.fh888.com/sf_8C17CE3AA29B4479805CB416B9ADF89F_5_cary.html
http://kiki1120.javaeye.com/blog/648587

2. Unified Logout
Find some information, but after watching it still feel a bit dizzy, the client according to the "CAS single point Logout principle-" configuration just

That is, in the CAS client's web. XML, add

<filter> <filter-name>cas filter</filter-name> <filter-class> Org.jasig.cas.client.session.singlesignoutfilter</filter-class> </filter> <filter-mapping> < Filter-name>cas filter</filter-name> <url-pattern>/*</url-pattern> </ Filter-mapping> <listener> <listener-class> Org.jasig.cas.client.session.singlesignouthttpsessionlistener</listener-class> </listener>

If a CAS client filter is configured, then the CAS single Sign out filter must be placed before the CAS client filter.
Also need to put Cas-client-core-3.1.3.jar in the CAS client's lib directory

CAS single-point logout principle two o'clock, faint, do not know where to get Originalurl, and later found that there is no need to configure.

Related information
Http://hi.baidu.com/songzongquan/blog/item/6b0572f410dc3264ddc47456.html
Http://hi.baidu.com/songzongquan/blog/item/0187d5011801f10c1d958357.html

http://www.javaeye.com/topic/546785

In addition, http://zhenkm0507.javaeye.com/blog/544899 this article helps to understand CAS-related content