Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-58244

Shibboleth front channel logout fails if user is already logged out

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.0.9, 3.1.5, 3.2.2
    • Fix Version/s: 3.1.6, 3.2.3
    • Component/s: Authentication
    • Labels:
    • Testing Instructions:
      Hide
      1. Setup Shibboleth authentication.
        • Set the Shibboleth Service Provider logout handler URL in Moodle.
        • Configure the front channel logout in the service provider (see auth/shibboleth/README.txt) with

          <Notify Channel="front" Location="[host]/auth/shibboleth/logout.php" />
          

      2. Login using Shibboleth.
      3. Logout in Moodle.
      4. The Shibboleth SP will redirect you to /auth/shibboleth/logout.php, which in turn redirects the user back to Moodle.
      Show
      Setup Shibboleth authentication. Set the Shibboleth Service Provider logout handler URL in Moodle. Configure the front channel logout in the service provider (see auth/shibboleth/README.txt) with < Notify Channel = "front" Location = "[host]/auth/shibboleth/logout.php" /> Login using Shibboleth. Logout in Moodle. The Shibboleth SP will redirect you to /auth/shibboleth/logout.php, which in turn redirects the user back to Moodle.
    • Affected Branches:
      MOODLE_30_STABLE, MOODLE_31_STABLE, MOODLE_32_STABLE
    • Fixed Branches:
      MOODLE_31_STABLE, MOODLE_32_STABLE
    • Pull Master Branch:
      MDL-58244-master

      Description

      auth/shibboleth/logout.php tries to access $USER->auth that is undefined if the user is already logged out.

      We configured the front channel logout in our Shibboleth SP. When the user initiates the Shibboleth logout procedure through Moodle (login/logout.php), he will be stuck on auth/shibboleth/logout.php since he is already logged out in Moodle at that moment and he will not be redirected to the return URL as demanded by Shibboleth.

        Attachments

          Activity

            People

            Assignee:
            mgauk Martin Gauk
            Reporter:
            mgauk Martin Gauk
            Peer reviewer:
            Simey Lameze
            Integrator:
            David Monllaó
            Tester:
            cameron1729
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              8/May/17