Users' cannot log out

[Swiveling Raveesh]

I am trying to setup a Jenkins instance with Google oAuth Login for the users. I am on the latest version version 1.642. For Authorization I am using Matrix based security and currently only have authenticated users with all permissions.

The problem seems to be if I don't give the Anonymous users' at least overall read rights users' cannot log out. Clicking log out just refreshes the page. Also going to the site the first time redirects directly to Google oAuth page.

The plugin I am using is https://wiki.jenkins-ci.org/display/JENKINS/Google+Login+Plugin


Am I misconfiguring  something?

[Baptiste Mathus]

Hi,
Beware that 1.642 is the latest one, bleeding edge version.
IMO first step is to try and reproduce this issue with 1.625.3 (latest "LTS"). Then if it still is an issue file a new issue report in the tracker.

I've quickly scanned the changelog/issues list of both jenkins and that plugin and didn't find anything obviously related.

Cheers

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/903ea7df-da6a-4a8c-a283-e53f30a9c0a0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Daniel Beck]

On 20.12.2015, at 09:03, Swiveling Raveesh <ravees...@gmail.com> wrote:

> Am I misconfiguring something?

I think this is the regular behavior when anonymous has no access to Jenkins at all -- it'd show the login form for 'normal' security realms, for SSO based ones it's redirecting to the external authentication system. Logging out just allows you to log in with a different identity (depending on how the external realm works).

[Swiveling Raveesh]

It's the same behaviour on the LTS release. Just tested it on a VM.

[Swiveling Raveesh]

I guess that would make sense that it just redirects back to the SSO page. But right now a logged in user cannot sign out at all. So once you are logged in there is no way to authenticate with a different account unless you manually clear the cookies.

[Daniel Beck]

> On 21.12.2015, at 04:58, Swiveling Raveesh <ravees...@gmail.com> wrote:
>
> I guess that would make sense that it just redirects back to the SSO page. But right now a logged in user cannot sign out at all. So once you are logged in there is no way to authenticate with a different account unless you manually clear the cookies.

Well, the redirect that happens upon logout is the exact same one you'd get when logging in for the first time. You _do_ log out, it's just that immediately the login is triggered. Whatever identity change you want to do should be done in the specific SSO realm -- or am I missing something?

[Raveesh]

Ah that makes sense. I didn't consider it just re-signing in. I was expecting to see an account selection screen from google.

--
You received this message because you are subscribed to a topic in the Google Groups "Jenkins Users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/jenkinsci-users/lzhhn_3xTVE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/B76A7D01-6603-47D5-BC5B-ED5396DE0310%40beckweb.net.

[Daniel Beck]

> On 22.12.2015, at 07:26, Raveesh <ravees...@gmail.com> wrote:
>
> Ah that makes sense. I didn't consider it just re-signing in. I was expecting to see an account selection screen from google.

I'm pretty sure the behavior I describe is what's happening, but monitor the requests sent by your browser to find out definitively what's going on.