Uninett / mod_auth_mellon

An Apache module with a simple SAML 2.0 service provider

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Error validating logout request. Lasso error: [304] Unknown principal on logout.

tutida opened this issue · comments

Hello, I got an error in logout.

[Sat Jan 12 15:18:35.800059 2019] [auth_mellon:warn] [pid 20761] [client 10.0.0.85:63552] Error validating logout request. Lasso error: [304] Unknown principal on logout, referer: https://~~~

I use mellon as a service provider with ADFS.
This error occurs when logging in to the same account from different browsers.

he pattern in which an error occurs is as follows.

  • browser A : Login
  • browser A : Logout
  • browser B : Login
  • browser B : Logout

-> No problem

  • browser A : Login
  • browser B : Login
  • browser A : Logout
  • browser B : Logout

-> No problem

  • browser A : Login
  • browser B : Login
  • browser B : Logout
  • browser A : Logout

=> An error occurred when logging out of browser B.
Browser A has no problem.

After an error occurs, even if logout processing is done from the browser B, it reaches the application.

Can anyone of you help me with this problem?

I'm sorry.
There was a problem with the URL to use when logging out.

I fixed it with the following link and it worked fine.
https://github.com/Uninett/mod_auth_mellon#logging-out

Before modifying it, I directly accessed ADFS logout URL.

I close this Issue.