Bug 39860

Summary:	SSO logout: Logout from backup keeps session on master alive, traceback on subsequent logout attempt
Product:	UCS	Reporter:	Erik Damrose <damrose>
Component:	SAML	Assignee:	Bugzilla Mailingliste <bugzilla>
Status:	CLOSED DUPLICATE	QA Contact:
Severity:	normal
Priority:	P5	CC:	best
Version:	UCS 4.1
Target Milestone:	---
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Erik Damrose

2015-11-10 15:46:04 CET

1xMaster / 1xBackup environment. Chrome Browser on Windows 7.

Login to http://master/umc -> single sign-on on backup (visible on ucs-sso.)
Switch to backup from UMC dropdown on master
Logout on Backup -> redirect to master and backup (for logout)
Enter http://master/umc in browser -> Get a valid UMC Session!

Then when trying to logout on master:
The server encountered an unexpected condition which prevented it from fulfilling the request.

Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/cherrypy/_cprequest.py", line 656, in respond
    response.body = self.handler()
  File "/usr/lib/python2.7/dist-packages/cherrypy/lib/encoding.py", line 188, in __call__
    self.body = self.oldhandler(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/cherrypy/_cpdispatch.py", line 34, in __call__
    return self.callable(*self.args, **self.kwargs)
  File "/usr/sbin/univention-management-console-web-server", line 1211, in logout
    data = self.sp.global_logout(user.saml.response.name_id)
  File "/usr/lib/python2.7/dist-packages/saml2/client.py", line 106, in global_logout
    entity_ids = self.users.issuers_of_info(name_id)
  File "/usr/lib/python2.7/dist-packages/saml2/population.py", line 42, in issuers_of_info
    return self.cache.entities(name_id)
  File "/usr/lib/python2.7/dist-packages/saml2/cache.py", line 142, in entities
    return self._db[cni].keys()
KeyError: '1=https%3A//master.ucs.local/univention-management-console/saml/metadata,2=urn%3Aoasis%3Anames%3Atc%3ASAML%3A2.0%3Anameid-format%3Atransient,4=_eb004a337a88fde07bdc6ded3ba81db6abb9c2fcd0'

Comment 1 Florian Best

2015-11-10 15:47:37 CET


*** This bug has been marked as a duplicate of bug 39815 ***