Remote User Logout

classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

Remote User Logout

nephantes
Hi,
I am using LDAP for authentication in galaxy mirror so remoteUser is enabled. But logout is not working. How can I use standard logout in this case?

Thanks,

Alper Kucukural, PhD
Bioinformatics Core,
University of Massachusetts Medical School
368 Plantation St.Room AS4.2067
Worcester, MA 01605-2324
Phone: 774-312-4493
E-mail: [hidden email]




___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Eric Rasche
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Alper,

It's not supposed to be possible due to how HTTP authentication works.
See http://httpd.apache.org/docs/1.3/howto/auth.html#basicfaq

However, here are some links you might find useful.
http://stackoverflow.com/questions/4163122/http-basic-authentication-log-out/
http://stackoverflow.com/questions/233507/how-to-log-out-user-from-web-site-using-basic-authentication
http://trac-hacks.org/wiki/TrueHttpLogoutPatch


This seems to work for me:
http://stackoverflow.com/a/4163253/347368
I would imagine you could just redirect to "[hidden email]",
however this is going to be a browser dependent issue.

Cheers,
Eric

On 01/25/2014 01:04 PM, Alper Kucukural wrote:

> Hi,
> I am using LDAP for authentication in galaxy mirror so remoteUser is enabled. But logout is not working. How can I use standard logout in this case?
>
> Thanks,
>
> Alper Kucukural, PhD
> Bioinformatics Core,
> University of Massachusetts Medical School
> 368 Plantation St.Room AS4.2067
> Worcester, MA 01605-2324
> Phone: 774-312-4493
> E-mail: [hidden email]
>
>
>
>
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>   http://lists.bx.psu.edu/
>
> To search Galaxy mailing lists use the unified search at:
>   http://galaxyproject.org/search/mailinglists/
>

- --
Eric Rasche
Programmer II
Center for Phage Technology
Texas A&M University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=Z2Px
-----END PGP SIGNATURE-----
___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

nephantes
Thanks Eric,
[hidden email] will solve the problem.
Best,

Alper Kucukural, PhD
Bioinformatics Core,
University of Massachusetts Medical School
368 Plantation St.Room AS4.2067
Worcester, MA 01605-2324
Phone: 774-312-4493
E-mail: [hidden email]



On Jan 25, 2014, at 2:19 PM, Eric Rasche <[hidden email]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Alper,
>
> It's not supposed to be possible due to how HTTP authentication works.
> See http://httpd.apache.org/docs/1.3/howto/auth.html#basicfaq
>
> However, here are some links you might find useful.
> http://stackoverflow.com/questions/4163122/http-basic-authentication-log-out/
> http://stackoverflow.com/questions/233507/how-to-log-out-user-from-web-site-using-basic-authentication
> http://trac-hacks.org/wiki/TrueHttpLogoutPatch
>
>
> This seems to work for me:
> http://stackoverflow.com/a/4163253/347368
> I would imagine you could just redirect to "[hidden email]",
> however this is going to be a browser dependent issue.
>
> Cheers,
> Eric
>
> On 01/25/2014 01:04 PM, Alper Kucukural wrote:
>> Hi,
>> I am using LDAP for authentication in galaxy mirror so remoteUser is enabled. But logout is not working. How can I use standard logout in this case?
>>
>> Thanks,
>>
>> Alper Kucukural, PhD
>> Bioinformatics Core,
>> University of Massachusetts Medical School
>> 368 Plantation St.Room AS4.2067
>> Worcester, MA 01605-2324
>> Phone: 774-312-4493
>> E-mail: [hidden email]
>>
>>
>>
>>
>> ___________________________________________________________
>> Please keep all replies on the list by using "reply all"
>> in your mail client.  To manage your subscriptions to this
>> and other Galaxy lists, please use the interface at:
>>  http://lists.bx.psu.edu/
>>
>> To search Galaxy mailing lists use the unified search at:
>>  http://galaxyproject.org/search/mailinglists/
>>
>
> - --
> Eric Rasche
> Programmer II
> Center for Phage Technology
> Texas A&M University
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iQIcBAEBAgAGBQJS5A4yAAoJEMqDXdrsMcpVqpoQAMfecQ3ErmRrGb9Pagg6lcn9
> vPrCFvZDEJJJpBX8L4Qn+eFcrGCagLMaa0EmQgXvUtV9o9V3PyrBOE4NHmlZgdvN
> ZEzj6GR+a8VZQAZUlR8hiu2AqwqS+BNAcPRzUpXqWtPeRaqSlkgot9Ib0GOmcSm4
> Q/yfCJp/OuEXEhuhiIa4ZOFrMJdvmXKgvjtJ1ZavhxPy8VjW/hqu0sIQNcnZOgX2
> 8HcmXbk5nAb5aLD1qiUL7hB/odY1xyKnkOuMPoaMANE3it9Da5sYqqF/mjp9jMj3
> Cempj/rl6GU2ynd9QOuOEbVhpKhtS5VNzUNF3LXAX1mgNcVG5M2qCvLXW901Eflr
> BSxIxFtJ7tfJ9V68kCjVapE6QyF7yP4x5z8dfHADX5PQ/ljEUBU+W/vDXKFk+ybn
> 8o5AowDt5jjDj36Mg4xDTnHbjZJ87kUbtLjoV7RYUqxRc3Sjn2yox/ABsdhJlgat
> dAIuHXF/m+f51nOgWDmR0SsU5OwMQbEBT+K0GObcQrPDVdkxjn975iF0DWyGVhau
> M+h29mMfHfcwVxHUh4N7Rwa9D9vFkIQAQf5NBb2O89j+HJPu0e8iYvqtkE07ED8n
> jk2ASa5s/ns/eHOSpImadAPvDPd/XGvUktWRcCMCWFQIvg4eaMSQmhT2wkcXEiyq
> jpXntg3e4HIXiJLD6Awf
> =Z2Px
> -----END PGP SIGNATURE-----
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>  http://lists.bx.psu.edu/
>
> To search Galaxy mailing lists use the unified search at:
>  http://galaxyproject.org/search/mailinglists/


___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Tim Booth
In reply to this post by nephantes
Hi,

I'm currently using one of those hacks, and it seems to work nicely for
the user (Chrome + FF at least) but it does need some messy setting up
in Apache and some cunning redirects in place.  I've pasted the relevant
file fragments below.  It's somewhat confounded with my stuff to enable
SFTP uploads but hopefully you get the idea and the original explanation
on Stackoverflow is pretty good.  The remote_user_logout_href is
something I got to by trial and error.

Cheers,

TIM

===

% cat /usr/share/galaxy-server/logout/.htaccess
# HaCk based on http://stackoverflow.com/questions/4163122/http-basic-authentication-log-out
# Authname must match the one in ../proxy/.htaccess

AuthType Basic
AuthName Galaxy_Server

AuthUserFile /usr/share/galaxy-server/logout/.htpasswd
Require user logout

===

% cat /usr/share/galaxy-server/logout/.htpasswd
#Password is logout.  This in not a secret.
logout:$apr1$0eB1iURY$kwqa0c8tXksbjPQLYqr6s.

===

% cat /usr/share/galaxy-server/proxy/.htaccess
# Security settings for Galaxy proxied via Apache.  Note the actual
# proxy config is under /etc/apache2/conf.d/galaxy.  If for some
# reason you wanted Apache proxy with internal Galaxy authentication
# then you could remove this file and Apache would no longer insist on
# authentication.
AuthBasicProvider external
AuthExternal pwauth
AuthType Basic
AuthName Galaxy_Server

#I'd like to do this, but it upsets Firefox. Use ErrorDocument instead.
# AuthName "Galaxy Server: \
# Log in with regular username and password. \
# Users need to be in the galaxy system group."

ErrorDocument 401 "<html>\
<title>401 Authorization Required</title>\
<h1>Log-in to Galaxy failed</h1>\
<p>You should have been prompted to log into the Galaxy server. \
You need to give your regular system username and password. \
Please reload this page to try again.</p>\
<p>If this fails, check that you are a member of the galaxy system
group, by \
running <code>groups</code> on the command line.</p>\
<p>To add a user, eg. user1, to this group, you may use the
command:</p>\
<ul><li><code>sudo usermod -aG galaxy user1</code></ul></li>\
</html>"

# You may want to comment these 2 lines out or to
# change the group required, but users still need to
# be in the galaxy group for SFTP uploads to work properly.
AuthzUnixgroup on
Require group galaxy

# This is needed to tell Galaxy about the remote
# user.
RequestHeader set REMOTE_USER %{RU}e env=RU
RequestHeader unset Authorization env=RU

===

% cat /etc/galaxy-server/universe_wsgi.d/31_apache-proxy.ini                        
# Settings added by debian-galaxy-apache-proxy to switch Galaxy over to
# authenticating by real user accounts and also permitting uploads.

[app:main]

# Other scripts assume that maildomain is localhsot, so you can't just
# change the setting below and expect everythig to work.
use_remote_user = True
remote_user_maildomain = localhost

# Users may copy files here directly or upload via SFTP/SCP
ftp_upload_dir = /var/lib/galaxy-server/transfer
ftp_upload_site = *** Transfer files via SCP or SFTP to /var/lib/galaxy-server/transfer/... ***

# There is no neat way to log out a user with Basic Auth, but here is a non-neat way.
# Not yet tested on IE.
remote_user_logout_href = javascript:var r=new XMLHttpRequest();r.onreadystatechange=function(){if(r.readyState==4)window.location.replace('logout.html')};r.open('get','logout.html',true,'logout','logout');r.send();

===

--
Tim Booth <[hidden email]>
NERC Environmental Bioinformatics Centre

Centre for Ecology and Hydrology
Maclean Bldg, Benson Lane
Crowmarsh Gifford
Wallingford, England
OX10 8BB

http://nebc.nerc.ac.uk
+44 1491 69 2705

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Eric Rasche
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Tim,

Amazing! Thank you for sharing that code. That'll save me some work when
I get around to implementing it on my galaxies. I'll add a Wiki page for
it later today, lest this knowledge be lost to the mailing list.

Cheers,
Eric

On 01/27/2014 06:27 AM, Tim Booth wrote:

> Hi,
>
> I'm currently using one of those hacks, and it seems to work nicely for
> the user (Chrome + FF at least) but it does need some messy setting up
> in Apache and some cunning redirects in place.  I've pasted the relevant
> file fragments below.  It's somewhat confounded with my stuff to enable
> SFTP uploads but hopefully you get the idea and the original explanation
> on Stackoverflow is pretty good.  The remote_user_logout_href is
> something I got to by trial and error.
>
> Cheers,
>
> TIM
>
> ===
>
> % cat /usr/share/galaxy-server/logout/.htaccess
> # HaCk based on http://stackoverflow.com/questions/4163122/http-basic-authentication-log-out
> # Authname must match the one in ../proxy/.htaccess
>
> AuthType Basic
> AuthName Galaxy_Server
>
> AuthUserFile /usr/share/galaxy-server/logout/.htpasswd
> Require user logout
>
> ===
>
> % cat /usr/share/galaxy-server/logout/.htpasswd
> #Password is logout.  This in not a secret.
> logout:$apr1$0eB1iURY$kwqa0c8tXksbjPQLYqr6s.
>
> ===
>
> % cat /usr/share/galaxy-server/proxy/.htaccess
> # Security settings for Galaxy proxied via Apache.  Note the actual
> # proxy config is under /etc/apache2/conf.d/galaxy.  If for some
> # reason you wanted Apache proxy with internal Galaxy authentication
> # then you could remove this file and Apache would no longer insist on
> # authentication.
> AuthBasicProvider external
> AuthExternal pwauth
> AuthType Basic
> AuthName Galaxy_Server
>
> #I'd like to do this, but it upsets Firefox. Use ErrorDocument instead.
> # AuthName "Galaxy Server: \
> # Log in with regular username and password. \
> # Users need to be in the galaxy system group."
>
> ErrorDocument 401 "<html>\
> <title>401 Authorization Required</title>\
> <h1>Log-in to Galaxy failed</h1>\
> <p>You should have been prompted to log into the Galaxy server. \
> You need to give your regular system username and password. \
> Please reload this page to try again.</p>\
> <p>If this fails, check that you are a member of the galaxy system
> group, by \
> running <code>groups</code> on the command line.</p>\
> <p>To add a user, eg. user1, to this group, you may use the
> command:</p>\
> <ul><li><code>sudo usermod -aG galaxy user1</code></ul></li>\
> </html>"
>
> # You may want to comment these 2 lines out or to
> # change the group required, but users still need to
> # be in the galaxy group for SFTP uploads to work properly.
> AuthzUnixgroup on
> Require group galaxy
>
> # This is needed to tell Galaxy about the remote
> # user.
> RequestHeader set REMOTE_USER %{RU}e env=RU
> RequestHeader unset Authorization env=RU
>
> ===
>
> % cat /etc/galaxy-server/universe_wsgi.d/31_apache-proxy.ini                        
> # Settings added by debian-galaxy-apache-proxy to switch Galaxy over to
> # authenticating by real user accounts and also permitting uploads.
>
> [app:main]
>
> # Other scripts assume that maildomain is localhsot, so you can't just
> # change the setting below and expect everythig to work.
> use_remote_user = True
> remote_user_maildomain = localhost
>
> # Users may copy files here directly or upload via SFTP/SCP
> ftp_upload_dir = /var/lib/galaxy-server/transfer
> ftp_upload_site = *** Transfer files via SCP or SFTP to /var/lib/galaxy-server/transfer/... ***
>
> # There is no neat way to log out a user with Basic Auth, but here is a non-neat way.
> # Not yet tested on IE.
> remote_user_logout_href = javascript:var r=new XMLHttpRequest();r.onreadystatechange=function(){if(r.readyState==4)window.location.replace('logout.html')};r.open('get','logout.html',true,'logout','logout');r.send();
>
> ===
>
- --
Eric Rasche
Programmer II
Center for Phage Technology
Texas A&M University
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)

iQIcBAEBAgAGBQJS5nOgAAoJEMqDXdrsMcpVunUQAL1SwYf3Rux5wFKEkt35c7yc
YLrscQm0dTK3P/mzin29D/mr1qFYJbBBKx1wk4e4mG6qeLlX97x1JH/YdeNtT/9l
E2nFt4H/BKH4/5N6WDLnR4A+fkkbG3oXeBXf07s70vqQFrfhtDrA42VH2SfEWfVn
xp6O4hg72M7p07QiYe3B/jUerKxJ6Z354GDGjpbuoDNDMvJlbiD79hIZAkHltsJS
ubsyV3eiL0v+YwY4XV4oL8Lf72023P/38SizLgRbT0MRhQCzotpVlxEV55IT/KNd
Sj0/ggBQmy+uQv81J6qZ+dQILhPYiWR39jJq2IhfsQ06TyASrSs2sOuXZG33k//L
/aScLX2wOqjpgL5UOETqFSm1CzLUdJ+S9pR/cxmVGE8v92w/mnVwxYQrEzdmSpfw
1ouw77rOXtrVuL4GrcHoXeXQZIIumf7PrdLeTJzorrD/QKi7qh/M5ohMeoZqivkM
0yYXQpOOEat86f1HoLspWVH0kLUk0CCx9V0YxbL6sZ9xfMOJovWWPF+Ih4o3Xb+J
8NQn+NW7VROGQbx8nBaltx5WwZuq9KrAdQOduGbD6wWoHCO0P+Ix/O6hdjeHampu
eloRLoSJWP03XyKnsrrDpzrf+JbVkbN+5rJz6O+u6JyEFuF1MJssjAQ0FqxvaC2w
Zc89sZrfuOXE8krggNLJ
=gZ/s
-----END PGP SIGNATURE-----
___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Dave Clements-2
Hi Eric, Tim,

Hi Tim,

Amazing! Thank you for sharing that code. That'll save me some work when
I get around to implementing it on my galaxies. I'll add a Wiki page for
it later today, lest this knowledge be lost to the mailing list.

That is an excellent suggestion.  I've created a log board entry for it.:

 
The first for 2014.  Feel free to edit, or send me revisions.

Thanks,

Dave C.

-- 

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Eric Rasche

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I figured this was as good of a time as any...
I moved the AD/LDAP/External authentication out of the Apache Proxy page (who would think to look there?) and into its own page. I added my organisation's information on mod_auth_kerb while I was at it.

That seemed like a reasonable place to put this sort of information. I've also reduced the solution to just the necessary portions, but it would need to be tested by someone.

https://wiki.galaxyproject.org/Admin/Config/ExternalUserDatbases#Logging_out_Basic_Auth.27d_Users

I suggest we re-link the community log page to that subsection as it has more related information, if that is amenable to everyone.


On 01/27/2014 11:47 AM, Dave Clements wrote:
> Hi Eric, Tim,
>
>>
>> Hi Tim,
>>
>> Amazing! Thank you for sharing that code. That'll save me some work when
>> I get around to implementing it on my galaxies. I'll add a Wiki page for
>> it later today, lest this knowledge be lost to the mailing list.
>>
>
> That is an excellent suggestion.  I've created a log board entry for it.:
>
>   https://wiki.galaxyproject.org/Community/Logs
>
> The first for 2014.  Feel free to edit, or send me revisions.
>
> Thanks,
>
> Dave C.
>


Cheers,
Eric

- --
Eric Rasche
Programmer II
Center for Phage Technology
Texas A&M University
College Station, TX 77843
404-692-2048 <tel:4046922048>
[hidden email] [hidden email]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=xBnU
-----END PGP SIGNATURE-----


___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/
Reply | Threaded
Open this post in threaded view
|

Re: Remote User Logout

Dave Clements-2
Hi Eric,

I figured this was as good of a time as any...
I moved the AD/LDAP/External authentication out of the Apache Proxy page (who would think to look there?) and into its own page. I added my organisation's information on mod_auth_kerb while I was at it.

That seemed like a reasonable place to put this sort of information. I've also reduced the solution to just the necessary portions, but it would need to be tested by someone.

https://wiki.galaxyproject.org/Admin/Config/ExternalUserDatbases#Logging_out_Basic_Auth.27d_Users

Thanks for updating the admin wiki pages.  The admin wiki pages are sprawling and any efforts to keep them current and well organized are dearly appreciated.
 
I suggest we re-link the community log page to that subsection as it has more related information, if that is amenable to everyone.

I've updated https://wiki.galaxyproject.org/Community/Log/2014/LDAPRemoteUserLogout and added links to the two wiki pages. I left the content on the log page, although I'm not at all certain that is wise:

The log pages are meant to be a quick and easy way to document stuff and make it easy to find.  I think that leaving this log page (mostly) as it was will encourage contribution more than stripping it.  Most people are not going to be willing to locate the right pages in the wiki for all their content.  However, I'm hoping that if they can just drop content into one, time-stamped, no-commitment-to-keep-it-current, place then they will be way more likely to contribute.

That's my theory anyway.  So far, my theory hasn't particularly panned out, but the log board is still less than 2 months old.

Thanks again,

Dave C

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/