[GUACAMOLE-758] OpenID Guacamole Logout

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 0.9.14
• Component/s: guacamole-auth-openid
• Environment: centos-release-7-5.1804.5.el7.centos.x86_64
• Assignee: Unassigned
• Reporter: Christopoulos Alexandros
• Created: 20/Mar/19 10:32
• Updated: 02/Mar/20 02:29
• Resolved: 02/Mar/20 02:29

Description

I have a configuration that has Keycloak and Guacamole. Keycloak is the openID provider. The module I am using for guacamole to connect with Keycloak is guacamole-auth-openid 0.9.14. The login process works fine but whenever I log out from Keycloak client the guacamole session continues to exists. It seems that the logout for Guacamole does not work with the openID extension. There are two scenarios that this is happening:

 

1) I end the session from Keycloak admin and the logout event does not appear to be read by guacamole. After this logout process when redirecting to guacamole application I am still logged in guacamole.

 

2) When logged in with openID in guacamole, once logout button in guacamole is clicked you get logged in again.

 

From the above scenarios and by observing the network traffic in the browser it seems that the guacamole openID extension does not handle incoming logout events from openID provider.

Issue Links

• duplicates: GUACAMOLE-519 Implement Single Logout on OpenID Extension