[EP-tech] EPrints webserver authentication, skipping authentication?

[Jose Martin]

Hi,

Has anyone implemented EPrints webserver authentication as in http://files.eprints.org/738/?

I have integrated a 3.3.10 repository with an external Shibboleth authentication system, but it seems that once a session is successfully started, you can launch another browser and upon clicking "Login", it will "steal" the other browser's session and display the "Manage deposits | Profile..." options.

Apparently, it reuses the login ticket from the former, valid session.

Has anyone noticed this behaviour as well?

Cheers,

                Jose


----
Jose Martin
Digital Repositories Specialist
Research Technologies Group
University of London Computer Centre
Senate House  |  Malet Street  |  London  |  WC1E 7HU

t: +44 (0)20 7863 1342
e: J.Martin at ulcc.ac.uk
w: http://www.ulcc.ac.uk/
b: http://dablog.ulcc.ac.uk/

The University of London is an exempt charity in England and Wales and a charity registered in Scotland (reg. no. SC041194)
----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20130122/54b438ee/attachment.html