BUG: OWA Logout

From: Brian Weatherhead (anonymous_at_discussions.microsoft.com)
Date: 07/15/04


Date: Thu, 15 Jul 2004 12:26:24 -0700


We have an Exchange service hosted. We access it using
OWA.

We also have a secure extranet environment (SSL) that
creates a secure cookie on the users machine. Now the
exchange server is not in the same network as the
extranet, but does share a similar domain name.

With a link from the extranet to OWA (opens in a new
window) the user can logon and access their email. If the
user just closes OWA without using "Logout" everything is
fine. If they use "Logout" OWA clears not only it's own
cookies, but the cookies set by the authentication engine
for the extranet.

Thus the user gets kicked from the extranet when they
logout of OWA.

The cookie name for the extranet is very unique and is
not the same as the exchange cookie.

I verified this by creating a ASP script that created a
cookie named "TEST54321" after the logout issue I attempt
read the cookie, and it's non existant.

Any Ideas?

Brian



Relevant Pages

  • Referencing variable in calling class?
    ... I assume because the cookie destruction is being sent down in that page ... when that page renders it still appears as if the user is logged ... So, I thought perhaps as part of my logout routine, I could set a variable ... whether or not it displays the 'login' url or the 'logout' url. ...
    (php.general)
  • Re: Outlook Web Access Timeout Problem
    ... Exchange 2003 is indeed 24hrs for the Private Cookie. ... Options), Privacy setting, and see what the Cookie settings are set to. ...
    (microsoft.public.exchange.admin)
  • Re: Simple question about cookies
    ... When the clicks on log out link, I set the expiry to past ... shouldn't happen because cookie is expired. ... In short my logout is not ... > Is that what's confusing you? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Re: php logout
    ... > Assuming you are using sessions for your authentication just call ... > session_destroyfunction when the logout button is clicked. ... Most likely you also have a cookie, and then you may want to ... Visit Topic URL to contact author (reg. ...
    (alt.php)
  • HELP: FormsAuthentication Cookie with multiple domains
    ... I'm having this really crazy problem. ... persistant) cookie. ... that by setting the domain of the formsauthentication cookie to ... that, i can't logout. ...
    (microsoft.public.dotnet.framework.aspnet.security)