Environment
Novell Access Management 3 Linux Access Gateway
Novell Access Management 3 Netware Access Gateway
Novell Access Management 3 Linux Novell Identity Server
iChain 2.3
Access Manager Interim Release 2 or greater applied
Situation
Many applications accelerated by iChain would modify their logout links so a logout
from the application would automatically log the user out of iChain at the same time.
In order to do this, the application logout link would have to redirect the user to
the iChain logout link at /cmd/ICSLogout or /cmd/BM-Logout.
With Novell Access Gateway IR2 builds and above, the Netware Access Gateway no longer
supports the above logout paths of /cmd/ICSLogout or /cmd/BM-Logout. The new /AGLogout
is intended as a replacement and will be consistent amongst the Linux and NetWare
Access Gateways.
Existing iChain, and Access Manager setups pre IR2, may have configurations using
the old paths. In addition, certain Novell products such as IDM and GroupWise Webaccess
have default GUI settings which default to the old paths when configuring for simultaneous
logout.
Resolution
For a single sign out experience from both the application and Access Gateway, the
application logout link must redirect the user to the Access Gateway logout link at
/cmd/AGLogout.