Skip to main content
scerazy
scerazy
Visitor III
June 20, 2012
Question

User logout URL ?

  • June 20, 2012
  • 4 replies
  • 14720 views
I have authentication set to 40 min My Staff/Students mix machines, so it happens often that staff will be using workstation that is still logged to firewall (firewall authentication on Macs) as student (hence having student restrictions applied) Is there a URL that allows user to logout off the firewall? Of course I can do it from ADMIN web GUI, but that is not the point I need self-service for a user to be able to log off him/her self Seb

    4 replies

    Faheem
    Faheem
    New Member
    June 20, 2012
    I' m not getting you so i cant say anything ..... Write it in a way that is easy to understand. CLI or GUI ? Staff / Student admin profiles ?
    billp
    billp
    New Member
    June 20, 2012
    Is there a URL that allows user to logout of the firewall?
    Short answer: no. I am assuming you are using the web-based login window for your Macs. Longer answer: You can fudge things by using 
    config global auth-keepalive enable
    This will create an additional browser window when you login that will keep the connection alive as long as the browser is up. On that page, there is a button that can forcibly end the authentication session. I played with it early on but decided it was not worth the trouble for my particular setup. Instead, I opted for shorter timeouts with the assumption that most stations would be idle for at least 5-10 minutes before another user tried using one. If you wanted to try to hack something, it might be possible to create a script that could be uploaded to the firewall to periodically kill the connections on a set of machines with known IPs. Some of the other admins here might be able to comment on that approach.
    scerazy
    scerazyAuthor
    Visitor III
    September 12, 2012
    Strange that nobody else chipped in... Yes, I implemented config global auth-keepalive enable which would be perfect if the window did not have to stay open I might consider shorter timeouts Seb
    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    September 12, 2012
    Maybe have a look at 
     config user setting     set auth-timeout <minutes>     set auth-timeout-type {idle-timeout|hard-timeout|new-session}
    These were introduced in 4.3.6, see RN or " What' s New in MR3 patch 6" .
    Terms & ConditionsAccessibility statement