[imp] "Logout" does not effectively end session.

Christopher Crowley ccrowley@tulane.edu
Fri, 31 May 2002 07:35:22 -0500


 Here's the situation that I am seeing.

 The server's configuration is set to use IMP to authenticate the session.

 If I go to https://server/horde and log on to this page ( as opposed to
 browsing to https://server/horde/imp ) I can select "Logout" then use the
 back button, and read mail, open my inbox, open the calendar...

 This problem doesn't seem to occur if I start at https://server/horde/imp .
 So, is there a way to force users to start at imp?

 I have tried this with both shm and sql sessions management.

Are others seeing this behavior? Do you suspect there is a misconfiguration
on my installation?  Please make suggestions for tests to troubleshoot this
problem.

Thanks in advance.

Christopher Crowley
TIS Network Services
Tulane University
ccrowley@tulane.edu
504.314.2535
PGP Key ID: 0x7CF18FDB