Actually, we tried just dumping in the default templates in a test
yesterday.  That seemed to fix the issue at the time, but I got distracted
by another thing going on.  This morning I was having the same issue
again.  (This has been tricky to debug, it almost seems as if sometimes
there's a session cookie hanging on or perhaps there's a race condition).

I might try that again in a bit.

One thing I haven't really gotten a good answer on is what is the
state/point of the login forms with RemoteAuth.The impression I got from
some conversations with OCLC was that they're not used with RemoteAuth and
you're supposed to either to the .dll or to illiad.dll?action=10&form=10.

Jon Gorman
University of Illinois


On Thu, Jul 11, 2013 at 1:09 PM, Durrant, Benjamin E. <[log in to unmask]
> wrote:

> Have you added the FORMSTATE token to the login forms? We've been running
> into some similar issues recently and I just dug up this in the
> documentation:
>
> https://prometheus.atlas-sys.com/display/illiad/ILLiad+Web+DLL+Tags#ILLiadWebDLLTags-TheFormstateTag
>
> So it sounds like this was added in 8.1, but if you've modified the pages
> yourself you need to manually add this token into your page code.
>
> I haven't made the change on our pages yet, but I plan to shortly and can
> report back.
>
> Ben Durrant
> Web Developer - UST Libraries
> http://www.stthomas.edu/libraries
> [log in to unmask]
> 651-962-5416
>
>
>
> -----Original Message-----
> From: Code for Libraries [mailto:[log in to unmask]] On Behalf Of
> Jon Gorman
> Sent: Thursday, July 11, 2013 12:52 PM
> To: [log in to unmask]
> Subject: [CODE4LIB] ILLiad - RemoteAuth and OpenURL
>
> Hi all,
>
> I was wondering if anyone has seen an issue with the ILLiad RemoteAuth
> module and OpenURL where the remote user header doesn't seem to get
> recognized and a session doesn't created successfully.
>
>
> Here's how the flow is going:
>
> 1) User clicks on an OpenURL somewhere
> 2) User hits our authentication system (CA SIteminder) login apge
> 3) they log in
> 4) The open url seems to get parsed
>  into fields and the proper form selected
> 5) The web request goes through, complains it doesn't see an http header
> set and no cookie set and displays the content of the Logon2.html
> page/logoff page
> 6) However, the actual address bar is set just fine. If you hit refresh
> (or return in the address bar in some browsers) it launches a new session
> just fine and auto-fills out the form.
>
> As a workaround we're dong a javascript refresh, which works some of the
> time.  (Will be improving that, but would like to just fix the issue)
>
> This might be related to another issue we're seeing where on the initial
> login (to main menu) it never redirects to NewAuthRegistration.html or
> ChangeUserInformation.html.  If it's a new user, they just get created w/
> defaults.  The page always shown is Main Menu. The documentation & support
> at OCLC indicate that the application is supposed to be smart enough that
> on initial login it'll always either go to the NewAuthRegistration.html or
> ChangeUserInformation.html as appropriate.
>
> As a workaround currently we have a landing page that links to the Main
> Menu, NewAuthRegistration and ChangeUserInformation and advise users to
> register if they haven't or change their info if need be.
>
> The OCLC forums seem on the fritz. Is there any other good places to go
> with ILLiad questions. (I've been talking to OCLC Support, thinking more in
> terms of community support)
>