Sessions expire too soon

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default Sessions expire too soon

    Hello
    we have a project with forms authentication and cookieless sessions, and we
    want a big session timeout. However the sessions still expire much more
    often (more than the default 20min, but much less than required) It is
    annoying because the users get redirected to the login screen
    The settings in Web.config are:
    <authentication mode="Forms" >
    <forms loginUrl="default.aspx" timeout="1440" />
    </authentication>
    ....
    <sessionState
    mode="InProc"
    stateConnectionString="tcpip=127.0.0.1:42424"
    sqlConnectionString="data source=127.0.0.1;user id=sa;password="
    cookieless="false"
    timeout="720"
    />
    Is there anything I miss, or nay be another reason that can end the session
    than teh timeout? Thanks

    Regards
    Plamen


    Plamen Doykov Guest

  2. Similar Questions and Discussions

    1. Expire
      I'm trying to use a script I found on this ng but it doesn't seem to work. This is the script on the first frame: var datToday = new Date(); var...
    2. #26021 [Opn->Bgs]: Why won't the session expire?
      ID: 26021 Updated by: sniper@php.net Reported By: oc34 at hotmail dot com -Status: Open +Status: ...
    3. #26021 [NEW]: Why won't the session expire?
      From: oc34 at hotmail dot com Operating system: NTFS PHP version: 4.3.3 PHP Bug Type: Session related Bug description: Why...
    4. Password expire
      Whenever password is expired & force user to change NT password for the web server, it seems to be assumption that asp application gives "interanal...
  3. #2

    Default Re: Sessions expire too soon

    Connection timeout is set to 900s (15min), but this has nothing to do with
    session timeout.
    However we found the KB324772 in msdn that explains the reason, and started
    using state server; hope it will behave well


    <David Coe>; "MCAD" <DavidCoeMCAD@discussions.microsoft.com> wrote in
    message news:2BF07EC6-85A9-478A-81F7-6BCC97508767@microsoft.com...
    > What is the timeout set to in IIS?
    >
    > "Plamen Doykov" wrote:
    >
    > > Hello
    > > we have a project with forms authentication and cookieless sessions, and
    we
    > > want a big session timeout. However the sessions still expire much more
    > > often (more than the default 20min, but much less than required) It is
    > > annoying because the users get redirected to the login screen
    > > The settings in Web.config are:
    > > <authentication mode="Forms" >
    > > <forms loginUrl="default.aspx" timeout="1440" />
    > > </authentication>
    > > ....
    > > <sessionState
    > > mode="InProc"
    > > stateConnectionString="tcpip=127.0.0.1:42424"
    > > sqlConnectionString="data source=127.0.0.1;user id=sa;password="
    > > cookieless="false"
    > > timeout="720"
    > > />
    > > Is there anything I miss, or nay be another reason that can end the
    session
    > > than teh timeout? Thanks
    > >
    > > Regards
    > > Plamen
    > >
    > >
    > >

    Plamen Doykov Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139