Ask a Question related to ASP.NET Security, Design and Development.
-
Plamen Doykov #1
Sessions expire too soon
Hello
we have a project with forms authentication and cookieless sessions, and we
want a big session timeout. However the sessions still expire much more
often (more than the default 20min, but much less than required) It is
annoying because the users get redirected to the login screen
The settings in Web.config are:
<authentication mode="Forms" >
<forms loginUrl="default.aspx" timeout="1440" />
</authentication>
....
<sessionState
mode="InProc"
stateConnectionString="tcpip=127.0.0.1:42424"
sqlConnectionString="data source=127.0.0.1;user id=sa;password="
cookieless="false"
timeout="720"
/>
Is there anything I miss, or nay be another reason that can end the session
than teh timeout? Thanks
Regards
Plamen
Plamen Doykov Guest
-
Expire
I'm trying to use a script I found on this ng but it doesn't seem to work. This is the script on the first frame: var datToday = new Date(); var... -
#26021 [Opn->Bgs]: Why won't the session expire?
ID: 26021 Updated by: sniper@php.net Reported By: oc34 at hotmail dot com -Status: Open +Status: ... -
#26021 [NEW]: Why won't the session expire?
From: oc34 at hotmail dot com Operating system: NTFS PHP version: 4.3.3 PHP Bug Type: Session related Bug description: Why... -
Password expire
Whenever password is expired & force user to change NT password for the web server, it seems to be assumption that asp application gives "interanal... -
Plamen Doykov #2
Re: Sessions expire too soon
Connection timeout is set to 900s (15min), but this has nothing to do with
session timeout.
However we found the KB324772 in msdn that explains the reason, and started
using state server; hope it will behave well
<David Coe>; "MCAD" <DavidCoeMCAD@discussions.microsoft.com> wrote in
message news:2BF07EC6-85A9-478A-81F7-6BCC97508767@microsoft.com...we> What is the timeout set to in IIS?
>
> "Plamen Doykov" wrote:
>> > Hello
> > we have a project with forms authentication and cookieless sessions, andsession> > want a big session timeout. However the sessions still expire much more
> > often (more than the default 20min, but much less than required) It is
> > annoying because the users get redirected to the login screen
> > The settings in Web.config are:
> > <authentication mode="Forms" >
> > <forms loginUrl="default.aspx" timeout="1440" />
> > </authentication>
> > ....
> > <sessionState
> > mode="InProc"
> > stateConnectionString="tcpip=127.0.0.1:42424"
> > sqlConnectionString="data source=127.0.0.1;user id=sa;password="
> > cookieless="false"
> > timeout="720"
> > />
> > Is there anything I miss, or nay be another reason that can end the> > than teh timeout? Thanks
> >
> > Regards
> > Plamen
> >
> >
> >
Plamen Doykov Guest



Reply With Quote

