File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
The moose likes Security and the fly likes force logout Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "force logout" Watch "force logout" New topic
Author

force logout

Muhammad Imad Qureshi
Ranch Hand

Joined: Sep 13, 2005
Posts: 238
How do I force the user to logout after certain period of activity lets say 60 minutes. In my web.xml I have

<session-config>
<session-timeout>20</session-timeout>
</session-config>

is this the only place to configure force logout or is there anything else.
I am using jboss.
Thanks
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41052
    
  43
The session timeout triggers after a certain period of inactivity. If you want to log out a user after a certain amount of activity, you'll need to implement that yourself - the servlet API has no provisions for that. But why would you want to log out an active user?


Ping & DNS - my free Android networking tools app
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: force logout
 
Similar Threads
need help with session time our
session problem
what is session expunging?was asked this question in an interview?
session timeout in DD
Interview question asked to me which I could not answer