Websphere timeout?

[Nate Leech]

Hello all,

I have an application running on a websphere server and sometimes users have reporting being in the middle of working on something in the app and then being brought back to the login page. I know this has nothing to do with the session, because the session won't timeout while requests are being made. Is something set in Websphere that will time you out of your application even if you are actively using an app?

Thanks!

-Nate

[Nate Leech]

Okay, i've been googling around and think i have narrowed it down.

Our server has an Authentication mechanism that has Timeout set at 120 minutes. My new question is this:

Does the timeout in this field start over when a user sends a request to the server? Or does the timeout start when the user logs in, and ticks down no matter how much activity is going on?

Thanks!

-Nate

[Jeanne Boyarsky]

Originally posted by Nate Leech:
Does the timeout in this field start over when a user sends a request to the server?

It should be like this. Is it possible someone rebooted while the users were logged in?

[Nate Leech]

I don't think so. The app is running on a Production server that only gets the reboot on Wednesday nights. The reports on having to log back in occurred during the day. We also confirmed with the application server admins that no server reboot occurred at the time of the reports.

[Kristin Stromberg]

Hi Nate, have you looked here?

[Nate Leech]

Nope, not yet. Thanks for the link. I'll check that out!

[OVvince chan]

Is there any web containers within the application server and user machines?

[David O'Meara]

are you using LTPA? It has it's own timeout value separate to the session value. In theory if this value is smaller than the session timeout, the LTPA token (stored in a separate encrypted cookie) will be rejected while the user is still logged in.

If I remember correctly, this value may be absolute, so they would be logged out after every X seconds regardless of their activity. This caused us a number of headaches, you can search this forum for more stories about LTPA...

[Nate Leech]

David,
Yes we are using LPTA. So there really isn't a solution to this then? Besides bugging the server admins to make the timeout longer?

Will setting the session timeout to be less than the LPTA timeout help at all?

Thanks!

-Nate
[ August 22, 2005: Message edited by: Nate Leech ]

[David O'Meara]

Have a look at these threads:
https://coderanch.com/t/71968/Websphere/Websphere-Security-Caching
https://coderanch.com/t/71921/Websphere/Clear-or-refresh-credentials-cache

I hope this helps. Unfortunately it has been a long time since I've used Websphere, about the time of the posts.

Dave