Re: [SM-USERS] Random Logout Problem

[William T. <tih...@ta...>]

Hi Jason & Kyle,

Thanks for the information on session.gc_maxlifetime & pointer to this
document.  

Can someone clarify 2 points in it for me.  

1) SquirrelMail configuration variable "Auto Refresh Folder List"
defaults to "Never".

Is there an easy place in the SquirrelMail code where I can change this
default for all users?

2) Raising the "session.gc_probability" PHP variable value to something
more appropriate to SquirrelMail (ie. 8 to 12 hours) in the http.conf
file. 
[Do I want to change the probablility or the maxlifetime -- maxlifetime
seems more logical, but I don't know what the probability variable does
and Jason seemed to indicate that I want to change the maxlifetime too]
&
Change the variable's value in a non-global, SquirrelMail specific
portion of the http.conf file.  

Can someone give me an example of doing this I didn't find any useful
information on the PHP site or the apache site -- (please feel free to
tell me where I would find the appropriate information.)


3) Use a cron job (or the equivalent on your system) to periodically
remove abandoned session data from the save path.  Can someone give me
an example of this?  In particular -- how do I tell an abandoned session
from an active session -- I don't want to make the problem worse. 

Thanks for this help.  My users will be very appreciative.

Bill

On Mon, 2002-02-18 at 18:24, Kyle Herbert wrote:
> Greetings :-)
> 
> http://www.squirrelmail.org/wiki/BrowseProblemsByComplaint
> 
  3. Move the "session.save_path" to someplace other than /tmp that is
readable and writable only by the web server application. This will
increase the difficulty of a user hijacking a SquirrelMail session. Pick
a partition that can't DoS the whole server if it is filled.


Hope this helps!


> Scan the page for "AutoMagicLogout"
> 
> Hope this helps.
> 
> --Kyle
> 
> 
> > Hello,
> >
> > I am using Sendmail 1.2.4 on a RH 7.2 machine (standard installs).
> >
> > My users are complaining about being logged out at unexpected times --
> > while using Netscape 4.78 on Windows 2000 (sometimes/usually after
> > writing longer emails).
> >
> > Is there a setting I can change that will increase the session length?
> > I do not have the autologout plugin installed.  (I did have SM 1.2.3
> > installed (with the autologout -- but removed it due to complaints --
> > when I upgraded I removed sm 1.2.3 and installed sm 1.2.4 -- I found
> > that a simpler way to upgrade).
> >
> > Ideas would be appreciated.  (Other from this logout problem, sm seems
> > well recieved)!
> >
> > Thanks,
> >
> > Bill
> >
> >
> > --
> > squirrelmail-users mailing list
> > List Address: squ...@li...
> > List Info:
> > https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
> > http://squirrelmail.org/cvs
> 
> 
> 
> 
> --
> squirrelmail-users mailing list
> List Address: squ...@li...
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
> http://squirrelmail.org/cvs