Re: [webmin-devel] Session timeout with miniserv.pl

[Colm D. <col...@gm...>]

On 20 Apr 2005 21:16:20 +1000, Jamie Cameron <jca...@we...> wrote:
> On Wed, 2005-04-20 at 21:02, Colm Dougan wrote:
> > On 20 Apr 2005 14:01:37 +1000, Jamie Cameron <jca...@we...> wrot=
e:
> > > On Wed, 2005-04-20 at 11:53, Colm Dougan wrote:
> > > > Hi list,
> > > >
> > > > I am trying to implement a webmin module whereby there is an
> > > > inactivity timeout on the user session.  I can't seem to find any
> > > > documentation of how I do this in the docs or in the list archives =
but
> > > > I guess I must have missed this.
> >
> > ....
> >
> > > > Perhaps this funcionality is not supported any more or something bu=
t
> > > > I'd appreciate any advice people can give me on how I can do this, =
I
> > > > don't mind patching miniserv,pl if that is necessary.
> > >
> > > There is no way to access those pipes or the session database from a =
CGI
> > > script - they are internal to miniserv.pl, and used solely for
> > > communication between the master process and sub-processes. You could
> > > hack miniserv.pl to behave differently, but that would make your modu=
le
> > > dependent on a non-standard part of Webmin.
> > >
> > > What change are you trying to make exactly? I may be able to suggest =
a
> > > better solution ..
> >
> > Not sure exactly, I was considering having my CGI process create a
> > file somewhere called "${sessionid}.expired" with the timeout in it.
> > Then I was going to change the piece of code I mentioned earlier in
> > miniserv.pl to use this in that section.   I'd love to hear any other
> > suggestions you have,
> >
> > Having thought about it some more I think maybe I'm missing something
> > - is the session timeout something that already "just works" or was I
> > initially right in thinking that it was not a supported feature i.e.
> > can you clarify if there already is a standard way to use this and
> > maybe I can warp my thinking to that instead.
>=20
> The session timeout is already enforced by Webmin for all modules, and
> can be configured in the Webmin Configuration module under
> Authentication. So there isn't really any need to implement your own
> timeout, unless you want to do something special like adjust it on a
> per-module basis ..

Great - this is really useful.  Is this documented anywhere?

Thanks for your help.

Colm