Re: [webmin-devel] Session timeout with miniserv.pl

[Jamie C. <jca...@we...>]

On Wed, 2005-04-20 at 21:40, Colm Dougan wrote:
> On 20 Apr 2005 21:16:20 +1000, Jamie Cameron <jca...@we...> wrote:
> > On Wed, 2005-04-20 at 21:02, Colm Dougan wrote:
> > > On 20 Apr 2005 14:01:37 +1000, Jamie Cameron <jca...@we...> wrote:
> > > > On Wed, 2005-04-20 at 11:53, Colm Dougan wrote:
> > > > > Hi list,
> > > > >
> > > > > I am trying to implement a webmin module whereby there is an
> > > > > inactivity timeout on the user session.  I can't seem to find any
> > > > > documentation of how I do this in the docs or in the list archives but
> > > > > I guess I must have missed this.
> > >
> > > ....
> > >
> > > > > Perhaps this funcionality is not supported any more or something but
> > > > > I'd appreciate any advice people can give me on how I can do this, I
> > > > > don't mind patching miniserv,pl if that is necessary.
> > > >
> > > > There is no way to access those pipes or the session database from a CGI
> > > > script - they are internal to miniserv.pl, and used solely for
> > > > communication between the master process and sub-processes. You could
> > > > hack miniserv.pl to behave differently, but that would make your module
> > > > dependent on a non-standard part of Webmin.
> > > >
> > > > What change are you trying to make exactly? I may be able to suggest a
> > > > better solution ..
> > >
> > > Not sure exactly, I was considering having my CGI process create a
> > > file somewhere called "${sessionid}.expired" with the timeout in it.
> > > Then I was going to change the piece of code I mentioned earlier in
> > > miniserv.pl to use this in that section.   I'd love to hear any other
> > > suggestions you have,
> > >
> > > Having thought about it some more I think maybe I'm missing something
> > > - is the session timeout something that already "just works" or was I
> > > initially right in thinking that it was not a supported feature i.e.
> > > can you clarify if there already is a standard way to use this and
> > > maybe I can warp my thinking to that instead.
> > 
> > The session timeout is already enforced by Webmin for all modules, and
> > can be configured in the Webmin Configuration module under
> > Authentication. So there isn't really any need to implement your own
> > timeout, unless you want to do something special like adjust it on a
> > per-module basis ..
> 
> Great - this is really useful.  Is this documented anywhere?

Only in my book unfortunately :-)
Although the default works well for most people, so it isn't often
changed..

 - Jamie