From: Colm D. <col...@gm...> - 2005-04-20 14:44:13
|
> > > The session timeout is already enforced by Webmin for all modules, an= d > > > can be configured in the Webmin Configuration module under > > > Authentication. So there isn't really any need to implement your own > > > timeout, unless you want to do something special like adjust it on a > > > per-module basis .. > > > > Great - this is really useful. Is this documented anywhere? >=20 > Only in my book unfortunately :-) > Although the default works well for most people, so it isn't often > changed.. I got it working by adding "logouttime=3D3" to miniserv.conf. A gotcha with this is that if you have any CGI scripts that reload themselves periodically with JavaScript then you can find that you never hit the timeout because the JavaScriipt reload (quite understandably) is activity. Not that I'd expect webmin to deal with that - I'm just mentioning it. I'll most probably have to patch webmin to have a list of URLs that will not count as a request for the purposes of calculating the timeout. Thanks again. Colm |