IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  max-timeout-flush-interval

    Posted Thu March 24, 2022 05:49 PM
    Hi

    Here is an interesting technote from IBM support about how lifetime expiration is actually processed:

    https://www.ibm.com/support/pages/inactive-timeouttimeout-delay-websealdconf-will-have-some-delay-taking-effect

    Now the question is: did the proposed setting [session] max-timeout-flush-interval ever made its way in ISAM/ISVA Appliance ?

    I can't seem to find a reference about it.

    ------------------------------
    Sylvain Gilbert
    ------------------------------


  • 2.  RE: max-timeout-flush-interval

    Posted Thu March 24, 2022 06:23 PM

    Sylvain,

     

    The 'max-timeout-flush-interval' configuration entry is still available, it is just that it has not been documented.  The way that the session cache works is that a thread periodically polls the cache for expired entries – and max-timeout-flush-interval can control how often the cache is polled.  This thread is purely used to reduce the size of the cache, and is just one mechanism by which expired entries are removed.  If a request comes into WebSEAL for a particular session, a check is also done at this point in time to ensure that the session has not expired. 

     

    I hope that this helps.

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

     




    Original Message


Related Content