Open Edition

 View Only
  • 1.  Session Timeout - is it possible to change the default

    Posted Tue October 17, 2023 11:43 AM

    Was asked this question from a client:

    Issue – Business Central (IBM BAM OE UI) is getting auto logged out (Session Timeout) in 5-10 minutes which was not the case with RHPAM or jBPM. Can you please help us in this and check what is the causing this auto logout? Is it possible to extend the time?Post



    ------------------------------
    Gerry McLaughlin
    ------------------------------


  • 2.  RE: Session Timeout - is it possible to change the default

    Posted Thu October 19, 2023 05:48 AM

    Hi Gerry, 

    On my standalone instance, I can change the session timeout in the \boss-eap-7.4\standalone\deployments\business-central.war\WEB-INF\web.xml

      <!-- the number within the session-timout element must be expressed in
    minutes. it is now 24 hours. -->
      <session-config>
        <session-timeout>1440</session-timeout>
        <cookie-config>
          <http-only>true</http-only>
        </cookie-config>
      </session-config>


    ------------------------------
    NIGEL CROWTHER
    ------------------------------



  • 3.  RE: Session Timeout - is it possible to change the default

    Posted Mon December 18, 2023 01:23 PM

    Hi Nigel,

    This session-timeout = 1440 minutes ( I believe it is set to 1440 minutes by default). 

    we got timeout around 10 minutes, so it doesn't seem to be related. 

    If it is, then what should we increase the number to?

    Thanks,
    Thu Phan



    ------------------------------
    THU Phan
    ------------------------------



  • 4.  RE: Session Timeout - is it possible to change the default

    Posted Tue December 19, 2023 01:56 PM

    Hi Gerry,

    I resolved this problem by increasing the <max-age> value:

    <!-- the number within the session-timout element must be expressed in
    minutes. it is now 24 hours. -->
      <session-config>
        <session-timeout>1440</session-timeout>
        <cookie-config>
          <path>/</path>
          <http-only>true</http-only>
          <secure>false</secure>
          <max-age>1440</max-age>
        </cookie-config>
      </session-config>

    The <session-timeout> is in minutes, however, the <max-age> is in seconds.

    The <max-age> is set when the JSESSION cookie is expired in seconds, which causing the timeout.

    You can either remove the <max-age> or increase it to a higher value.

    Hope that helps!



    ------------------------------
    THU Phan
    ------------------------------