Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to configure Apache to timeout sessions correctly. I have had a look through some results in Google but didn't quite understand how to set this.

Basically I would the users session to timeout after 15 mins of inactivity and also if the users browser is completely closed. Please can some one advise which settings I would need to change to achieve this? I would prefer to configure this at a global level rather than the vhost.

share|improve this question

HTTP has no concept of "sessions" - if you provide a session cookie after some scripted (non-apache) login procedure, then that is where this all happens.

You could configure the application to set the cookie to expire after 15 minutes; for this to work interactively you'd need to periodically re-check the cookie status from the application (e.g. using a global meta refresh, or AJAX).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.