Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to configure Apache to timeout sessions correctly. I have had a look through some results in Google but didn't quite understand how to set this.

Basically I would the users session to timeout after 15 mins of inactivity and also if the users browser is completely closed. Please can some one advise which settings I would need to change to achieve this? I would prefer to configure this at a global level rather than the vhost.

share|improve this question
add comment

1 Answer

HTTP has no concept of "sessions" - if you provide a session cookie after some scripted (non-apache) login procedure, then that is where this all happens.

You could configure the application to set the cookie to expire after 15 minutes; for this to work interactively you'd need to periodically re-check the cookie status from the application (e.g. using a global meta refresh, or AJAX).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.