Subject: Re: Session Timeout for Apache?
At 01:59 PM 7/21/03, Mike McMullen wrote: > Does anyone know of a utility or code that will > time-out a web session with Apache?
in httpd.conf (default is 5 minutes):
# # Timeout: The number of seconds before receives and sends time out. #
Timeout 300
Please forgive my ignorance on this but looking at the documentation now for timeout I'm not certain this addresses what I want to do.
I have users who access their information via certain CGI in their public_html/bin directories of the home directories.
When they access their CGI and files they are prompted for their username and password via the pop-up window.
What I would like to have happen is after say 30 minutes of inactivity, if someone tries to click a button or run a CGI, they get prompted with the
pop-up login window of Apaches.
Does Timeout address that?
Sorry if this is "intuitively obvious",
Mike
Using .htaccess to protect the directory?
http://httpd.apache.org/docs/howto/auth.html#basicfaq "How do I log out?
Since browsers first started implementing basic authentication, website administrators have wanted to know how to let the user log out. Since the browser caches the username and password with the authentication realm, as described earlier in this tutorial, this is not a function of the server configuration, but is a question of getting the browser to forget the credential information, so that the next time the resource is requested, the username and password must be supplied again. There are numerous situations in which this is desirable, such as when using a browser in a public location, and not wishing to leave the browser logged in, so that the next person can get into your bank account.
However, although this is perhaps the most frequently asked question about basic authentication, thus far none of the major browser manufacturers have seen this as being a desirable feature to put into their products.
Consequently, the answer to this question is, you can't. Sorry."
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
