Force Logout after inactivity?

2012-04-27 Thread John Baker
Joe,

IE tabs: Microsoft have changed the way in which IE handles sessions in
various versions of Window, so you can't rely on a session remaining
when a tab is closed (I think that's true for Windows 7).

The logout problem was previously discussed on ARSlist and I recall
pointing out that the best solution would be that when a browser detects
a session has been killed in the Java webserver, they are prompted for
login credentials (if not using SSO Plugin) and allowed to continue
work. I'd expect some kind of dialog to appear informing them the
session has timed out and asking them if they want to continue where
they left off or quit the application.


John

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"


Re: Force Logout after inactivity?

2012-04-26 Thread Joe Martin D'Souza

Joel,

Whatever method you use to get your timing, PERFORM-ACTION-APPLICATION-EXIT 
will actually logout and not just close windows..

Closing windows would not logout, especially if you are using Windows Explorer 
with tabs or one of the other browsers with tabs.. the action stated above 
will.. This is available since version 5.5 if I am not mistaken...

Joe

From: Joel Sender 
Sent: Thursday, April 26, 2012 5:28 PM
Newsgroups: public.remedy.arsystem.general
To: arslist@ARSLIST.ORG 
Subject: Re: Force Logout after inactivity?

** 
ARS 7.6.4

WUT now, moving to M/T

This is a security requirement, not related to license management.

Requirement is to duplicate windows automatic screen lock in ARS application.

My initial suggestion to just reply upon Windows to lock up, but the ARS owner 
wants an even shorter time than the enterprise default.

 

60 Min floating license time-out is too long and this must apply to fixed 
license users, too.

 

Session timeout in M/T has same 60 minute minimum.

 

License Timeout has to do with the session license expiring after a browser is 
improperly closed:

“The mid-tier initiates a delay timer when the user closes the last browser

window associated with the established HTTP session. When the delay

timer expires, the user’s license is released, and the HTTP session

terminated.

If the user navigates back to the mid-tier URL before the delay time

expires, the delay timer is cancelled, and the current HTTP session is

resumed.” 

 

There has GOT to be an ARS way to do this (without an active link on every 
field!)

?

Joel

Joel Senderjdsen...@earthlink.net310.829.5552

 

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of patchsk
Sent: Thursday, April 26, 2012 12:08 PM
To: arslist@ARSLIST.ORG
Subject: Re: Force Logout after inactivity?

 

** Which version of remedy you are in.

Are you using thick client or web or both?

Incase if your intention is  to save licenses by ending the session,

There are a few options already available in latest versions.

Midtier -- Session Timeout, License Release timeout

ARS -- Floating License Timeout.

 

 


On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote:

** 

Anyone know a way to end an ARS session after a period of inactivity?

I thought of using an active link (on Save,  Display etc.) to update a ‘last 
activity’ field; add a timed-active link to compare the timestamp  and “close 
all” after the limit has been reached.

BUT that wouldn’t detect keystrokes, which could cause a time-out while 
entering text.

Anyone have a solution?

Thanks,

Joel

Joel Senderjdsen...@earthlink.net310.829.5552

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"


Re: Force Logout after inactivity?

2012-04-26 Thread Joel Sender
ARS 7.6.4

WUT now, moving to M/T

This is a security requirement, not related to license management.

Requirement is to duplicate windows automatic screen lock in ARS application.

My initial suggestion to just reply upon Windows to lock up, but the ARS owner 
wants an even shorter time than the enterprise default.

 

60 Min floating license time-out is too long and this must apply to fixed 
license users, too.

 

Session timeout in M/T has same 60 minute minimum.

 

License Timeout has to do with the session license expiring after a browser is 
improperly closed:

“The mid-tier initiates a delay timer when the user closes the last browser

window associated with the established HTTP session. When the delay

timer expires, the user’s license is released, and the HTTP session

terminated.

If the user navigates back to the mid-tier URL before the delay time

expires, the delay timer is cancelled, and the current HTTP session is

resumed.” 

 

There has GOT to be an ARS way to do this (without an active link on every 
field!)

?

Joel

Joel Senderjdsen...@earthlink.net310.829.5552

 

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of patchsk
Sent: Thursday, April 26, 2012 12:08 PM
To: arslist@ARSLIST.ORG
Subject: Re: Force Logout after inactivity?

 

** Which version of remedy you are in.

Are you using thick client or web or both?

Incase if your intention is  to save licenses by ending the session,

There are a few options already available in latest versions.

Midtier -- Session Timeout, License Release timeout

ARS -- Floating License Timeout.

 

 


On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote:

** 

Anyone know a way to end an ARS session after a period of inactivity?

I thought of using an active link (on Save,  Display etc.) to update a ‘last 
activity’ field; add a timed-active link to compare the timestamp  and “close 
all” after the limit has been reached.

BUT that wouldn’t detect keystrokes, which could cause a time-out while 
entering text.

Anyone have a solution?

Thanks,

Joel

Joel Senderjdsen...@earthlink.net310.829.5552

_attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_

_attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_


___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"


Re: Force Logout after inactivity?

2012-04-26 Thread Roger Justice

Since 7.6.04 users will be on the WEB you can do this in the MT configurations. 
I know your customer are not on 7.6.04 and do not plan on upgrading.

I thought I would try

Long time no see.



-Original Message-
From: Joel Sender 
To: arslist 
Sent: Thu, Apr 26, 2012 5:00 pm
Subject: Force Logout after inactivity?


** 
Anyone know a way to end an ARS session after a period of inactivity?
I thought of using an active link (on Save,  Display etc.) to update a ‘last 
activity’ field; add a timed-active link to compare the timestamp  and “close 
all” after the limit has been reached.
BUT that wouldn’t detect keystrokes, which could cause a time-out while 
entering text.
Anyone have a solution?
Thanks,
Joel
Joel Senderjdsen...@earthlink.net310.829.5552
_attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ 

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"


Re: Force Logout after inactivity?

2012-04-26 Thread patchsk
Which version of remedy you are in.
Are you using thick client or web or both?
Incase if your intention is  to save licenses by ending the session,
There are a few options already available in latest versions.
Midtier -- Session Timeout, License Release timeout
ARS -- Floating License Timeout.



On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote:
>
> ** 
>
> Anyone know a way to end an ARS session after a period of inactivity?
>
> I thought of using an active link (on Save,  Display etc.) to update a 
> ‘last activity’ field; add a timed-active link to compare the timestamp 
>  and “close all” after the limit has been reached.
>
> BUT that wouldn’t detect keystrokes, which could cause a time-out while 
> entering text.
>
> Anyone have a solution?
>
> Thanks,
>
> *Joel***
>
> Joel Senderjdsen...@earthlink.net310.829.5552
> _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_


___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"


Force Logout after inactivity?

2012-04-26 Thread Joel Sender
Anyone know a way to end an ARS session after a period of inactivity?

I thought of using an active link (on Save,  Display etc.) to update a ‘last 
activity’ field; add a timed-active link to compare the timestamp  and “close 
all” after the limit has been reached.

BUT that wouldn’t detect keystrokes, which could cause a time-out while 
entering text.

Anyone have a solution?

Thanks,

Joel

Joel Senderjdsen...@earthlink.net310.829.5552


___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"