Force Logout after inactivity?
Joe, IE tabs: Microsoft have changed the way in which IE handles sessions in various versions of Window, so you can't rely on a session remaining when a tab is closed (I think that's true for Windows 7). The logout problem was previously discussed on ARSlist and I recall pointing out that the best solution would be that when a browser detects a session has been killed in the Java webserver, they are prompted for login credentials (if not using SSO Plugin) and allowed to continue work. I'd expect some kind of dialog to appear informing them the session has timed out and asking them if they want to continue where they left off or quit the application. John ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
Re: Force Logout after inactivity?
Joel, Whatever method you use to get your timing, PERFORM-ACTION-APPLICATION-EXIT will actually logout and not just close windows.. Closing windows would not logout, especially if you are using Windows Explorer with tabs or one of the other browsers with tabs.. the action stated above will.. This is available since version 5.5 if I am not mistaken... Joe From: Joel Sender Sent: Thursday, April 26, 2012 5:28 PM Newsgroups: public.remedy.arsystem.general To: arslist@ARSLIST.ORG Subject: Re: Force Logout after inactivity? ** ARS 7.6.4 WUT now, moving to M/T This is a security requirement, not related to license management. Requirement is to duplicate windows automatic screen lock in ARS application. My initial suggestion to just reply upon Windows to lock up, but the ARS owner wants an even shorter time than the enterprise default. 60 Min floating license time-out is too long and this must apply to fixed license users, too. Session timeout in M/T has same 60 minute minimum. License Timeout has to do with the session license expiring after a browser is improperly closed: “The mid-tier initiates a delay timer when the user closes the last browser window associated with the established HTTP session. When the delay timer expires, the user’s license is released, and the HTTP session terminated. If the user navigates back to the mid-tier URL before the delay time expires, the delay timer is cancelled, and the current HTTP session is resumed.” There has GOT to be an ARS way to do this (without an active link on every field!) ? Joel Joel Senderjdsen...@earthlink.net310.829.5552 From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of patchsk Sent: Thursday, April 26, 2012 12:08 PM To: arslist@ARSLIST.ORG Subject: Re: Force Logout after inactivity? ** Which version of remedy you are in. Are you using thick client or web or both? Incase if your intention is to save licenses by ending the session, There are a few options already available in latest versions. Midtier -- Session Timeout, License Release timeout ARS -- Floating License Timeout. On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote: ** Anyone know a way to end an ARS session after a period of inactivity? I thought of using an active link (on Save, Display etc.) to update a ‘last activity’ field; add a timed-active link to compare the timestamp and “close all” after the limit has been reached. BUT that wouldn’t detect keystrokes, which could cause a time-out while entering text. Anyone have a solution? Thanks, Joel Joel Senderjdsen...@earthlink.net310.829.5552 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
Re: Force Logout after inactivity?
ARS 7.6.4 WUT now, moving to M/T This is a security requirement, not related to license management. Requirement is to duplicate windows automatic screen lock in ARS application. My initial suggestion to just reply upon Windows to lock up, but the ARS owner wants an even shorter time than the enterprise default. 60 Min floating license time-out is too long and this must apply to fixed license users, too. Session timeout in M/T has same 60 minute minimum. License Timeout has to do with the session license expiring after a browser is improperly closed: “The mid-tier initiates a delay timer when the user closes the last browser window associated with the established HTTP session. When the delay timer expires, the user’s license is released, and the HTTP session terminated. If the user navigates back to the mid-tier URL before the delay time expires, the delay timer is cancelled, and the current HTTP session is resumed.” There has GOT to be an ARS way to do this (without an active link on every field!) ? Joel Joel Senderjdsen...@earthlink.net310.829.5552 From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of patchsk Sent: Thursday, April 26, 2012 12:08 PM To: arslist@ARSLIST.ORG Subject: Re: Force Logout after inactivity? ** Which version of remedy you are in. Are you using thick client or web or both? Incase if your intention is to save licenses by ending the session, There are a few options already available in latest versions. Midtier -- Session Timeout, License Release timeout ARS -- Floating License Timeout. On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote: ** Anyone know a way to end an ARS session after a period of inactivity? I thought of using an active link (on Save, Display etc.) to update a ‘last activity’ field; add a timed-active link to compare the timestamp and “close all” after the limit has been reached. BUT that wouldn’t detect keystrokes, which could cause a time-out while entering text. Anyone have a solution? Thanks, Joel Joel Senderjdsen...@earthlink.net310.829.5552 _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
Re: Force Logout after inactivity?
Since 7.6.04 users will be on the WEB you can do this in the MT configurations. I know your customer are not on 7.6.04 and do not plan on upgrading. I thought I would try Long time no see. -Original Message- From: Joel Sender To: arslist Sent: Thu, Apr 26, 2012 5:00 pm Subject: Force Logout after inactivity? ** Anyone know a way to end an ARS session after a period of inactivity? I thought of using an active link (on Save, Display etc.) to update a ‘last activity’ field; add a timed-active link to compare the timestamp and “close all” after the limit has been reached. BUT that wouldn’t detect keystrokes, which could cause a time-out while entering text. Anyone have a solution? Thanks, Joel Joel Senderjdsen...@earthlink.net310.829.5552 _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
Re: Force Logout after inactivity?
Which version of remedy you are in. Are you using thick client or web or both? Incase if your intention is to save licenses by ending the session, There are a few options already available in latest versions. Midtier -- Session Timeout, License Release timeout ARS -- Floating License Timeout. On Thursday, April 26, 2012 1:51:36 PM UTC-5, Joel Sender wrote: > > ** > > Anyone know a way to end an ARS session after a period of inactivity? > > I thought of using an active link (on Save, Display etc.) to update a > ‘last activity’ field; add a timed-active link to compare the timestamp > and “close all” after the limit has been reached. > > BUT that wouldn’t detect keystrokes, which could cause a time-out while > entering text. > > Anyone have a solution? > > Thanks, > > *Joel*** > > Joel Senderjdsen...@earthlink.net310.829.5552 > _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
Force Logout after inactivity?
Anyone know a way to end an ARS session after a period of inactivity? I thought of using an active link (on Save, Display etc.) to update a ‘last activity’ field; add a timed-active link to compare the timestamp and “close all” after the limit has been reached. BUT that wouldn’t detect keystrokes, which could cause a time-out while entering text. Anyone have a solution? Thanks, Joel Joel Senderjdsen...@earthlink.net310.829.5552 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"