Session Timeout for Unauthenticated Sessions

How should I alter the session timeout length for unauthenticated sessions?For example, we've all been on the Access Manager login screen and been idle for more than a few minutes. When you come back and try to logon, you get the "Your session has timed out" error message.

Will modifying the value of "iplanet-am-session-max-session-time" in the ou=1.0,ou=iPlanetAMSessionService,ou=services,o=orgname DN affect this timeout length for unauthenticated sessions/users?

Thanks,

/Jed

[507 byte] By [jthrewa] at [2007-11-27 11:39:46]
# 1

I see the following solution mentioned in another thread ( http://forum.java.sun.com/thread.jspa?forumID=770&threadID=5104625)

"Hope auth/session folks will confirm:

Try AMConfig.properties param:

com.iplanet.am.session.purgedelay"

Is this a legitimate approach?

jthrewa at 2007-7-29 17:28:05 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

The correct property to use is this. purgeDelay is used to keep the session after the session has timed out(this is used to displaly session timeout message for example).

/*

* The following key is used to keep the invalid session in session table

* for this period. Value is in minutes (for e.g. 3 minutes)

* Note: This value should always be greater than the timeout value in your

* auth module properties file

*/

com.iplanet.am.session.invalidsessionmaxtime=10

shivaram

shivarambhata at 2007-7-29 17:28:05 > top of Java-index,Web & Directory Servers,Directory Servers...