[horde] Horde form tokens

[Chuck Hagenbuch]

Quoting Andrew Morgan <morgan at orst.edu>:

> Okay, I'm checking with the user to see if they are logged out at  
> the time this error occurs.
>
> Side note - it seems there are 2 token_lifetime config parameters:
>
> $conf['urls']['token_lifetime'] = 240;  (in horde's conf.php)
> $conf['server']['token_lifetime'] = 1800;  (in imp's conf.php)

Yup. We added the feature after Horde 3.0, so for backwards  
compatibility it needed to be in both places.

> The horde parameters is specified in minutes and the imp parameter  
> is specified in seconds.

I think we changed the Horde one. We could change the IMP one too, but  
at this point the IMP one is deprecated in git.

> Do these parameters both serve the same purpose?  Should I set them  
> to the same value (in the appropriate unit of time)?  I'm not sure  
> why I increased the horde value from the default 30 minutes to 240  
> minutes.  Are other folks using higher values, or should I stick to  
> the defaults?

I would say you want the same effective value, yes.

-chuck