[imp] session expiring

Ramon Kagan rkagan@yorku.ca
Thu, 14 Feb 2002 10:52:14 -0500 (EST)


Okay, but what are the correct settings.

Below are mine, which is wrong?

[Session]
; Handler used to store/retrieve data.
session.save_handler = files

; Argument passed to save_handler.  In the case of files, this is the path
; where data files are stored. Note: Windows users have to change this
; variable in order to use PHP's session functions.
session.save_path = /mymail_attachments

; Whether to use cookies.
session.use_cookies = 0


; Name of the session (used as cookie name).
session.name = PHPSESSID

; Initialize session on request startup.
session.auto_start = 0

; Lifetime in seconds of cookie or, if 0, until browser is restarted.
session.cookie_lifetime = 0

; The path for which the cookie is valid.
session.cookie_path = /

; The domain for which the cookie is valid.
session.cookie_domain =

; Handler used to serialize data.  php is the standard serializer of PHP.
session.serialize_handler = php

; Percentual probability that the 'garbage collection' process is started
; on every session initialization.
session.gc_probability = 1

; After this number of seconds, stored data will be seen as 'garbage' and
; cleaned up by the garbage collection process.
session.gc_maxlifetime = 1440

; Check HTTP Referer to invalidate externally stored URLs containing ids.
session.referer_check =

; How many bytes to read from the file.
session.entropy_length = 0

; Specified here to create the session id.
session.entropy_file =

;session.entropy_length = 16

;session.entropy_file = /dev/urandom

; Set to {nocache,private,public} to determine HTTP caching aspects.
session.cache_limiter = nocache

; Document expires after n minutes.
session.cache_expire = 180

; use transient sid support if enabled by compiling with
--enable-trans-sid.
session.use_trans_sid = 1



Ramon Kagan
York University, Computing and Network Services
Unix Team -  Intermediate System Administrator
(416)736-2100 #20263
rkagan@yorku.ca

On Thu, 14 Feb 2002, Henry Blackman wrote:

> Please read my previous message about expiring sessions.  I've been battling
> this for some time.
>
> Basically:
> "I think this is an underlying problem in PHP sessions; problem being that
> admin's aren't specifying the session timeouts etc correctly (please check
> /usr/local/lib/php.ini) and what could be a huge problem if the
> time/date/timezone isn't correct on the client computer.
>
> At our institution we run a large document management system that users must
> sign into, it uses PHP sessions to control this sign in, but some of them
> get signed out too soon, or whatever; we found that more times out of ten,
> the time, date, or timezone was not set on the computer.  Our Novell network
> is now correctly timesynced to an atomic clock using NTP and therefore as
> they login to their computer the client is too, which is resulting in no
> more issues like this."
>
> Henry
>
>
> ----- Original Message -----
> From: "Ramon Kagan" <rkagan@yorku.ca>
> To: <imp@lists.horde.org>
> Sent: Thursday, February 14, 2002 3:16 PM
> Subject: [imp] session expiring
>
>
> > So I have this problem again.
> >
> > I'm not using cookies, url based sessions.
> >
> > I have this running on two machines with lvs, but the session_tmp space is
> > shared by both machines, via nfs.  So flipping between machines (which
> > doesn't really happen unless they do a hard reload) shouldn't cause any
> > problems.  In any case the logs show expiring on the same machine.  Could
> > the time on the user's PC be the problem?
> >
> > Ramon Kagan
> > York University, Computing and Network Services
> > Unix Team -  Intermediate System Administrator
> > (416)736-2100 #20263
> > rkagan@yorku.ca
> >
> >
> > --
> > IMP mailing list: http://horde.org/imp/
> > Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
> > Frequently Asked Questions: http://horde.org/faq/
> > To unsubscribe, mail: imp-unsubscribe@lists.horde.org
> >
> >
>
>
> --
> IMP mailing list: http://horde.org/imp/
> Archive: http://marc.theaimsgroup.com/?l=imp&r=1&w=2
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
>