MIME-Version: 1.0
In-Reply-To: <517A6C78.7000101@xk7.net>
References: <5179CD76.6030908@agliodbs.com>
	<CABUevEymuYyyof68ASuDt9GBpFOvF2r0WNyk8JxK1nbGG70Rpw@mail.gmail.com>
	<517A6C78.7000101@xk7.net>
Date: Fri, 26 Apr 2013 14:06:03 +0200
Message-ID: 
 <CABUevEw0asBAR6jS=aqKBG1OAJmTsMP1FiocCm-cLJfqGEAm_w@mail.gmail.com>
Subject: Re: Can we change auto-logout timing on wiki.postgresql.org?
From: Magnus Hagander <magnus@hagander.net>
To: Paul Waring <paul@xk7.net>
Cc: PostgreSQL WWW <pgsql-www@postgresql.org>
Content-Type: text/plain; charset=ISO-8859-1
Precedence: bulk
Sender: pgsql-www-owner@postgresql.org

On Fri, Apr 26, 2013 at 2:00 PM, Paul Waring <paul@xk7.net> wrote:
> On 26/04/13 12:40, Magnus Hagander wrote:
>>
>> On Fri, Apr 26, 2013 at 2:42 AM, Josh Berkus <josh@agliodbs.com> wrote:
>>>
>>> WWW,
>>>
>>> wiki.postgresql.org is auto-logging me out after an hour, or less.  This
>>> is irritating when I'm editing a really long wiki page.  Could we please
>>> set it to something like 8 hours?
>>
>>
>> AFAICT, this is controlled by the PHP variable session.cache_expire,
>> which is set to 3 hours already. are you really editing the same page
>> longer than 3 hours and thus getting kicked off, or may there be
>> something else at play?
>
>
> Despite its name, session.cache_expire does not affect the expiry of
> sessions or the cookies associated with them.

I was just looking at the mediawiki wiki at
http://www.mediawiki.org/wiki/Manual_talk:Configuration_settings which
seem to says it does :S

But reading it again, it seems there is a second one, the gc one.

> As far as I can tell from examining the headers, it looks like an expiry
> date/time is set for the login cookie, but then it is never updated. If this
> is the case, then eventually the expiry date will pass and the browser will
> delete the cookie, even if you have been regularly accessing the wiki.
>
> Another possibility is that the cronjob which auto-removes session files
> (assuming files are being used) is set to the default of 24 minutes - which
> will remove your session after that time regardless of what the cookie's
> expiry date is set to.

We do have session.gc_maxlifetime set to 1440 which is the 24 minutes
you're referring to? So maybe this is the parameter we need to
(drastically) increase?


--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


-- 
Sent via pgsql-www mailing list (pgsql-www@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-www