Hello,
Could you please advise how to configure FreeIPA web UI user session timeout?
Thanks, Yuri
________________________________
LEGAL DISCLAIMER: M.C. Dean, Inc. and its subsidiaries considers this e-mail and any files transmitted with it to be protected, proprietary or privileged information intended solely for the use of the named recipient(s). Any disclosure of this material or the information contained herein, in whole or in part, to anyone outside of the intended recipient or affiliates is strictly prohibited. M. C. Dean, Inc. accepts no liability for the content of this e-mail or for the consequences of any actions taken on the basis of the information contained in it, unless that information is subsequently confirmed in writing. Employees of M.C. Dean, Inc. are instructed not to infringe on any rights of the recipient; any such communication violates company policy. If you are not the intended recipient, any disclosure, copying, distribution, or action taken or omitted in reliance on this information is strictly prohibited by M.C. Dean, Inc.; please notify the sender immediately by return e-mail, delete this communication and destroy all copies.
Yuri Krysko via FreeIPA-users wrote:
Hello,
Could you please advise how to configure FreeIPA web UI user session timeout?
It depends on your version of IPA.
For versions < 4.6.0 use session_auth_duration and session_duration_type
For versions >= 4.6.0 use kinit_lifetime
See default.conf(5) for more information.
rob
Hi Rob,
I don't know if this is still valid but I try to set seeing timeout on freeipa 4.9.6 in /etc/ipa/default.conf
kinit_lifetime = 5 minutes
but when I set that I can't login anymore with web. Any Idea why or is in this version different setting for session timeout.
Ales
Hi,
if you use the format without space kinit_lifetime = 5minutes then it should work. Probably there was some change in one of the libraries parsing the duration string and it does not accept any more the space between the value and the unit.
flo
On Wed, Jan 10, 2024 at 3:18 AM Ales Rozmarin via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote:
Hi Rob,
I don't know if this is still valid but I try to set seeing timeout on freeipa 4.9.6 in /etc/ipa/default.conf
kinit_lifetime = 5 minutes
but when I set that I can't login anymore with web. Any Idea why or is in this version different setting for session timeout.
Ales
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste... Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
freeipa-users@lists.fedorahosted.org