|
Home > Archive > IIS Server Security > February 2004 > IIS 5 - Timeout Setting questions and problem
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS 5 - Timeout Setting questions and problem
|
|
| Michael 2004-02-10, 9:36 am |
| I have a question about 2 setting in the Internet Services Manager for IIS
5.
In the properties on the default website, on the WebSite tab. There is a
section called Connections with a Connection Timeout value of 900 seconds.
On the Home Directory Tab, in the Application Settings section, when you
click on Configuration, then Options Tab. There is an Enble Session State,
that is checked with a Session Timeout of 20 Minutes.
First question is what is the difference between the connection timeout and
the session timeout for the application settings?
Second, using basic authentication, if a user logs into a site, and sits
idle, no activity between IIS and the users browser, for a time longer then
the timeout values, shouldn't they be prompted to relogin to the site?
TIA
| |
| Bernard 2004-02-11, 12:35 pm |
| This is basically 2 different settings -
a) connection timeout
the amount of time, in seconds, that the server will wait before
disconnecting an inactive connection.
b) session timeout
before session timeout under the connection, you can declare sessions
variables and manipulate in your asp program.
As for your 2nd question -
says - default session timeout - 20mins, if user continue browsing at
19mins, session's detail still exist as session is not expired yet and
session timeout clock will start counting again at that point. when there's
problem connecting to the server and it actually took longer time for server
to 'reply' to your browser, you will get connection timeout error.
--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Michael" <mteff@skylinedisplays.com> wrote in message
news:u$T7YLC8DHA.1112@tk2msftngp13.phx.gbl...
> I have a question about 2 setting in the Internet Services Manager for IIS
> 5.
>
> In the properties on the default website, on the WebSite tab. There is a
> section called Connections with a Connection Timeout value of 900 seconds.
>
> On the Home Directory Tab, in the Application Settings section, when you
> click on Configuration, then Options Tab. There is an Enble Session
State,
> that is checked with a Session Timeout of 20 Minutes.
>
> First question is what is the difference between the connection timeout
and
> the session timeout for the application settings?
>
> Second, using basic authentication, if a user logs into a site, and sits
> idle, no activity between IIS and the users browser, for a time longer
then
> the timeout values, shouldn't they be prompted to relogin to the site?
>
> TIA
>
>
| |
| Michael 2004-02-12, 1:36 am |
| Ok.. well. here's my problem.
We have connection timeouts of 900 seconds(15 min) and session timeouts of
20 minutes, the default settings on a secured site and requires a login
using basic authentication.
If someone sits idle at the site beyond the timeouts, say for 60 mins,
shouldn't the site require the user to relogin since the timeouts have
elapsed?
TIA
"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:eDhXEYQ8DHA.1716@TK2MSFTNGP10.phx.gbl...
> This is basically 2 different settings -
> a) connection timeout
> the amount of time, in seconds, that the server will wait before
> disconnecting an inactive connection.
>
> b) session timeout
> before session timeout under the connection, you can declare sessions
> variables and manipulate in your asp program.
>
> As for your 2nd question -
> says - default session timeout - 20mins, if user continue browsing at
> 19mins, session's detail still exist as session is not expired yet and
> session timeout clock will start counting again at that point. when
there's
> problem connecting to the server and it actually took longer time for
server
> to 'reply' to your browser, you will get connection timeout error.
>
> --
> Regards,
> Bernard Cheah
> http://support.microsoft.com/
> Please respond to newsgroups only ...
>
>
> "Michael" <mteff@skylinedisplays.com> wrote in message
> news:u$T7YLC8DHA.1112@tk2msftngp13.phx.gbl...
IIS[color=blue]
a[color=blue]
seconds.[color=blue]
> State,
> and
> then
>
>
| |
| Bernard 2004-02-12, 9:34 pm |
| Yes, you might want to check if you asp sessions timeout is redefine in your
scripts.
--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Michael" <mteff@skylinedisplays.com> wrote in message
news:ufgmwbX8DHA.2924@tk2msftngp13.phx.gbl...
> Ok.. well. here's my problem.
>
> We have connection timeouts of 900 seconds(15 min) and session timeouts of
> 20 minutes, the default settings on a secured site and requires a login
> using basic authentication.
>
> If someone sits idle at the site beyond the timeouts, say for 60 mins,
> shouldn't the site require the user to relogin since the timeouts have
> elapsed?
>
> TIA
>
>
> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
> news:eDhXEYQ8DHA.1716@TK2MSFTNGP10.phx.gbl...
> there's
> server
> IIS
is[color=blue]
> a
> seconds.
you[color=blue]
timeout[color=blue]
sits[color=blue]
longer[color=blue]
>
>
| |
| Michael 2004-02-16, 2:39 am |
| I've checked, there is no Session.Timeout anywhere in the code.
Please, keep the suggestions coming.
Thanks.
"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:u4%23le8h8DHA.1548@tk2msftngp13.phx.gbl...
> Yes, you might want to check if you asp sessions timeout is redefine in
your
> scripts.
>
> --
> Regards,
> Bernard Cheah
> http://support.microsoft.com/
> Please respond to newsgroups only ...
>
>
> "Michael" <mteff@skylinedisplays.com> wrote in message
> news:ufgmwbX8DHA.2924@tk2msftngp13.phx.gbl...
of[color=blue]
for[color=blue]
> is
> you
> timeout
> sits
> longer
site?[color=blue]
>
>
| |
| Bernard 2004-02-25, 9:40 am |
| Mm.. try asp group. it should related to your scripts and not server
setting.
--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Michael" <mteff@skylinedisplays.com> wrote in message
news:Oh61XPK9DHA.3012@TK2MSFTNGP09.phx.gbl...
> I've checked, there is no Session.Timeout anywhere in the code.
>
> Please, keep the suggestions coming.
>
> Thanks.
>
> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
> news:u4%23le8h8DHA.1548@tk2msftngp13.phx.gbl...
> your
timeouts[color=darkred]
> of
login[color=darkred]
sessions[color=darkred]
at[color=darkred]
and[color=darkred]
for[color=darkred]
> for
There[color=darkred]
when[color=darkred]
Session[color=darkred]
and[color=darkred]
> site?
>
>
|
|
|
|
|