Yes it can set to 8 hours and the user would be logged out after that 8
hours.

There is also another parameter for idle session timeout if that too is
enabled this would time out even before this 8 hours if that is shorter.

Nothing harm in setting 8 hours or longer provided you have set idle
session time out shorter for example 15 mins or 30 mins according to your
requirement...... This would avoid someone else hacking the system if its
left unlocked by the user by mistake...

Cheers
Jay


On Wed, Jan 21, 2015 at 7:21 PM, Zac Harvey <[email protected]> wrote:

>  I'm reading https://wiki.jasig.org/display/casum/ticket+expiration+policy
> which explains expiration policy as:
>
>
>  "TGT expiration policy governs the time span during which an
> authenticated user may grant STs with a valid (non-expired) TGT without
> having to reauthenticate. An attempt to grant a ST with an expired TGT
> would require the user to reauthenticate to obtain a new (valid) TGT.​"
>
>
>  According to that same article, the default is 2 hours.
>
>
>  Which does this mean:
>
> 1)    That the user will essentially be auto-logged-out after 2 hours?; or
>
> 2)    Something else?
>
>
>  If the former, what is the harm to setting this to a longer value, such
> as 8hours, to ensure no one is logged out of their app for an entire
> business day?
>
> --
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to