Vincent Bonamy wrote:

>Hello,
>
>I have a little pb:
>I log in jetspeed, and without log out I continue to navigate in
>Internet: I don't close my navigator (Netscape). I come back in jetspeed
>and I'm no more log in jetspeed! Why?
>Have you an issue for me: I would like that user log out only if :
>
>  1. user click on logout link
>  2. user close his navigator
>
It is impossible, since HTTP is a stateless protocol, so the only way to 
close a session is via a explicit user action (click a logout link) or a 
time out.  When the user closes the browser, the session will be lost in 
the user machine, but it will stay in the server until it expires.

Tomcat has a default session timeout of 30 minutes. You can make it 
bigger, but beware that the number of active sessions in the server will 
grow. For instance, if you set it to one week, you will have a session 
for each different browser that has started a session from your server 
in the last week. Depending on your environment this can be all right, 
but for the internet it will require enormous amounts of memory.

For an office environment, where users turn machines off at the end of 
the day, a time out of around one day can be all right, and you will 
have about double the number of users of live sessions (some active, 
some stale). This should be reasonable for numbers of users below one 
thousand...

>
>
>Thanks,
>vincent.
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to