Re: session won't timeout

Please decide whether you post a message to a forum or to a newsgroup.

There's no point in posting identical messages to both Microsoft public
forums and Microsoft public newsgroups on the same day (as you did with this
one).

No answer on the question as you seem to have covered the bases.

I'm surprised this

WSS Application General Settings: Security Validation On, Expires after 1
minute

isn't having the desired effect.

You've run iisreset for luck I suppose.

Mike Walsh
WSS FAQ: www.wssv3faq.com / wss.collutions.com
No private questions please (additions to FAQ welcome)

"IanM" <IanM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:565AF876-7F3F-4529-B6F1-5BCD69201E0C@xxxxxxxxxxxxxxxx
Hi all,

I'm trying to get my site to re-authenticate the user after a period of
inactivity (to speed testing I'm trying one minute). I'm assuming this is
possible and IIS would throw another challenge . The problem now is that
a
user can leave their computer indefinitely, return, and keep on working.
The
relevant information is as follows:

Authentication mode: Basic Authentication over SSL(selfSSL cert)
authenticating to an AD server.

IIS Connection Timeout: 60 seconds
IIS Content Expiration enabled, expires immediately
ASP State Mgmt: InProc, UseCookies, Session Timeout 1 min.
WSS Application General Settings: Security Validation On, Expires after 1
minute

My environment is:
Windows 2003 R2 Web Edition
WSS 3.0
IIS 6.0
I've been testing on both Firefox and IE browsers, internally and
externally

Any help would be appreciated. Thanks much
Ian



.

Loading