SP session lifetime / time-out

[David Bantz]

The potential audience (< / ~ number of sessions) is on the order of 1000.

That seems small enough to avoid memory problems of long-lived sessions, yes?

David


On Mon, 18 Aug 2014, at 09:12 , Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/18/14, 1:07 PM, "David Bantz" <dabantz at alaska.edu> wrote:
> 
>> A service owner requests sessions last 5 days, with one day time-out.  Is
>> merely setting 
>> <Sessions lifetime=³432000" timeout=³86400² Š > in shibboleth2.xml
>> sufficient, or is some other adjustment required to effect this request
>> which
>> is a first for me?  (The SSO session lifetime set by the IdP is 8 hours,
>> 28800 sec.)
> 
> It's sufficient unless your IdP has maximumSPSessionLifetime set on the
> profile configuration.
> 
> In practice, that's not going to work well unless the site is low-volume,
> the sessions will accumulate in memory and probably kill it.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140818/0b8a2e3c/attachment.bin