Session timeout

[Cantor, Scott]

> I have 4 wikis running on the same host. Each requires a different timeout.

You do understand that unless you're using ForceAuthn these timeouts are mostly just annoying and academic?

> Looking at the Sessions element in the shibboleth2.xml file I see the lifetime
> and timeout attributes. It appears that these relate to all applications for the
> host.

Sessons is an application-level element, which is to say it's defaulted or applies to whatever <ApplicationOverride> is is declared inside.

> I tried to find an apache command named something like
> ShibSessionTimeout that I could put in an apache <directory> to control the
> session timeouts for each wiki independently. Google was not my friend
> today. Is there such an apache command that mod_shib would recognize? If
> not is there another way to have different lifetime and/or timeout values for
> different applications (wikis) running on the same host?

Yes, if you actually make them separate applications to the SP, which is a mess unless you vhost them.

-- Scott