Title	Frequent session expiration
Date	20-Sep-2006 17:07:49 EEST
Version	2.4.53
Submitter	Jerome Duprez
Bug criticality	MediumBug
Browser version	Firefox 1.0.6
Bug status	ClosedBug
PageProvider used	VersioningFileProvider
Servlet Container	Tomcat 5.5.9
Operating System	Windows XP Pro
URL	--
Java version	1.5.0_06

I set up a wiki to require login to edit pages. However I notice I find myself forced to login a bit too often (approx. twice per hour). I am still asserted (well, the g'day message remains OK at least). The JSPWikiAssertedName cookie has a 3 years lifespan, so it doesn't expire for any practical usage scenario, however the JSESSIONID cookie is session-bound.

add:

 <session-config>
  <session-timeout>60</session-timeout>
 </session-config>

to WEB-INF/web.xml before <welcome-file-list>. The number is the number of minutes.

---

Solved by changing the session-timeout in WEB-INF/web.xml.

--HarryMetske

---

In 2.6, you can also enable CookieAuthenticationLoginModule.