How to enforce log in after session timeout

[arthur]

Hi All.

For security reasons our client asked to enforce log in every time the user session times out.

The "Maximum Inactive Session Time" parameter does not solve this issue because the user can reconnect without having to log in again. Log in is necessary again only if the browser is closed and opened again.

Is there any way to force it in QVS 11?

Thanks,

Arthur

[Bill_Britt]

This is an issue with the browser caching the login ID and when the webserver ask for it IE is passing it again. I don't know of a way without changing the security in IE.

Bill

[arthur]

Hi Bill,

Thanks for your answer. Do you know what security settings should be changed in IE to prevent it from passing the login again?

Thanks,

Arthur

[Bill_Britt]

Hi Arthur,

I have not tested it, but I think the below would do it.

Bill

[arthur]

Hi Bill,

Unfortunatelly it did not work. Any other ideas?

Thanks,
Arthur

[arthur · Accepted solution]

Hi Bill,

I think I have found a way: by changing the <SessionCookieTimeOut> parameter in the config file of the web server (ProgramData > QlikTech > WebServer > config.xml). Default value is 30 minutes.

Thanks for your insights.

Best Regards,

Arthur

[#7]

Hi Artur!

We have  the similar issue. In our congig.xml is the following line:

<SessionCookieTimeOut> -1<SessionCookieTimeOut>

What should i change in this line for 5 min session and log in again?

[arthur]

Hi.

You should change it to <SessionCookieTimeOut> 5 <SessionCookieTimeOut>

Regards,

Arthur