Jsecurity setting the session time out

[Ramon Davila]

Does anybody knows of a setting I can use to modify the default session timeout for JSecurity on grails.

Thanks 

[Peter Ledbrook]

> Does anybody knows of a setting I can use to modify the default session
> timeout for JSecurity on grails.

Are you using JSecurity's session or the standard servlet container
one? If the latter, then just run:

  grails install-templates

and edit "src/templates/war/web.xml" to change the session timeout. I
can't remember off-hand how to change JSecurity's session timeout, so
I'll dig that out if you need it.

Cheers,

Peter

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email

[Daniel Honig]

Peter,
  If you do happen to dig the info out, could you add it to the plugin docu?

cheers,
   -dh

On Sun, Nov 16, 2008 at 2:18 AM, Peter Ledbrook <peter@...> wrote:

>> Does anybody knows of a setting I can use to modify the default session
>> timeout for JSecurity on grails.
>
> Are you using JSecurity's session or the standard servlet container
> one? If the latter, then just run:
>
>  grails install-templates
>
> and edit "src/templates/war/web.xml" to change the session timeout. I
> can't remember off-hand how to change JSecurity's session timeout, so
> I'll dig that out if you need it.
>
> Cheers,
>
> Peter
>
> ---------------------------------------------------------------------
> To unsubscribe from this list, please visit:
>
>    http://xircles.codehaus.org/manage_email
>
>
>

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email

[Ramon Davila]

Interesting question I install the JSecurity plugin and have not made any changes to the standard grails configuration. Does that means that the server session is timing out and thats why Jsecurity is askingme to login again?

Thanks

On Sun, Nov 16, 2008 at 2:18 AM, Peter Ledbrook <peter@...> wrote:

> Does anybody knows of a setting I can use to modify the default session
> timeout for JSecurity on grails.

Are you using JSecurity's session or the standard servlet container
one? If the latter, then just run:

 grails install-templates

and edit "src/templates/war/web.xml" to change the session timeout. I
can't remember off-hand how to change JSecurity's session timeout, so
I'll dig that out if you need it.

Cheers,

Peter

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

   http://xircles.codehaus.org/manage_email

[Peter Ledbrook]

> Interesting question I install the JSecurity plugin and have not made any
> changes to the standard grails configuration. Does that means that the
> server session is timing out and thats why Jsecurity is askingme to login
> again?

Quite possibly. Any other reason is likely to be a bug, but it's
difficult to say without more information, such as how long before it
asks you to log back in.

Cheers,

Peter

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email

[Peter Ledbrook]

> Peter,
>  If you do happen to dig the info out, could you add it to the plugin docu?

I posted a message to the JSecurity user mailing list about the most
appropriate way of doing this, but I haven't had a response yet. I
believe that this used to be possible in the plugin, but not any
longer. It is possible to set the session timeout on the
SessionManager bean:

  http://www.jsecurity.org/releases/0.9.0-RC2/docs/api/index.html?org/jsecurity/session/mgt/SessionManager.html

so the question is whether this can be done after all the beans have
been instantiated or whether the timeout has be set in the bean
definition. If the latter, you would have to manually wire in a
session manager to the security manager.

The best option might be to have a single configuration setting for
session timeout, and the plugin sets the timeout in whatever way is
appropriate for the session mode. In other words, if the session mode
is "http" (the default) the plugin should add the required entry to
the web descriptor. For JSecurity sessions, an explicit session
manager bean should be configured.

Cheers,

Peter

---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email