Has anyone come up with a way to logout inactive ESS and/or Portal sessions using IIS (or Apache)? We're using IIS/active directory for ESS and Apache for Portal and I'd really like a way to disable their session upon say, 5 minutes of inactivity. I know Lawson doesn't have a supported method, has anyone else come up with something that works for them?

Hi Marilyn,

I've seen mention of a couple of kludgy ways to do this. One, which was mentioned on Topica, uses JavaScript timers, so it ought to work with ESS and Portal on either server (since the browser enforces the timeout in this scheme). I've propsed (but still never tested) a way to do this with mod_rewrite on the Apache HTTP server.

I've since decided (but, again, not yet tested) that the cleanest way to accomplish a session timeout is to write a servlet filter. This is a Java class that is defined in the deployment descriptor (web.xml), and mapped to a particular URL pattern. It is called before any servlets that match the URL pattern, so it could examine whether a session had timed out before passing a request along to the servlet. I've written a filter that logged additional information about requests and responses, so I know that it is fairly simple for a moderately skilled Java programmer to do.

Would you care to share this with the rest of us? You can upload the file I believe if you want. :rau:

Can I get an update on what anyone has done on session timeouts for ESS users? We are getting a difference of opinions here with desktop settings, to Lawson timeout settings. Also the core users want a longer timeout setting then the ESS users. We told them that was impossible, but I submitted and enhancement request to Lawson in the hopes that 'it could happen. Thoughts? Prayers? B)