Forum Discussion
Inactivity Timeout - MultiDomSSO With Persistent MRHSession Cookies
Kai Wilke is a genius! I've implemented the iRule snippet under a HTTP_REQUEST Event with a couple simple modifications:
if { [set slo_lifetime [table lifetime -remaining "slo_[ACCESS::session sid]"]] eq "" } then {
if { [HTTP::uri] ends_with "/_layouts/SignOut.aspx" } {
table set "slo_[ACCESS::session sid]" "1" indef 1860
}
} else {
if { $slo_lifetime < 1560 } then {
ACCESS::session remove
HTTP::respond 302 Location "/vdesk/hangup.php3"
}
table delete "slo_[ACCESS::session sid]"
}
The originally proposed code ran a table lookup -notouch command which only pulled the established value of "1". I changed this to table lifetime -remaining which now polls the table entry for its remaining lifetime. Also, since I wanted a 5 minute buffer between logging out and the session expiring, I changed the second value to subtract 300 instead of 900.
Bottom line; this thing is working BEAUTIFULLY. Top marks to Kai, and thank you!
-Cory
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com