OWA Timeout V2

So already a couple of minor modifications.

 

1) Check to see if the MRHSession Cookie exists before calling ![ACCESS::session exists], as there is a tcl error otherwise

 

2) look for /owa/ and /owa/ to initiate a new session, as owa adds a when a user accesses calendar.(Not confirmed)

 

 

when ACCESS_ACL_ALLOWED {

 

set apm_mrhsession [HTTP::cookie value "MRHSession"]

 

if { [table lookup $apm_mrhsession] == "EXCHANGE_LOGOUT" && [ACCESS::session exists]} {

 

ACCESS::session remove

 

table delete $apm_mrhsession if { [string tolower [HTTP::uri]] != "/owa/" && [string tolower [HTTP::uri]] != "/owa/" } {

 

log local0. "$apm_mrhsession: Session for [IP::client_addr] expired"

 

 

}

 

} if { [string tolower [HTTP::uri]] != "/owa/" && [string tolower [HTTP::uri]] != "/owa/" } {

 

 

when HTTP_REQUEST {

 

 

 

log local0. "HTTP uri [HTTP::uri]"

 

if { [string tolower [HTTP::uri]] starts_ if { [string tolower [HTTP::uri]] != "/owa/" && [string tolower [HTTP::uri]] != "/owa/" } {with "/owa/" } {

 

if { [HTTP::cookie exists "MRHSession"] && ![ACCESS::session exists]} {

 

if { [string tolower [HTTP::uri]] != "/owa/" && [string tolower [HTTP::uri]] != "/owa/" } {

 

set cookie_sessionid [format "sessionid=null; path=/; Expires=Thurs, 01-Jan-1970 00:00:00 GMT;"]

 

set cookie_cadata [format "cadata=null; path=/; Expires=Thurs, 01-Jan-1970 00:00:00 GMT;"]

 

HTTP::respond 440 "Set-Cookie" cookie_sessionid "Set-Cookie" cookie_cadata

 

}

 

} }

 

set user_inactive 0

 

if { [HTTP::header exists "X-UserActivity"] && [HTTP::header "X-UserActivity"] == 0 } {

 

set mrhsession [HTTP::cookie value "MRHSession"]

 

set user_inactive 1

 

return

 

}

 

 

 

 

}

 

 

when HTTP_RESPONSE {

 

if { $user_inactive && [HTTP::status] == 440 } {

 

table set $mrhsession "EXCHANGE_LOGOUT"

 

return

 

}

 

}