For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Oct 20, 2009

UIE Session questions about timeouts...

A couple of questions about sessions (Using the session command) and timeouts...     1. When a session times-out, are you supposed to get an AUTH_ERROR event?   This seems to hap...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 20, 2009
Hi Hamish,

 

 

I think the auth timeout and UIE session timeout are two independent values. The auth profile has an idle timeout which may trigger AUTH_ERROR. I haven't seen this in past testing though. I think that the old AUTH_ events have been deprecated by AUTH_RESULT though. So I'm not sure whether it will be possible to depend on AUTH_ERROR even if it might work for you now.

 

 

As for your other questions, I thought just looking up the session value would reset the timer. But I would definitely expect the timer to be reset if you add the same session key again. Can anyone correct/confirm this?

 

 

You might consider opening a case with F5 Support to get feedback on these session timeout questions and raise an RFE case asking for better handling of auth timeouts. If you do this, could you reply back with what F5 says?

 

 

Thanks,

 

Aaron