IIS - Configure session timeout

WaltersTim

Hello,

is it possible to configure a timeout for the session?

For example force new login after 24 hours.

WaltersTim

I found the solution for this problem.

I didnt see the option that i marked in the screenshot. Now its working.

Russell D

Hi @WaltersTim look in your web.config which should be in the directory you extracted the web files too. Line 44:

<div><authentication mode="Forms">
      <forms loginUrl="~/Account/LogIn" timeout="43200"/>
</div><div>&nbsp; &nbsp; &nbsp; <!-- 43200 mins = 30 days --><br></div><div></authentication><br></div>

WaltersTim

Hi Russell,

i changed the timeout for test purposes to 1.

But im not getting logged out after 1 minute.

Do you have a idea why?

Russell D

Did you restart your website? The Application Pool also has a timeout set, I think its 20 minutes by default.

This feels like an IIS issue rather than Monitor persay.

WaltersTim

Yes i restarted the website. The Application Pool timeout is still default, but im not getting logged out.

I also think that this is a IIS Configuration thing.

Could it be something with the required anonymous authentication?

Russell D

I'm not sure to be honest. I did come across this: http://asp-net.vexedlogic.com/2012/05/23/aspasp-net-session-timeout-how-do-i-change-it/. Does setting the sessionstate timeout in addition help?

Russell D

Did you get anywhere with this?

WaltersTim

Hi Russell,

sorry for the late answer. I was a few days in holiday.

I changed all that settings to 1 minute but its not working.

I think idle timeout makes no sense because redgate loads GetMonitoringStatus periodically but the other settings should work

Kind regards

Russell D

Yeah I don't really know enough about IIS to confidently say how the timeout workings work. I'll have a play with it and see if I can figure it out but it might be worth running past your IIS admin.