View Issue Details

IDProjectCategoryView StatusLast Update
0010148mantisbtadministrationpublic2011-08-05 02:25
Reporterkarthik085 Assigned Todhx  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionduplicate 
Product Version1.1.2 
Summary0010148: Sesssion Timeout
Description

Mantis session is timing out after a small time period. A variable to change the session timeout value needs to be added through the configuration interface (config_inc.php)

FYI, Default cookie time length is at a very high value (1 year) which is not changed at all
$g_cookie_time_length = 30000000;

TagsNo tags attached.

Relationships

duplicate of 0011680 closeddhx Mantis APPLICATION ERROR #2800 for Mantis 1.2.0 

Activities

giallu

giallu

2009-02-19 18:03

reporter   ~0020901

maybe you are referring to the reauthentication request happening in the administration area?

giallu

giallu

2009-02-19 18:04

reporter   ~0020902

PS. upgrade to 1.1.6 now, really...

karthik085

karthik085

2009-02-19 22:17

reporter   ~0020903

giallu,
No - this is not in reference to reauthentication request in the administration area.

I log in to mantis , get logged in, go to 'View Issues' page , close my browser and re-visit same page -> now I am logged out.

Yes, we will be upgrading to 1.1.6 soon. BTW, does 1.1.6 solve this problem?

giallu

giallu

2009-02-20 03:00

reporter   ~0020904

1.1.6 has some very important security fixes you should really have. I am not sure if that will fix your problem (probably not) but we need to check anyway the latest version because an eventual patch has to be applied to the 1.1.6 codebase.

It would be even more useful if you could determine if the latest alpha release suffers from the same problem.

Thank you in advance

PAB

PAB

2010-03-05 10:26

reporter   ~0024653

this problem still exists in 1.2.0

logging in with "permanent login" => visiting a page within mantis => closing browser => revisit site after some time => redirection to login page

yw84ever

yw84ever

2010-03-05 15:19

reporter   ~0024658

which means that cookies have been disabled? are cleared out when closing the browser?

PAB

PAB

2010-03-09 02:40

reporter   ~0024679

@yw84ever:
Yes, the problem is MANTIS_STRING_COOKIE. Normally, i do a permanent login, which sets the expiration of this cookie to 1 year. But if i visit the management section and have to reauthenticate, the cookie changes its type to "session".

dhx

dhx

2010-06-09 03:32

reporter   ~0025774

This could be a duplicate of 0011680... check your PHP session garbage collection timeout?

dhx

dhx

2010-09-19 02:14

reporter   ~0026776

Assuming this issue is a case of incorrect PHP session timeouts as per 0011680.