RE: How Long Until Cookie Timeout

From: Lion Shi (lionshi@online.microsoft.com)
Date: 02/19/03

  • Next message: Hodge: "RE: PKCS Certificates" 
    From: lionshi@online.microsoft.com (Lion Shi)
Date: Wed, 19 Feb 2003 08:55:53 GMT

    Hello Paul,

    You may find the TimeOut setting from the <forms> element in Machine.config
    on your machine. The default value of it is 30 (in minutes). You may change
    it by modifying the Machine.config file, or using a local Web.Confg file.
    The following article on this topic will be helpful for you.

    An Introductory Guide to Building and Deploying More Secure Sites with
    ASP.NET and IIS, Part 2
    http://msdn.microsoft.com/msdnmag/issues/02/05/aspsec2/default.aspx

    I hope this helps.

    Best regards,

    Lion Shi [MSFT]
    MCSE, MCSD
    Microsoft Support Engineer

    This posting is provided "AS IS" with no warranties, and confers no rights.
    You assume all risk for your use. 2003 Microsoft Corporation. All rights
    reserved.
    --------------------
        From: "paul reed" <prreed@jacksonreed.com>
        Subject: How Long Until Cookie Timeout
        Date: Tue, 18 Feb 2003 22:17:22 -0800
        Lines: 8
        X-Priority: 3
        X-MSMail-Priority: Normal
        X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
        X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
        Message-ID: <ufvmy691CHA.2564@TK2MSFTNGP12>
        Newsgroups: microsoft.public.dotnet.framework.aspnet.security
        NNTP-Posting-Host: 12-230-202-53.client.attbi.com 12.230.202.53
        Path: cpmsftngxa06!TK2MSFTNGP08!TK2MSFTNGP12
        Xref: cpmsftngxa06
    microsoft.public.dotnet.framework.aspnet.security:4011
        X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
        
        I am using standard forms authentication. All is working great. What is
    the
        default time of inactivity before a new browser request would force a
    page
        rejection? If that does happen, I would like to show a more friendly
    page
        (like page has expired) or something.
        
        Thanks...Paul
        
        
        

    • Quantcast