topic How to get Alfresco Ticket Session Expiration Time ? in Alfresco Archive

How to get Alfresco Ticket Session Expiration Time ?

nirvanvjain — Mon, 17 Sep 2012 07:23:12 GMT

Hi Folks,We are using HTTP Client through which we call Alfresco Login API (Webscript) and get the Authentication ticket and I strongly believe that session expiration will also be applicable to "Alfresco Authentication Ticket" which we configure in web.xml of alfresco application.I have multiple al

Re: How to get Alfresco Ticket Session Expiration Time ?

mitpatoliya — Mon, 17 Sep 2012 09:36:45 GMT

As far as I know that the problem of ticket expiration you are facing is because of the switching between two servers.

check this out.
http://stackoverflow.com/questions/7426878/alfresco-ticket-validity

Re: How to get Alfresco Ticket Session Expiration Time ?

nirvanvjain — Tue, 18 Sep 2012 09:06:42 GMT

Hello,

First of all thanks a ton to Mit.

I am not facing ticket expiration issues but I am in to confusion that

Is [u]Alfresco ticket expiration totally seperate from the session expiration time mentioned in web.xml ?
i.e. web.xml session expiration time is 20 minutes still ticket expiration is 1 hours which is default ???

Thanks!
-Nirvan

Re: How to get Alfresco Ticket Session Expiration Time ?

deepak1987 — Mon, 10 Mar 2014 15:57:47 GMT

Hi Nirvan,

As per my knowledge, The expiry of an Alfresco Ticket depends on following properties in "../tomcat/web-apps/alfresco/WEB-INF/classes/alfresco/repository.properties" file.

Default settings in Alfresco 4.0.0 EE:

# Do authentication tickets expire or live for ever?
# if set to "false" then, ticket will live for ever, till user log out from the system or Restart the Server. Because tickets are stored in cache memory.
# if set to "true" then, ticket will expire based on "expiryMode" & "validDuration"
authentication.ticket.ticketsExpire=false

# If ticketsEpire is true then how they should expire?
# Valid values are: AFTER_INACTIVITY, AFTER_FIXED_TIME, DO_NOT_EXPIRE
# The default is AFTER_FIXED_TIME
authentication.ticket.expiryMode=AFTER_FIXED_TIME

# If authentication.ticket.ticketsExpire is true and
# authentication.ticket.expiryMode is AFTER_FIXED_TIME or AFTER_INACTIVITY,
# this controls the minimum period for which tickets are valid.
# The default is PT1H for one hour.
authentication.ticket.validDuration=PT1H

The above properties are used in InMemoryTicketComponentImpl class. Check getNewTicket() method of this class for details.

if you want to persist a ticket then, refer this post https://forums.alfresco.com/en/viewtopic.php?f=7&t=40905. Not sure about pros and cons of persisting a ticket.

Edit "../tomcat/shared/classes/alfresco/extension/ehcache-custom.xml" as follows

Find

< cache
name="org.alfresco.cache.ticketsCache"
maxElementsInMemory="1000"
eternal="true"
overflowToDisk="true"
statistics="false"
/ >

and change to

< cache
name="org.alfresco.cache.ticketsCache"
maxElementsInMemory="1000"
eternal="true"
overflowToDisk="true"
diskPersistent="true"
statistics="false"
/ >

Please share if you get something.