Auto log-out of inactive users

[markt]

I know this can be done on a per-service level but is there a means
of logging out users who simply hog a connection. Many users start the day by logging into as many things as they can then never use them, locking other users out.

Specifically www proxy.

I know I can (and do) manually do this in gatekeeper.

If not can this be put forward for a feature request please?

thanks

Mark.

[Pascal]

That is why there is a session timeout. If they are not actually putting activity through the connection will be closed. You can drop the timeout for the appropriate services, though. (Realise you want one global value for it, but it is likely to remain as a per service timeout)

[markt]

Pascal,

Thanks for the reply but I am unsure as to what you mean.

We have a session time-out on the wwwproxy but users who have logged in (always through the java applet) can stay live all day without activity.

Is there another point of entry for time-outs that I have missed.

Thanks in advance

Markt

[Pascal]

Ahh, the old Java applet. Yes, the Java applet uses the remote control sessions login. (Which is why you have to alter the Remote Control Service's bindings to get the Java Applet to work). That is the timeout you want to adjust for that then.

[markt]

Pascal,

Thanks for that - the timeout was deactivated for that service.

Do you see any possibility of the java applet being modified to
clear its contents when logged out (password in particular), just
seems to be an obvious security hole?

Thanks again for the help

Mark.

[Pascal]

Thought it was. I'll check the code tomorrow and with the other devs, there might be a reason for the current behaviour / setting / workaround.

[wyldcyde]

Surely though if the timeout is put on the remote control service then users will be logged off from that service regardless of activity on other services like NAT and WWW.

My main problem that hasn't been addressed and is WORSE in wingate 6.04 is that users logoff java (on purpose or by accident) BUT their session remains in wingate so I have to constantly terminate sessions on gatekeeper. The best I can do is educate users to close all internet related programs before they logoff so their session ends.

I wish logging off java could terminate sessions. I also wish users weren't such idiots at times, hehe :)

wyld