[Mailman-Users] What determines mailman webui login duration?

[Richard Damon]

On 11/13/13, 10:04 AM, Mark Sapiro wrote:
> On 11/13/2013 05:26 AM, Richard Damon wrote:
>> On 11/13/13, 1:57 AM, Fletcher Cocquyt wrote:
>>> That is, they login once to approve a message, and after what time will the webui require them to provide their credentials again for the next moderation request?
>>>
>> That is controlled by the session cookie expiration, either by the
>> server or the browser. I am not sure if there is a setting in mailman to
>> control the session time on the server.
>
> The cookie is a session cookie that expires at the end of the current
> browser. In most cases, this means that you can close the window or tab,
> but as long as you don't close the browser itself, the cookie remains valid.
>
But servers will expires sessions that haven't been used for awhile
(they need to, the browser won't tell them they have expired the
session). Once this happens, even if the browser still has the cookie,
it doesn't help anymore. The question comes how long will this be? and
the answer is it depends on the servers settings.

-- 
Richard Damon