Inactivity timeout/logout

[wriggly40]

Hi,

Is it possible to set a logout/timeout so that Sugar will return to the login page if the user is inactive for 15 mins?

I have looked at the possibilty in adding a javascript to do this, however I have not had much luck in where to place the javascript.

Is it at all possible to do this? or has anyone got any ideas on where I could place the javascript if it is not possible to do this within sugar itself.

Thanks.

[Markku]

Sugar relies on php.ini session timeout setting (session.gc-maxlifetime). Session expires based on that value so modify session.gc_maxlifetime according your needs.

More information available here:
http://de3.php.net/manual/en/session...gc-maxlifetime

[wriggly40]

Hi,

Thank you for the reply.

I tried it but didnt work so I have fudged it by changing some PHP files.

If anyone needs to take a look how it was done I can post the code somewhere.

[aigalli]

Hi,

I'm experiencing problems with user sessions not timing out having specified the session.gc_maxlifetime parameter. I would appreciate your feedback on how you overcame this problem.

Thanks

[AChesney]

We are experiencing a similar issue. Please post the code.

Thanks much!
Amy

[bickart68]

I have code that is NON-Upgrade Safe that will popup a warning message at a preset interval and then. If the user doesn't press the OK button. They are logged of and sent to the login screen.

If you are interested...I can post the specifics.

[bullyboy1]

Yes please post the code. Many user complaints about getting logged out even after setting the ini file to 4 hours.

[antoniocal]

I have the same issue but i have a workaround.
If you run sugar on linux you can put a cron with this line (just put crontab -e in command line and search a "vi" survival guide to edit )
* * * * * find /tmp -cmin +20 -name 'sess_*' -user daemon | xargs rm -f

where
/tmp is the dir where the session files resides (you can search in your php.ini the location on your server)
+20 is 20min timeout
"sess_" are the files in /tmo that belongs to sessions.
daemon is the user taht runs the apache server

This works fine for me.
good look

[andopes]

If you are using SugarCRM 5.2 you can use the table tracker to identify users which does not interact with the system for some time.
This table has the field session_id which represent the authenticated session for this user.
The file where the session is saved is: $sugar_config['session_dir']/sess_{tracker.session_id}
If you delete this file the user is automatically disconnected.

You can create a scheduled task to scan the tracker table, identify lazy users and kill his sessions.

Kind regards