On Wed, 2011-10-26 at 09:57 -0700, Toshio Kuratomi wrote: > On Tue, Oct 25, 2011 at 04:56:18PM -0700, Adam Williamson wrote: > > On Tue, 2011-10-25 at 16:44 -0700, Toshio Kuratomi wrote: > > > FAS and bodhi are single sign on (iirc, everything on > > > admin.fedoraproject.org). > > > > Well, Bodhi seems to do a damn good job of forgetting you're signed in. > > I've never tried to analyze this carefully, it's just a subjective > > feeling that I seem to have to log into it a hell of a lot... > > > It's supposed to be 20 minutes of inactivity (ie, make no requests to > fas/bodhi/pkgdb/elections in 20 minutes and your session expires). > > There's only one time that I've found this to not work when I've actually > measured it. That was when we had time skew on our fas servers. So when > a session was updated on one server, it updated the session information with > a timestamp far enough in the past that the next server to check the session > decided that it was expired. Well, 20 mins inactivity sounds about 'right', as in, it matches my experience. seems like a very short timeout, but maybe it's appropriate. -- Adam Williamson Fedora QA Community Monkey IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora http://www.happyassassin.net -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
