[
https://issues.jenkins-ci.org/browse/JENKINS-9258?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=161647#comment-161647 ]
Nick Parrish commented on JENKINS-9258:
---------------------------------------
We see this a lot at our company, too. We are using Jenkins 1.458 and use the Active Directory plugin for authentication.
We have seen it with clients on various OS / browsers.
I, too, looked at the cookies on my machine with firecookie, and the "Expires" value for ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE seems valid (it expires a couple weeks from now).
We run Jenkins on port 8080, but forward port 80 to 8080 using iptables, but no client uses 8080 (that I know of).
> "Remember me on this computer", still getting asked to log in after a few hours
> -------------------------------------------------------------------------------
>
> Key: JENKINS-9258
> URL:
https://issues.jenkins-ci.org/browse/JENKINS-9258> Project: Jenkins
> Issue Type: Bug
> Components: core
> Environment: Debian Squeeze on Linux qa01 2.6.26-2-vserver-amd64 #1 SMP Tue Jan 25 06:09:17 UTC 2011 x86_64 GNU/Linux
> Reporter: mfn
> Fix For: current
>
>
> When clicking the "Remember me on this computer" during login, after some time the user is logged out.
> I'm using Active Directory as Security Realm.
> Example protocol:
> I logged in at 09:19 and checked the "Remember me on this computer" checkbox.
> At 10:10 I freshly opened the jenkins front page again and I was logged it.
> At 11:38 again, and I found myself logged out.
> All tests were conducted with Firefox 4, accepting cookies and such.
> This is reproducible on an installation via Debian package. At the time of writing the version number is 1.405
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jenkins-ci.org/secure/ContactAdministrators!default.jspaFor more information on JIRA, see:
http://www.atlassian.com/software/jira
Locked
_0.png)
We run our instance as a simple setup on a ubuntu 10.04 machine. Runs on port 8080 but forwarded from port 80. There is only one url that we use including the port (default, since we use 80 in practice).
Apparently the trick would be to update web.xml to include this right after the description (or later):
<session-config> <session-timeout>1440</session-timeout> </session-config>This would tell WinStone (or Tomcat) to have a session expiration of 24h (24*60=1440). The problem is that it would require to extract jenkins.war, patch web.xml and re-zip jenkins.war. Not very automated to get the autoupdates.
I do not see a ACEGI_SECURITY_HASHED_REMEMBER_ME_COOKIE in my browser, I do see a JSESSIONID.12345abc cookie though.