Addition of session lifetime timestamp
WebSEAL calculates the session lifetime timestamp by combining the following values:
- Current system time.
- Maximum lifetime in seconds that an entry is allowed to exist in the WebSEAL credential cache.
This maximum lifetime in seconds is specified in the WebSEAL configuration file [session] stanza:
[session] timeout = 3600
To add this value to the failover authentication cookie, manually edit the WebSEAL configuration file and add the following entry:
[failover-add-attributes] session-lifetime-timestamp = add
When a failover incident occurs, the session lifetime value is used to determine the time remaining for the life of the user's session (the session lifetime value is not reset at failover). If the session lifetime has expired, the user must login.
Note that this attribute cannot be set by wildcard matching. The exact entry session-lifetime-timestamp must be entered.
Parent topic: Failover authentication configuration