Problem: control Session timeout

Question

My session renews every 20 minutes. I've set timeout to 300 minutes but still it renews probably because Application Pool recycles.

I am storing UserId which is Guid in Session which returns null. Problem is when I use Membership using

Membership.GetUser().ProviderUserKey

it works fine. But obviously it makes a database call. How can I prevent this problem from happening? Why does Membership.GetUser().ProviderUserKey succeeds whereas Session doesn't?

please post your web.config ; and look at my answer

Emanuele Greco
– Emanuele Greco

2011-09-27 08:22:13 +00:00
Commented Sep 27, 2011 at 8:22 — Emanuele Greco
– Emanuele Greco, Commented Sep 27, 2011 at 8:22

Emanuele Greco · Accepted Answer · 2011-09-27 08:21:03Z

3

In order to complete Jan's and Neil's answers, you should look at your web.config and set both timeouts (sessionState and authentication)

<sessionState timeout="300"/>

Sessionstate timeout specifies the number of minutes a session can be idle before it is abandoned. The default is 20.

<authentication mode="Forms">
  <forms loginUrl="Login.aspx"  timeout="300" />
</authentication>

Forms timeout is used to specify a limited lifetime for the forms authentication session. The default value is 30 minutes. If a persistent forms authentication cookie is issued, the timeout attribute is also used to set the lifetime of the persistent cookie.

answered Sep 27, 2011 at 8:21

Emanuele Greco

12.8k7 gold badges55 silver badges72 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Jaggu Over a year ago

I don't think this will solve the issue. I had both timeout as 2880 which is just too big! I sign in a user using FormsAuthentication.SetAuthCookie(userName, true); Is there any else to be done also?

Neil Thompson · Accepted Answer · 2011-09-27 07:44:19Z

1

Your session may still be alive (if you set it to 300 minutes) but the ASP.NET membership could be expiring?

Have you increased the authentication timeout too?

<authentication mode="Forms">
  <forms loginUrl="Login/" timeout="180"/>
</authentication>

answered Sep 27, 2011 at 7:44

Neil Thompson

6,4652 gold badges33 silver badges55 bronze badges

Comments

Jan · Accepted Answer · 2011-09-27 07:04:55Z

0

You are mixing authentication and session. These are two completely different concepts. GetUser() return the currently authenticated user form your MemberShipProvider.

Session and authentication have different timeouts - so its valid that your session times out but the user is still authenticated.

answered Sep 27, 2011 at 7:04

Jan

16.1k5 gold badges38 silver badges60 bronze badges

Collectives™ on Stack Overflow

Problem: control Session timeout

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related