How to increase session time for login in asp.net

Guruprasad Anvekar

13y5.6k.NET

how to increase the session time for logged in user.?

i knw in return i will get reply as in web.config file to be considered as below.

protection="All"

timeout="2880"

name=".USERLOGINCONTROLAUTH"

path="/"

requireSSL="false"

slidingExpiration="true"

defaultUrl="CS.aspx"

cookieless="false"

enableCrossAppRedirects="false"/>

in dis above code highlifghted part tells the timeout n cookieless part.

but still session ends early den expected.

as example : gmail.com , facebook.com, etc where in user logged in session remains for longer time.

i need the same.

do give me proper n best solution for expertise please

8 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sunny Sharma13y ago
please refer to this post by Scott Hanselman, I hope this will help you:

http://www.hanselman.com/blog/HowToGetCookielessFormsAuthenticationToWorkWithSelfissuedFormsAuthenticationTicketsAndCustomUserData.aspx
Guruprasad Anvekar13y ago
but if u c in my code itself i hav mentioned in 8th line 'slidingExpiration="true"'
so wat next step???
its already present in my code itself.
any other solution for making user logged in for longer time by session>??

i need like gmail or facebook kind of stuffs for session logged in.
plz do give best solutions
Guruprasad Anvekar13y ago
So do u mean to say: slidingExpiration="true" has to be used and by using this session time out wont expire early?

plz give detailed explanation. needed urgently.
jus by applying dis slidingExpiration="true" the session wont expire early?
Sunny Sharma13y ago
you need to do this in your web.config file itself. it's a single attribute that you need to mention in your code in authentication section. see my reply above with your code modified.
Guruprasad Anvekar13y ago
i didn understand still about dis above answer.

where exactly i need to do dis.?

as i hav online project running in server n my client shout as its session time out happens early.

do give me best solution as i hav mentioned like gmail.com or facebook.com
Sunny Sharma13y ago
Set the Sliding Expiration to true.

     protection="All"
timeout="2880"
name=".USERLOGINCONTROLAUTH"
path="/"
requireSSL="false"
slidingExpiration="true"
defaultUrl="CS.aspx"
      cookieless="false"
enableCrossAppRedirects="false"
               slidingExpiration="true" />

It resets the timeout for on every request made.

HTH :)
Joxin Stanly13y ago
please check below link (it helps to prevent session timeout making use of heartbeat pattern)

http://weblogs.asp.net/stevewellens/archive/2009/06/09/ah-ah-ah-ah-staying-alive-staying-alive.aspx
Sanjeeb Lenka13y ago
may be the session timeout is set in iis just check that and increase it
1. Application Pool => Advanced Settings => Process Model => Idle Time-out
2. Sites => whatever web needs to be set => ASP => Session Properties => Time-out
3. Sites => whatever web needs to be set => Configuration Editor => system.web/sessionState => timeout
4. Sites => whatever web needs to be set => Configuration Editor => system.web/roleManager => cookieTimeout
or refer to these links
http://beyondrelational.com/modules/2/blogs/604/posts/14607/session-timeout-in-iis-7-worker-process-of-applicationpool.aspx

http://asp-net.vexedlogic.com/2012/05/23/aspasp-net-session-timeout-how-do-i-change-it/