IBM Tivoli Netcool/OMNIbus, Version 7.4

Changing the timeout setting

You can change the period of time after which users are automatically logged out of the Web GUI.

About this task

HTTP Session timeout will logout the user if there is no network activity between client and server within the set timeout period.

LTPA time out will logout the user within the set timeout period regardless whether there is network activity between client and server.

Procedure

HTTP Session timeout
1. Open the following file: tip_home_dir/profiles/TIPProfile/config/cells/TIPCell/applications/isc.ear/deployments/isc/deployment.xml
2. In this file, locate the following section:
```
<tuningParams xmi:id="TuningParams_1226438889945" usingMultiRowSchema="false" maxInMemorySessionCount="1000" allowOverflow="true" schedule
Invalidation="false" writeFrequency="TIME_BASED_WRITE" writeInterval="10" writeContents="ONLY_UPDATED_ATTRIBUTES" invalidationTimeout="30">
<invalidationSchedule xmi:id="InvalidationSchedule_1226438889946" firstHour="14" secondHour="2"/>
```
3. Change the value of the invalidationTimeout attribute to the required timeout period, in minutes. For example, to change the period to 15 minutes, set the value as follows:
```
invalidationTimeout="15"
```
4. Save and close the file.
5. Check the timeout setting for the ISC.KEEPALIVE.INTERVAL property in tip_home_dir/profiles/TIPProfile/config/cells/TIPCell/applications/isc.ear/deployments/isc/isclite.war/WEB-INF/consoleProperties.xml. This timeout setting should be greater than the invalidation time out set in deployment.xml.
6. Check the timeout setting for the webtop.keepalive.interval property in the server.init file. This timeout setting should be shorter than the HTTP Session timeout period.
7. Restart the server.

LTPA timeout

Open the following file: tip_home_dirprofiles/TIPProfile/config/cells/TIPCell/security.xml

In this file, locate the following section:

<authMechanisms xmi:type="security:LTPA" xmi:id="LTPA_1" OID="oid:1.3.18.0.2.30.2" authContextImplClass=
"com.ibm.ISecurityLocalObjectTokenBaseImpl.WSSecurityContextLTPAImpl" authConfig="system.LTPA" simpleAuthConfig=
"system.LTPA" authValidationConfig="system.LTPA" timeout="1440" keySetGroup="KeySetGroup_TIPNode_1">

Change the value of the timeout attribute to the required timeout period, in minutes.
Save and close the file.
Restart the server.

Switching off the session timeout

You can set the session timeout to a large value to prevent sessions from timing out. This is useful where you have facilities such as wall displays that need to be available all the time.

About this task

You cannot switch off the timeout setting completely. Instead, you can set it to a large value that effectively means it is switched off. However, take note of the following:

There are security implications if unattended sessions do not timeout. Consider these implications carefully before implementing this procedure.
There may be a build up of resource usage should users close their browsers without logging off beforehand. Restarting the server reclaims those resources.

In a load balancing cluster, carry out this task on all nodes.

Procedure

To set the timeout so that sessions do not time out:

Use the procedure in <xref href="#web_adm_settimeout"></xref > to set the timeout values to the following values:

Table 1. Attribute values to switch off the session timeout
File	Attribute	Value
deployment.xml	invalidationTimeout	-1
security.xml	timeout	2147483647
server.xml	invalidationTimeout	-1