What's the limit value of session and engine timeouts for Bonita?

Submitted by ismail.lagouill... on Wed, 06/17/2020 - 02:25

Hey guys,

We were wondering what is the limit of HTTP Session & Bonita Engine Session timeouts? a few days? a week?

Here is the article on the knowledge base that we read: https://community.bonitasoft.com/blog/how-increase-session-and-engine-timeout-bonita-version-7

We want to set these values to 7 days (in /server/conf/web.xml and bonita-tenant-community-custom.properties), but we were wondering if the value could/will be handled correctly by Bonita?

Platform:

Bonita 7.10.4
Oracle JDK 1.8
PostgreSQL 11

Thanks in advance,

Log in or register to post comments
723 reads

1 answer

Submitted by julien.mege on Wed, 06/17/2020 - 09:56

This one is the BEST answer!

Hello,
for the engine session the default timeout is 1H, the configuration bonita.tenant.session.duration can be changed in the file bonita-tenant-community-custom.properties

(see the Information about sessions in this page https://documentation.bonitasoft.com/bonita/7.11/user-authentication-overview)

For the web session, the default value is 30 minutes, you can look in the tomcat server.xml configuration file,

see the property HTTP connector: connectionTimeout="20000"

hope this helps,

Julien.

Log in or register to post comments
126 reads

Comments

Submitted by ismail.lagouill... on Wed, 06/17/2020 - 18:12

Thanks Julien!! So there's no limit/max value we can set for both these parameters? The question was to raise these values to 7 days for example.

Thanks again ;)

Permalink

Submitted by julien.mege on Thu, 06/18/2020 - 09:58

Exactly, there is no limit. Maybe the java Max integer limit ? as it is in ms for the engine.

I was not able to found a limit for the tomcat, but anyway you can use 0 to specify an unlimited timeout, and just limit the engine session.

Permalink

Submitted by ismail.lagouill... on Thu, 06/18/2020 - 20:23

Thanks!! Just to keep this information here, it's possible to set the timeout to 0 for unlimited. However, it seems like after some research on the Internet that this configuration has to be checked/validated and used only in specific use-cases where it's necessary.

Permalink