How to modify the token expiration time

[Benchu Yao <ya...@gmail.com>]

Will the token automatically expire, where can I modify this expiration
time?

Thanks,
Yao Benchu

Re: How to modify the token expiration time

[Mike Jumper <mj...@apache.org>]

On Sat, Jul 4, 2020 at 9:26 PM Benchu Yao <ya...@gmail.com> wrote:

> If I set api-session-timeout to 0, does it mean that the token will expire
> immediately when the session ends
>

The web application session and the token are essentially the same thing.
They do not expire independently of each other. The token is how the
session is identified, and the session ceases to exist once its token is
invalidated. This is what happens when a user explicitly logs out of
Guacamole or when Guacamole terminates their session due to inactivity.

If you are referring to the remote desktop session, that is an entirely
different beast and has nothing to do with Guacamole's tokens or
Guacamole's sessions. If you want to configure how long a particular remote
desktop server allows sessions to stay alive, you will need to configure
that remote desktop server accordingly.

- Mike

Re: How to modify the token expiration time

[Benchu Yao <ya...@gmail.com>]

If I set api-session-timeout to 0, does it mean that the token will expire
immediately when the session ends

Nick Couchman <vn...@apache.org> 于2020年7月5日周日 上午11:47写道：

> On Sat, Jul 4, 2020 at 11:44 PM Benchu Yao <ya...@gmail.com> wrote:
>
> > Will the token automatically expire, where can I modify this expiration
> > time?
> >
> >
> Yes, default expiration is 60 minutes of inactivity.  You can modify the
> default using the api-session-timeout property in guacamole.properties:
>
>
> http://guacamole.apache.org/doc/gug/configuring-guacamole.html#initial-setup
>
> Please note this is the timeout of *inactivity*, which inactivity defined
> as the user having no sessions opened.  If the user has a session opened
> this timeout will not apply until all sessions are closed.
>
> -Nick
>

Re: How to modify the token expiration time

[Nick Couchman <vn...@apache.org>]

On Sat, Jul 4, 2020 at 11:44 PM Benchu Yao <ya...@gmail.com> wrote:

> Will the token automatically expire, where can I modify this expiration
> time?
>
>
Yes, default expiration is 60 minutes of inactivity.  You can modify the
default using the api-session-timeout property in guacamole.properties:

http://guacamole.apache.org/doc/gug/configuring-guacamole.html#initial-setup

Please note this is the timeout of *inactivity*, which inactivity defined
as the user having no sessions opened.  If the user has a session opened
this timeout will not apply until all sessions are closed.

-Nick