Session Cookie Timeout Asp.net mvc Windows Authentication

Question

I use a session cookie to store an int when users first visit the system which is based on windows authentication. The cookie is set using this method

public ActionResult SetContractId(int contractId)
{
    Session["LoggedContractId"] = contractId;

    return RedirectToAction("IndexLoggedIn");
}

And access it in other methods using this

var creatorContractId = (int)Session["LoggedContractId"];

However this cookie times out after 20 mins and I cant seem to control this time

I have tried this in the webconfig

<system.web>
    <sessionState mode="InProc" timeout="1200" />
    <compilation debug="true" targetFramework="4.5.1" />
    <httpRuntime targetFramework="4.5.1" />
    <authentication mode="Windows" />
    <customErrors mode="Off" />
    <authorization>
        <deny users="?" />
    </authorization>
</system.web>

But it doesnt affect it

add mode="InProc" attribute to your sessionState element

vahid kargar
– vahid kargar

2016-03-09 11:27:50 +00:00
Commented Mar 9, 2016 at 11:27 — vahid kargar
– vahid kargar, Commented Mar 9, 2016 at 11:27

SharpC · Accepted Answer · 2022-02-03 14:34:11Z

1

It will not work until you don't exceed the application pool recycle time in IIS. This web.config setting takes effect if and only if it is less than or equal to Application Pool recycle settings. By default application pool has a setting of 20 minutes so please change that and then alter the web.config... it will 100% work.

edited Feb 3, 2022 at 14:34

SharpC

7,5544 gold badges53 silver badges45 bronze badges

answered Mar 9, 2016 at 12:59

Varun Vasishtha

4612 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Phill Sanders Over a year ago

I'm not familiar with IIS, where abouts is it in IIS8.5?

Varun Vasishtha Over a year ago

Go to an application pool in which your website is configured , on the click of application pool on the right side, you can find Advance Settings, click on it, then find Idle Time Out property and change it

Anil · Accepted Answer · 2016-03-09 12:43:43Z

0

Add mode also, this will work.

 <system.web>
       <compilation debug="false" targetFramework="4.5.1" />
        <sessionState mode="InProc" timeout="240" />
      </system.web>

edited Mar 9, 2016 at 12:43

answered Mar 9, 2016 at 11:30

Anil

3,7522 gold badges27 silver badges50 bronze badges

4 Comments

Phill Sanders Over a year ago

sadly that doesn't work still get an error saying that the session cookie isn't set

Anil Over a year ago

have you also defined forms timeout in your config?

Anil Over a year ago

try after <compilation debug="false" />, can you please add the code where you are accessing Session["LoggedContractId"] ?

Anil Over a year ago

In case this is related to idle timeout refer stackoverflow.com/questions/12314472/…

Collectives™ on Stack Overflow

Session Cookie Timeout Asp.net mvc Windows Authentication

2 Answers 2

2 Comments

4 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

4 Comments

Linked

Related