HabitableZone

Geek Speak » in reply to "Remember me"

Remember...

That subject line keeps reminding me of Spock's mind meld with McCoy...but I digress.

The phenomenon of getting kicked out regularly seems to be more than just me occasionally rebooting the Apache Web server, so I started looking for configuration things that might improve the situation. DamnTikiWiki had this checkbox for "Remember me", and I turned it on, on the theory that it sounded vaguely relevant to the problem. I subsequently checked the DamnTikiWiki doc site and found this sketchy summary:

Remember Me

* When enabled, you can manage the amount of time that the system "remembers" a user, keeping the user logged in. Without a rememberme cookie, the session finishes when the php session end. A session can finish because the idle time has been reached or the user closes their browser (or tab in the browser, depending on the browser).
* The session length is set by the session.gc_maxlifetime setting in the php.ini file. If allowed by your host, you can overwrite this by using the Session Lifetime in Minutes field.
Be careful: Sometimes other application running on the same server can redefine the session length and if your session saves the session files in the same place than tikiwiki, you can have interference)
* With a remember me cookie, you can extend the time the system remembers a user (if the user allows cookies and does not limit the cookie to the session time). This time is set in admin->login. When a user checks remember me checkbox, the browser creates a cookie with a name beginning with 'tiki-user-' followed by the rememberme name you gave in admin->login.
* The rememberme feature allows you also to be able to close the browser and to be still logged in when you reopen the browser (if the timeout is not reached)
* In Release 2.0, this cookieis secure. The value does not contain the username or password. The value is a value saved in the database that is matched to find out the user name when the php session has expired. The cookie is deleted when you log-out. In tikiwiki >= 1.10, the remember me can be always activated (admin->login)
* If the user changes their IP or browser, the Remember Me feature will fail.


Short answer: I turned on a cookie and set its time to 2 hours (after last contact with the server). I made it optional while we experiment with it, but if it seems to work, I'll turn it on for everybody.

When I first set it up, I specified a domain of "habitablezone.net", after scratching my head over the probably implications of doing that. Eri's problem is very likely due to logging in to habitablezone.net from home, and .com from work. I removed the hostname spec just now, so let's see if Eri can log in from work tomorrow.

Log in or register to post.

The whole thread (9 posts)

Related discussions