Roundcube Community Forum

 

session timeout not working after roundcube 1.5.5 upgrade.

Started by jitendra1980, March 28, 2024, 08:44:42 AM

Previous topic - Next topic

jitendra1980

Dear Team,

We are using Iredmail 1.4.2.We have recently upgraded the roundcube 1.5.5  due to vulnerability issues but now session timeout is not working. It's already there in config.inc.php.

// Session lifetime in minutes
$config['session_lifetime'] = 20;




JohnDoh

Please explain what "is not working" means if you want a meaningful response.
Roundcube Plugins: Contextmenu, SpamAssassin Prefs, and more...

jitendra1980

Dear Team,

We have observed that the Roundcube webmail session is not disconnecting automatically. As per the configuration, the session should expire after 10 minutes of inactivity. However, even if the user does not log out manually, the session remains active for 24–48 hours.

Kindly check and provide the solution.


JohnDoh

can you enable `$config['session_debug'] = false;` and provide the relevant, anonymised logs?
Roundcube Plugins: Contextmenu, SpamAssassin Prefs, and more...