Set timeout in Apache ACL

solonely

12/14/23, 10:34 AM

for a page in an Apache webserver under ACL, is there a way to force apache to prompt again for credentials after a fixed timeout? For example, user tries to access the url, he fills the credentials and displays the page. After 10 minutes the webserver asks again for credentials and in case they're correct it responds with 401 page. Best regards

1 + 2

timeout

access-control-list

apache-2.4

solonely

12/14/23, 11:16 AM

It would be even good to make every page expire with timeout after a certain time. And then the user have to open another browser page and ask for the page

diya

12/16/23, 10:47 AM

That depends on how authentication is managed. Generally your can expire sessions server-side, but when you're using [Basic authentication](https://en.wikipedia.org/wiki/Basic_access_authentication) that option doesn't exist and neither the client nor the server can force a "log out" and re-validate credentials

Score:0

Server

Romeo Ninov

12/14/23, 10:48 AM

You can use AuthDigestNonceLifetime directive to set when the password will expire. For this you will need mod_auth_digest.

From Apache site:

The AuthDigestNonceLifetime directive controls how long the server nonce is valid. When the client contacts the server using an expired nonce the server will send back a 401 with stale=true. If seconds is greater than 0 then it specifies the amount of time for which the nonce is valid; this should probably never be set to less than 10 seconds. If seconds is less than 0 then the nonce never expires.

+ 3

solonely

12/14/23, 11:14 AM

Hi, I think it could work only if credentials are stored locally and not when using ldap. Is there a way instead to make all the pages require expire with timeout after a fixed time?

Romeo Ninov

12/14/23, 11:28 AM

@solonely, you did not mention LDAP in question. And AFAIK expiration is connected to credentials, not pages.

solonely

12/14/23, 11:34 AM

Yes, you are true... I'm sorry, I did not explain correctly the point

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Set timeout in Apache ACL

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.