topic Re: configure timeout viya 2021 in Administration and Deployment

configure timeout viya 2021

paterd2 — Thu, 21 Apr 2022 10:52:31 GMT

In 3.5 I had the option to configure session timeout.

In viya 2021 we want to increase the session timeout from 30 minutes to 4 hours.

How can I do this in version 2021+ ?

Regards,

Dik Pater

Re: configure timeout viya 2021

gwootton — Thu, 21 Apr 2022 12:54:42 GMT

Is this the option you are talking about?

Set Time-Out Interval for SAS Viya Web Applications
https://go.documentation.sas.com/doc/en/sasadmincdc/v_026/evfun/p19rd04uy9qnlkn10vwoajl66nxq.htm#n0dyk3u2aiveiun18egf485pz0o3

Re: configure timeout viya 2021

paterd2 — Thu, 21 Apr 2022 13:43:05 GMT

Mr. Gwooton.

Yes, but it is not working in our environment ( 2021.2 ).

We used 450m, now I put 30000s for studio analytics and for logon server I used 40000s.

The property is servlet.session.timeout

We have to restart some things.

I'll will reply if this succeeds.

Re: configure timeout viya 2021

gwootton — Thu, 21 Apr 2022 13:59:15 GMT

Making a change to a service configuration should trigger it to read in the new value automatically, so it shouldn't need a restart. Do you have any session timeout settings in your cloud provider configuration that could be impacting the session?

Re: configure timeout viya 2021

paterd2 — Wed, 20 Jul 2022 08:36:35 GMT

Mr G Wooton,

a late reply.

I used http.session.maxAge 7h for all except logon 8h.

servlet.session.timeout 7h for all except logon 8h.

The documentation says :

If you change the global time-out interval, you must restart all services in order for the change to take effect for any new sign-ins. If you change the interval for specific services, you must restart the services that you changed. For the http.session.maxAge property, the services are automatically restarted after you save the change.

So in this case they all get restarted.

I will post the result here.

Dik

Re: configure timeout viya 2021

paterd2 — Thu, 21 Jul 2022 09:05:03 GMT

It is still not working.

We will make a sas-ticket for support.

Re: configure timeout viya 2021

gwootton — Thu, 21 Jul 2022 12:47:23 GMT

Note that servlet.session.timeout expects a unit (i.e. 7h, 25200s, 420m) whereas http.session.maxAge is always represented in seconds without a unit (25200 would be 7 hours, 28800 for 8 hours)

Re: configure timeout viya 2021

paterd2 — Mon, 08 Aug 2022 09:36:01 GMT

Mr G Wooton

I found another config item , I will test this in combination with above.

I let you know the results.

Regards,

Dik Pater

SAS Help Center: How To

Configure the HTTP Session Time-out Interval

In the Definitions list, select server.
In the top right corner of the window, click New Configuration.
In the New server Configuration dialog box, click

.
In the Choose Services dialog box, complete the following:

Search for and then select SAS Logon Manager.
Click

.
Click OK.

In the New server Configuration dialog box, click

to add a new property.
In the Add Property dialog box, complete the following:

In the Name field, enter session.timeout.
In the Value field, enter the amount of time a session has to be idle before it times out, in seconds.
Click Save.

In the New server Configuration dialog box, click Save.
Restart all services to reflect the new time-out interval. For more information, see Operate a Specific Server or Service in SAS Viya: General Servers and Services.

Re: configure timeout viya 2021

paterd2 — Wed, 10 Aug 2022 07:58:45 GMT

Mr. Wooton,

The following combination worked for us.

Thanks .

For all except SASLogon, opendistro, opendistroDiscovery

http.session.maxAge: 25200

servlet.session.timeout: 7h

For only SASLogon

http.session.maxAge: 28800 (NB hoger dan die van de andere apps)

servlet.session.timeout: 8h (NB hoger dan die van de andere apps)

session.timeout: 28800

Re: configure timeout viya 2021

paterd2 — Tue, 19 Dec 2023 12:09:59 GMT

We had to add the following. This changed to default 1 hour.

Authentication timeout:

Dit gaat door via Environment manager de volgende instellingen te wijzigen: Configuratie instellingen → SAS Logon Manager

New Configuration → kies voor sas.logon.jwt

vul in bij :

policy.accessTokenValiditySeconds: 28800 (8 uur)

policy.global.accessTokenValiditySeconds: 28800 (8 uur)

Extract from : Tuning the authentication timeout for long-running jobs (sas.com)

With security being at the front and center of most SAS decisions, SAS is gradually reducing the default expiration for Access Tokens from the original value of 10 hours. Shorter-lived tokens reduce the window that a compromised token can be used by an attacker. To avoid possible disruption, this change is being implemented in steps. As of the stable release 2021.2.4 (February 2022), the Access Token default lifetime is decreased to 4 hours; in a later release, it will be further reduced to 1 hour.