How to adjust ENTM Session Timeout

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

During operation of CA PAM SC or PIM it may be desirable to adjust the session timeout so that even if it is left iddle for a certain time, the user doing the session is not logged out and reauthentication is required

The present article discusses how to do this

 

Environment

CA PAM SC 14.X and CA PIM all supported versions up to the writing of this document

Resolution

By default , the value is set to 30 minutes. Let's assume we need it to be increased to 2 hours (120 minutes)

The procedure for doing this is as follows

1.       Stop Jboss
   
   
2.       Go to: 

<JBOSS_HOME>\server\default\deploy\IdentityMinder.ear\user_console.war\WEB-INF and open the WEB.xml file in edit mode.

(<JBOSS_HOME>/server/default/deploy/IdentityMinder.ear/user_console.war/WEB-INF/WEB.xml on Unix/Linux platform)

3.       Change the below session timeout value from 30 to 120.
                 <session-config>

                                <session-timeout>120</session-timeout>

                </session-config>

4.       Delete the following directories

<JBOSS_HOME>\jboss-4.2.3.GA\server\default\tmp & <JBOSS_HOME>\jboss-4.2.3.GA\server\default\work on Windows

(<JBOSS_HOME>/server/default/tmp & <JBOSS_HOME>/server/default/work on Unix/Linux platform)
 

5.       Start JBOSS