Why isn't Fisheye session-timeout of 2hrs working?

Jeff Blaine

FECRU 4.0.3

How do we implement a functioning timeout of sessions after a period of time?

I've read everything I can find.

Supposedly we should be able to configure a 2 hour session timeout with <session-timeout>120</session-timeout> in /opt/fisheye/content/WEB-INF/web.xml as follows:

<session-config>
        <cookie-config>
            <name>FESESSIONID</name>
            <http-only>true</http-only>
        </cookie-config>
        <tracking-mode>COOKIE</tracking-mode>
        <session-timeout>30</session-timeout>
    </session-config>

I added this last night, restarted Fisheye, logged in to the web UI and my session still works fine this morning from the previous night.

Piotr Swiecicki

I'm afraid this is because rememberme cookie stored for every user authenticating to FishEye/Crucible.  See https://jira.atlassian.com/browse/CRUC-7130 for more details.