Accidentally logged out of Gnome during VNC session (Solved)

The title says it all; I'm stuck with SSH, and x11vnc won't start when no one is logged in. I didn't know this. Now I know
Is there any way to log myself back in so I can start x11vnc again?
Harry
EDIT: Stopped GDM manually, created an .xinitrc file with "exec gnome-session" in it, and then ran xinit. Piece of cake
Last edited by cautha (2008-06-16 06:39:15)

I know this is marked "solved," but is there any way to give myself the GDM login screen so gnome-settings-daemon functions properly?
Harry

Similar Messages

GDM does not appear back after logging out from Gnome.

Hello,
I am tryingout Archlinux for the first time. I am able to goto run level 5 and after booting I get the GDM login screen. I can log in to Gnome. But when I log out from Gnome, GDM does not appear, but I get a black screen. Then, the only way to come out is to press the reset button.
What may be the problem?
Thanks for your help.
Anand

it may depend on how ur running gdm, (possibly with -*no-daemon option) .. in which case it'd prolly werk if u removed it...
although i'd recommend using rc.conf instead as it's a lot cleaner...
to use /etc/rc.conf
add gdm to the DAEMONS;
mine = "DAEMONS=(gdm @syslog-ng @network @alsa @httpd)"
that starts gdm(in daemon mode), then starts syslog-ng,net*,alsa and apache in the background .. save me about 6 seconds when i background em.
then you need to change the default runlevel in /etc/inittab to 3 (not 5)

Accidentally logging out with 5 finger swipe

Hey guys quick question. Has anyone experienced accidentally logging out or shutting down when using 5 finger to minimize all windows. I know you can do it with 4 but I typically use 5 since I use 4 for mission control. It's random but happens almost everyday now.

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Logging out of gnome is slow

Every time I log out it takes about 20-30 seconds. It happens on gnome-shell and fallback.
dmesg shows:
gnome-settings-[3119]: segfault at 7fd7a2279210 ip 00007fd7a2279210 sp 00007fff4f3ffdb8 error 14 in libdbus-1.so.3.5.3[7fd7a28ea000+43000]

I've tested various login managers and desktop environments, and it seems to have something todo with gdm and with a "framebuffer mode" issue (which I don't understand much). The problem occurs with various desktop environments, apparently as long as I log in with gdm. It doesn't seem to happen if I use startx from the console. At some point, I added vga=771 in my grub menu.lst file, ie. from:
title Arch Linux (kernel26)
root (hd0,2)
kernel /boot/vmlinuz26 root=/dev/sda3 ro noacpi acpi=0ff
to:
title Arch Linux (kernel26)
root (hd0,2)
kernel /boot/vmlinuz26 root=/dev/sda3 ro vga=771 noacpi acpi=off
As a result, it gave me a multitude of "gdm-binary WARNING: GdmDisplay: display lasted 0.06... seconds" errors. It didn't even start gdm, and when I killed it, it gave "Fatal Server error: Cannot run in framebuffer mode ..." errors.
I would like to fix the error "(EE) open /dev/fb0: No such file or directory" that pops up in Xorg.0.log, but I don't know how to. Any help would be appreciated.

I've just installed mountain lion on my macbook pro. I cannot open preview and it is also stalling the log out sequence? How can I solve this

I've just installed Mountain Lion on my Macbook pro and cannot now open Preview. I've partly solved the reading of PDF documents by installing Adobe Reader, but Preview is also stalling the log out process. Any suggestions how I might solve this annoying trait would be most appreciated. Many thanks.

vidaiow wrote:
Have just tried force quiting Preview via the Dock and reopening a file and it worked . Hurrah !. Thanks for your help.
Just an FYI, normally you give the 'solved' award to the person who gave you the answer, not to yourself.

Cannot log out of a Box Office Session

Help. I am stuck in a box office site that will not let me order tickets from other sites. The web site (TicketsPlus.com) said it is my problem as the site times out after you close it. I have been stuck there since Friday. Plus the tickets I ordered for a Broadway show and paid &15 FedEx fee still haven't come. I think I've been scammed. I have cleared the history and cache, shut down, disconnected the modem, turned off Javascript (which is the message I get about still being in a box office session and to close out. Any ideas? I have tried everything.

Hi,
No, you cannot sign out Outlook client.
In the upper right hand corner, click the little X to close the Outlook client or disconnect it from the internet, both will disconnect Outlook client from the email server.
Thanks,
Ethan Hua CHN
TechNet Community Support

Enhancement while user log out of the session

Hi
We are connecting to the external system through web services and query it to get the data. We will call this connection to external system from most of the important transactions. Our problem is, once the user connects to the external system, he has to stay connected tilll the user log out i.e. user has to disconnect while he log out. I am using shared objects and creating instance while user connects. But no clue where to clear this instance and close the connectivity. So, my question is there any BADI, Userexit or enhancement triggers while user log out or any other way to implement . Please advise
Regards
Shailaja.

HI Sailaja ,
You can check that by Creating One RFC by passing parameter when you are connecting to external system and also when you are logging out of the external system , one flag can be paased to RFC when he logs out and can close the session accordingly .
Regards
Deepak.

Preventing automatic log out from Apex Developer session

Hello,
I've noticed that I am frequently being logged out of my Apex Developer session whenever I am tryng to 'return' to application builder after running/testing my application (using Apex Developer). It seems quite random as to whether it happens or not, but since migrating to Apex v4.2 it appears to be happening more frequently ( based on my first week of using this version). Is there any setting that can be applied to prevent this happening or to extend the timeout/inactivity period before it does happen,
thanks in advance,
Kevin.

Login as INTERNAL / ADMIN and go to Manage Instance > Security. There, you can define the maximal
Maximum Session Length in Seconds
The help says:
"Enter a positive integer to control how many seconds an application session is allowed to exist. This setting is superceded by the application level setting. Leave the value null in order to revert to the default value of 8 hours (28800 seconds). Enter 0 to have the session exist indefinitely. This session duration may be superseded by the operation of the job that runs every hour which deletes sessions older than 12 hours."
and the
Maximum Session Idle Time in Seconds
The help says:
"Enter a positive integer to control how many seconds a session may remain idle for Oracle Application Express applications. This setting is superceded by the application-level setting. Leave the value null in order to revert to the default value of 1 hour (3600 seconds). Set to 0 to prevent session idle time checks from being performed."
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.apress.com/9781430235125
http://apex.oracle.com/pls/apex/f?p=31517:1
http://www.amazon.de/Oracle-APEX-XE-Praxis/dp/3826655494
-------------------------------------------------------------------

[SOLVED] JAZN log out not working

Hi,
I'm having a problem with JAZN security in an ADF Faces application, particularly with logging out. I'll minimize the set of pages involved in order to explain the problem, it is as follows:
The application has HTML form authentication managed by a JAZN XML file. The pages involved are
- Login.jspx (login page)
- Main.jspx (secured page with a "log out" button)
When the log out button is clicked the session is terminated and the user is redirected to the login page. After this, when I try to log in again nothing happens so I can't log in again.
Here is the code:
<< Login.jspx >>
<?xml version='1.0' encoding='windows-1252'?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.0" xmlns:h="http://java.sun.com/jsf/html"
          xmlns:f="http://java.sun.com/jsf/core" xmlns:af="http://xmlns.oracle.com/adf/faces"
          xmlns:afh="http://xmlns.oracle.com/adf/faces/html">
<jsp:output omit-xml-declaration="true" doctype-root-element="HTML" doctype-system="http://www.w3.org/TR/html4/loose.dtd"
              doctype-public="-//W3C//DTD HTML 4.01 Transitional//EN"/>
<jsp:directive.page contentType="text/html;charset=windows-1252"/>
    <html>
      <head>
        <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"/>
        <title>login</title>
      </head>
      <body><form action="j_security_check" method="post">
          <table cellspacing="3" cellpadding="2" border="0" width="100%">
            <tr>
              <td width="120">
                <b style="whitespace:nowrap">User</b>
              </td>
              <td>
                <input type="text" name="j_username"/>
              </td>
            </tr>
            <tr>
              <td width="120">
                <b>Password</b>
              </td>
              <td>
                <input type="password" name="j_password"/>
              </td>
            </tr>
            <tr>
              <td><jsp:text><![CDATA[ ]]></jsp:text></td>
              <td>
                <input type="submit" name="logon" value="Sign On"/>
              </td>
            </tr>
          </table>
        </form></body>
    </html>
</jsp:root><< Main.jspx >>
<?xml version='1.0' encoding='windows-1252'?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.0" xmlns:h="http://java.sun.com/jsf/html"
          xmlns:f="http://java.sun.com/jsf/core" xmlns:af="http://xmlns.oracle.com/adf/faces"
          xmlns:afh="http://xmlns.oracle.com/adf/faces/html" xmlns:cust="http://xmlns.oracle.com/adf/faces/customizable">
<jsp:output omit-xml-declaration="true" doctype-root-element="HTML" doctype-system="http://www.w3.org/TR/html4/loose.dtd"
              doctype-public="-//W3C//DTD HTML 4.01 Transitional//EN"/>
<jsp:directive.page contentType="text/html;charset=windows-1252"/>
<f:view>
    <afh:html>
      <afh:head title="Main">
        <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"/>
      </afh:head>
      <afh:body>
        <h:form>
          <af:commandButton text="Logout" action="#{login.logout}"/>
        </h:form>
      </afh:body>
    </afh:html>
</f:view>
</jsp:root><< jazn-data.xml >>
<?xml version = '1.0' encoding = 'windows-1252' standalone = 'yes'?>
<jazn-data xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/jazn-data-10_0.xsd" filepath="" OC4J_INSTANCE_ID="">
    <jazn-realm>
        <realm>
            <name>jazn.com</name>
            <users>
                <user>
                    <name>user</name>
                    <credentials>{903}dn3x1m8PHXf4z1+aLjhNH3+9HIVSWd3l</credentials>
                </user>
                <user>
                    <name>anotherUser</name>
                    <credentials>{903}nhz/q14H8m4cmZ2KRBDBSDzCgFn4EQ3nA/b788Egorg=</credentials>
                </user>
            </users>
            <roles>
                <role>
                    <name>authenticatedUsers</name>
                    <members>
                        <member>
                            <type>user</type>
                            <name>user</name>
                        </member>
                        <member>
                            <type>user</type>
                            <name>anotherUser</name>
                        </member>
                    </members>
                </role>
            </roles>
        </realm>
    </jazn-realm>
    <jazn-policy/>
</jazn-data><< web.xml >>
<?xml version = '1.0' encoding = 'windows-1252'?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4"
         xmlns="http://java.sun.com/xml/ns/j2ee">
    <description>web.xml file for Web Application</description>
    <filter>
        <filter-name>adfFaces</filter-name>
        <filter-class>oracle.adf.view.faces.webapp.AdfFacesFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>adfFaces</filter-name>
        <servlet-name>Faces Servlet</servlet-name>
        <dispatcher>FORWARD</dispatcher>
        <dispatcher>REQUEST</dispatcher>
    </filter-mapping>
    <servlet>
        <servlet-name>Faces Servlet</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet>
        <servlet-name>adfAuthentication</servlet-name>
        <servlet-class>oracle.adf.share.security.authentication.AuthenticationServlet</servlet-class>
        <init-param>
            <param-name>success_url</param-name>
            <param-value>faces/Main.jspx</param-value>
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet>
        <servlet-name>resources</servlet-name>
        <servlet-class>oracle.adf.view.faces.webapp.ResourceServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>/faces/*</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>adfAuthentication</servlet-name>
        <url-pattern>/adfAuthentication/*</url-pattern>
    </servlet-mapping>
    <servlet-mapping>
        <servlet-name>resources</servlet-name>
        <url-pattern>/adf/*</url-pattern>
    </servlet-mapping>
    <session-config>
        <session-timeout>35</session-timeout>
    </session-config>
    <mime-mapping>
        <extension>html</extension>
        <mime-type>text/html</mime-type>
    </mime-mapping>
    <mime-mapping>
        <extension>txt</extension>
        <mime-type>text/plain</mime-type>
    </mime-mapping>
    <jsp-config/>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>adfAuthentication</web-resource-name>
            <url-pattern>/adfAuthentication</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>oc4j-administrators</role-name>
        </auth-constraint>
    </security-constraint>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Secure Zone</web-resource-name>
            <url-pattern>/faces/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>authenticatedUsers</role-name>
        </auth-constraint>
    </security-constraint>
    <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>login.jspx</form-login-page>
            <form-error-page>error.html</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <role-name>authenticatedUsers</role-name>
    </security-role>
</web-app><< orion-application.xml >>
<?xml version = '1.0' encoding = 'windows-1252'?>
<orion-application xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-application-10_0.xsd">
<jazn provider="XML" location="./jazn-data.xml" default-realm="jazn.com" jaas-mode="doAsPrivileged"/>
</orion-application><< faces-config.xml >>
<?xml version="1.0" encoding="windows-1252"?>
<!DOCTYPE faces-config PUBLIC
"-//Sun Microsystems, Inc.//DTD JavaServer Faces Config 1.1//EN"
"http://java.sun.com/dtd/web-facesconfig_1_1.dtd">
<faces-config xmlns="http://java.sun.com/JSF/Configuration">
<application>
    <default-render-kit-id>oracle.adf.core</default-render-kit-id>
</application>
<managed-bean>
    <managed-bean-name>login</managed-bean-name>
    <managed-bean-class>view.LoginBean</managed-bean-class>
    <managed-bean-scope>request</managed-bean-scope>
</managed-bean>
</faces-config><< LoginBean.java >>
package view;
import java.io.IOException;
import javax.faces.context.ExternalContext;
import javax.faces.context.FacesContext;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
public class LoginBean {
    public LoginBean() {
    public String logout() throws IOException {
         FacesContext ctx = FacesContext.getCurrentInstance();
         ExternalContext ectx = ctx.getExternalContext();
         HttpServletResponse response = (HttpServletResponse)ectx.getResponse();
         HttpSession session = (HttpSession)ectx.getSession(false);
         session.invalidate();
         response.sendRedirect("Login.jspx");
         ctx.responseComplete();
         return null;
}Is there anything wrong or missing?
Thanks,
Yoel

Hi,
in BASIC authentication the browser autenticates the user (browser sso). A new session is created - wich means that all session information of the previous application run are deleted. To avoid browser sso you need to close the browser process. The BASIC authentication issue is not caused by JAZN but the way this authentication is speced by teh W3C
Frank

New MacBook Pro resolution randomly changes at log out

Hello!
I recently ordered a brand new 15in 2.2 GHz MacBook Pro with a Glossy Hi-Res Display and it arrived Tuesday of this week. I set it up with only one account but still goes into the Login Screen at startup. After a while, I went to shut down and accidentally logged out out of habit. When I did so, the resolution changed. I logged back in to restore it. When I went to the Display Preference Pane, two windows popped up, indicating that the computer detected two displays. I tried changing the resolution on both "displays" but it would not let me. The only way I was able to reset the resolution was by restarting, but the problem still persists when I log off. After getting through the set up screen when I first set it up, the first thing I did was run software update, so I know everything is up to date.
Any suggestions? Thanks!
-Jake

The problem is that when the machine is closed, it goes to sleep, and in sleep mode, all that goes on is that a bare trickle of power is used to keep the contents of RAM alive. Networking is definitely not active while asleep.
Now, regarding ds store's solution, that's a fairly bad idea. If the machine is just sitting at your desk, you don't need to close it, or if you feel a need to close it you can use Kappy's solution. (Although, it should be noted that apps like InsomniaX and Caffeine do not, as far as I know, keep a machine awake when the lid is shut.) If you're worried about passersby seeing your screen, just activate the screen saver instead. You could even require a password to dismiss the screen saver for added security.
On the other hand, if the machine is being transported, keeping the lid open and the machine running is not a good idea. The sudden motion sensor ought to protect your hard drive against damage caused by moving the machine around... if it's working properly, and I'd rather not depend on an "if" to prevent hardware damage to the machine. Plus, if it's in a bag and you've forced it to stay running, it could overheat due to lack of ventillation.
So, long story short: if you're transporting it, close it and deal with logging back in to the network, and if it's on your desk, don't bother closing it.

How to insert log In & Log Out Time in to Table

hi,
i have create a login form there are three textfield
Username
Passward
request is for identify user is admin or User
i have create two table for login details
CREATE TABLE "USERS"
(     "USER_ID" VARCHAR2(10) NOT NULL ENABLE,
     "PASSWORD" VARCHAR2(30),
     "EMAIL_ID" VARCHAR2(50),
     "ROLE" VARCHAR2(1),
     "PHONE_NO" VARCHAR2(15),
     "EMP_ID" NUMBER,
     CONSTRAINT "USERS_PK" PRIMARY KEY ("USER_ID") ENABLE
CREATE TABLE "USER_RECORD"
(     "SERIAL" NUMBER NOT NULL ENABLE,
     "USER_ID" VARCHAR2(10),
     "LOGIN_TIME" VARCHAR2(20) NOT NULL ENABLE,
     "DTE" DATE,
     "LOGOUT_TIME" VARCHAR2(20),
     "STATUS" VARCHAR2(1),
     CONSTRAINT "USER_RECORD_PK" PRIMARY KEY ("SERIAL") ENABLE
DECLARE
V_ROLE VARCHAR2(1);
BEGIN
SELECT ROLE INTO V_ROLE FROM USERS
WHERE USER_ID =:P68_USERNAME;
INSERT INTO USER_RECORD
VALUES(:P68_S_NO,:P68_USERNAME,TO_CHAR(SYSDATE,'HH24:MI:SS'),TO_DATE(SYSDATE,'DD-MON-YYYY'),NULL,'N');
END;
i am using this code to insert login time in to table USER_RECORD.
now i have create log out Navigation Bar on every page ,i want when i click on any on logout link in upper side of page then the logout time should go into USER_RECORD table in LOGOUT_TIME column.
How can i do this.
Thanks
Manoj

Hello
Well, i have read and tried to understand what is your goal..
The goal is to record a user when they log out, right?I have implemented something in a very similar way and I remember I read it once...from a blog...quite easy...
Here is the way to implement it...
On the log out URL.. divert it to a single page lets say page: 99..
f?p=&APP_ID.:99:&APP_SESSION.Page 99 will be a special page which is called when a user logs out of your application right...
Now..then create an application which you will load before the header....
The job of this application process will be to insert the required information in your table, your code:
INSERT INTO USER_RECORD
VALUES(:P68_S_NO,:P68_USERNAME,TO_CHAR(SYSDATE,'HH24:MI:SS'),TO_DATE(SYSDATE,'DD-MON-YYYY'),NULL,'N');then call a APEX LOG OUT FUNCTIONS which will invalidate session and redirect user to your default log in page: 101<APEX default Authentication Scheme>
like
wwv_flow_custom_auth_std.logout( p_this_flow=>:APP_ID,p_next_flow_page_sess=>:APP_ID ||'.:101');
This APEX Function will logout user, and then redirect the user to the next page with a new session id to your default page
like i have added it below
BEGIN
SELECT ROLE INTO V_ROLE FROM USERS
WHERE USER_ID =:P68_USERNAME;
INSERT INTO USER_RECORD
VALUES(:P68_S_NO,:P68_USERNAME,TO_CHAR(SYSDATE,'HH24:MI:SS'),TO_DATE(SYSDATE,'DD-MON-YYYY'),NULL,'N');
wwv_flow_custom_auth_std.logout( p_this_flow=>:APP_ID,p_next_flow_page_sess=>:APP_ID ||'.:101');
END;this processes should be done in default like when before a page is loaded...that is my magic trick
Hope I was able to help.
Regards,
Noel Alex Makumuli,
Tanzania

Creative Cloud app logs out every 20-40 minutes.

Hi. My CC logs out very often during the day. I have to re-type my cc username and passwort approx: 20-30 time a day!!! Nearly every time I open a program like Photoshop, InDesign, Illustrator, Muse, Dreamweaver. Everytime I have to re-type my login. Problem exists since 7 weeks. Yesterday I made new WIN7 installation. But still same problem. I sit here in front of the screen sice 24 hours now to solve the problem. No success but huge amount of coffee.
Thanks for your replies.

We already complained about this. Adobe is not listening us: http://forums.adobe.com/message/5709728#5709728

Possible scenarios Extension Mobility can get logged out

I'm trying to determine what are the possible causes a user can get logged out from the Extension Mobility session?
I know one of it is when the maximum login time is reach, the user will get logged out but what other scenario's can a user get logged out?

Hi,
One reason is listed in the link below
http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/18772-extension-mobility.html#logsout
Just want to add that a phone reset / restart or deactivating extension mobility service will not result in the logout of the IP phone from extension mobility logged in profile.
HTH
Manish

Sometimes Gnome just logs out, instead of rebooting/shutting down

I'm running Gnome with GDM. I randomly have the experience that every once in a while when I select "restart" or "shutdown" from the Gnome shutdown dialogue, it just logs out intsead and returns me to the GDM login screen. I can then shutdown or reboot successfully from the login screen. It's not really a big deal. It happens a couple times a week. I'm just curious if anyone else is experiencing this and/or can shed any light on it.

I'm having the same issue and still looking for a solution as it's a bit annoying for me. I've found a couple of threads about similiar problems on this forum (as well as on forums for other distros), but couldn't find a workaround. I've changed PolicyKit settings to allow anyone or just specific user to shutdown the system, but it didn't help. I've also tried to strace gnome-session and gdm, but couldn't find any clues.
Has anyone of you managed to find a workaround for this problem?
Last edited by stolowski (2009-10-03 12:29:58)

Clearing Session and/or App variables with Log-out Page?

Greetings
I have 3 distinct user types for my app- admins, appraisers and clients.
All have their own directories and each directory has it's own Application.cfm:
1) <cfapplication name="appraiseri"
applicationtimeout="#CreateTimeSpan(0,2,0,0)#"
clientmanagement="Yes"
sessionmanagement="Yes"
sessiontimeout="#CreateTimeSpan(0,2,0,0)#"
SetClientCookies="Yes">
2) <cfapplication name="appraiserview" ......
3) <cfapplication name="clientview" .......
Each have their own login which simply uses their ID in the DB as the session variable.
login_do.cfm:
1) Appraisers: <CFIF auth_direct_appraiser.RecordCount NEQ 0 >
<cfset Session.appraiser_user_id =auth_direct_appraiser.appraiser_ID>
<cfset Session.appraiser_fname =auth_direct_appraiser.appraiser_fname>
<cfset Session.appraiser_lname =auth_direct_appraiser.appraiser_lname>
2) Admins: <cfset Session.user_id =auth_direct.staff_ID> ......
3) Clients: <cfset Session.processor_user_id =auth_direct_processor.processor_ID>
I have had a session persisting for a week now- I have no idea how to get rid of it, and if one simply hits the "login" submit button with no UN or PW, it runs a query on a client (the same one) ?
My logout page is not working at all- if the code were correct, it would clear any session variable? I have not really set an app variable (except timeout) so no need to clear that?
Here is the code:
<CFLOCK SCOPE="Session" TYPE="Exclusive" TIMEOUT="60">
    <CFLOOP COLLECTION="#Session#" ITEM="Key">
        <CFIF NOT ListFindNoCase('IveSeenIT', Key)>
            <CFSET StructDelete(Session, Key)>
        </CFIF>
    </CFLOOP>
</CFLOCK>
<SCRIPT LANGUAGE="JavaScript">
    alert("You have been logged out from the XXXXX Intranet")
    location.href='login.cfm';
</SCRIPT>
Any help would be appreciated- this is leaving a huge security gap in the app right now.
Thanks

It in unnecessary to delete session keys to invalidate them. With proper coding they should be invalidated once the session times out.
Sessiontimeout values are usually around half an hour and applicationtimeout values are usually of the order of 1 day. Also, one way to relate session to login is to use the loginStorage attribute. If you have no need for client management, switch it off.
Hence, for example,
<cfapplication name="appraiseri"
applicationtimeout="#CreateTimeSpan(1,0,0,0)#"
clientmanagement="no"
sessionmanagement="Yes"
sessiontimeout="#CreateTimeSpan(0,0,30,0)#"
SetClientCookies="Yes"
loginStorage="session">
I am assuming that, for login and logout pages, you will - ignoring the details - have something like
Login:
<cflogin>
        <cfloginuser name = "some_name" password = "some_password"   roles = "appraiser"/>
</cflogin>
Logout:
<cflogout>

Accidentally logged out of Gnome during VNC session (Solved)

Similar Messages

Maybe you are looking for