Re: WAM authentication timeout

["Gillian (Jill) Dian Ellern" <ellern@xxxxxxxxxx>]

Mieko,
I have some questions about what you and Bob wrote here...I can only assume that
you must validate for in-house use of WAM?  So if you do validate in-house, then if
a user is denied access then the computer is blocked for any user for 10
minutes..is this correct?
so...if you do not validate..this wouldn't come up in-house because you never are
asked to validate...is this correct?
gde

Mieko Yamaguchi wrote:

> Worse still if a user attempts to access a database and fails to be
> authenticated because s/he is not authorized, the Web server seems to
> continue denying access to *any* database through WAM for 10 minutes by
> any user.  I agree that a shorter timeout would be inconvenient for
> remote users for whom we provide WAM but each site should perhaps be able
> to determine the length of timeout?
>
> Also WAM usage statistics report accesses attempted and denied alongside
> successful connections.  I don't think this is helpful.  Perhaps another
> enhancement request?
>
> On Mon, 16 Sep 2002, Bob Duncan wrote:
>
> > At 01:23 PM 09/16/2002 -0500, Bill Topritzhofer wrote:
> > >Does anyone know how long a user remains authenticated after they have
> > >entered their name/barcode through WAM? We're seeing a problem here where
> > >users are authenticated, walk away, and then a new user is able to connect
> > >to databases w/o entering their patron information. We would like a short
> > >time out period if possible.
> >
> > Authentication lasts for 10 minutes.  (WAM was designed to support remote
> > users (where a shorter timeout would be inconvenient).)
>
> Mieko
> -----
> Mieko Yamaguchi                                m.yamaguchi@xxxxxxxxxx
> Technical Services Manager/System Coordinator        +44 (0)1248 382970
> Main Library, University of Wales Bangor, UK   +44 (0)1248 382979 (Fax)
>
> --
> This message was distributed through the Innovative Users Group INNOPAC list
> Public replies:  INNOPAC@xxxxxxxxxx
> Update your subscription options: http://innopacusers.org/list/listinfo/innopac