Hi All,

We have developed our intranet website using DotNetNuke Ver.04.09.00 and Dot Net framework ver2.0.50727.832. We are using the Active Directory authentication provider to log in people directly using their AD credentials. We have also set it up to log in people automatically. The automatic logins are working fine, but the only issue we are facing is that the users are logged out every 60 minutes (one hour). They are automatically logged out and logged in as a result of which they lose out on the data they were updating and this behavior seems odd to the end user.

As we are working on the intranet, we do not want people to log out after only an hour, one day (24 hours) would be an appropriate time.

We did much research on this and tried many things to fix this.

We have tried out the following things:

1.  we have put in a very large timeout number under the forms authentication in web .config

<authentication mode="forms">
      <forms name=".DOTNETNUKE" timeout="10000" slidingExpiration="true" cookieless="UseCookies" />
    </authentication>

2. we have added a large value under memebership for the userIsOnlineTimeWindow attribute in web.config

<membership defaultProvider="AspNetSqlMembershipProvider" userIsOnlineTimeWindow="20160">

3.  We have also enabled the persistent cookie timeout featureby adding in a large value

<add key="PersistentCookieTimeout" value="20160" />

4. A large value has also been added for Session timeout

    <sessionState timeout="1440" />

We really need to fix this Asap. Any kind of help would be greatly appreciated.

Thanks.

One thing to check is to make sure your web.config file  is not being overwritten, that would restart the application.

I'm not sure if DNN overrides any of those parameters in code, you may want to search the sourcecode for Session.Timeout