[Mailman-Users] What determines mailman webui login duration?

[Mark Sapiro]

On Thu Nov 14, Stephen J. Turnbull wrote:
> Which for Mailman 2 appears to be AUTHENTICATION_COOKIE_LIFETIME:
> 
> # If the following is set to a non-zero value, web authentication
> # cookies will
> # expire that many seconds following their last use.
> AUTHENTICATION_COOKIE_LIFETIME = 0
> 
> from Defaults.py.in.


The above was added in Mailman 2.1.15, but there was a bug in that only
'user' cookies were refreshed with each use, so if
AUTHENTICATION_COOKIE_LIFETIME was non-zero, 'admin', 'moderator', etc.
cookies would expire that many seconds after being initially set instead
of after their last use.

This is fixed for the next release. See
<https://bugs.launchpad.net/mailman/+bug/1257112> for the bug report and
<http://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1438>
for the fix.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan