iTP Secure WebServer System Administrator's Guide (iTPWebSvr 5.1+)

Administering Session Identifiers for Anonymous
Sessions
iTP Secure WebServer System Administrator’s Guide—522659-001
11- 6
Advanced Configuration Options
Advanced Configuration Options
This section describes how to customize the use of tickets to meet a variety of needs,
including:
•
Anonymous Ticketing Attributes (See below)
•
Setting the Anonymous Ticket Expiration Time (See page 11-8)
•
Browser Caching (See page 11-8)
•
How Proxy Servers Affect Ticketing (See page 11-8)
Anonymous Ticketing Attributes
You can use various ticketing attributes to control ticketing behavior, as outlined in
Table 11-1.
:
Table 11-1. Anonymous Ticketing Attributes
Attribute Description Default
AnonymousTicketExpiration Specifies the length of time that
anonymous tickets are valid.
6 hours
CookiePersistence Specifies the number of seconds,
from the time that a cookie is issued,
that the cookie remains valid.
0 seconds
EnableAnonymousTicketing Enables anonymous ticketing for
resources protected with specified
group IDs.
Anonymous
ticketing is
off for all
groups
PostExpirationExtension Adds a specified number of seconds
to the life span of the Session
Identifier. Allows clients time to get
a form, fill it out, and post it back to
the server.
3 hours
(10,800
seconds)
RequireIP Specifies a list of alias names that
refer to the content server.
None
RewriteHtmlLinks Causes the server to convert HTML
references to relative references or
disables conversion.
6 hours
RewriteImageLinks Causes the server to convert non-
HTML references to either relative
or absolute references.
0 seconds
SignatureLength Specifies how many bits long the
message authentication code (MAC)
for tickets must be. The longer the
MAC, the more tamper-proof the
ticket.
Anonymous
ticketing is
off for all
groups