iTP Secure WebServer System Administrator's Guide (iTPWebSvr 5.1+)

Administering Session Identifiers for Anonymous
Sessions
iTP Secure WebServer System Administrator’s Guide—522659-001
11- 7
Advanced Configuration Options
You can specify the attributes listed in Table 11-1 in one of the following three ways:
•
By Default Attributes
You can change the default value of any ticketing attribute shown in Table 11-1
on
page 11-6, by using the SI_Default directive, which has the following form:
SI_Default -attribute value [-attribute value] ...
For example, the directive
SI_Default -AnonymousTicketExpiration 7200
changes the validity period to 2 hours (7200 seconds). Attributes set through the
SI_Default directive apply to all regions following the directive unless
overridden by a subsequent department-wide or region-wide directive, or reset by
another SI_Default directive.
•
By Department-Wide Attributes
You can override a default attribute value by specifying a department-wide attribute
by using the SI_Department directive, which has the following form:
SI_Department departmentID -attribute value [-attribute
value]...
For example, the following directive sets the period cookies are valid to 1000
seconds for department 1, only. The default value of the CookiePersistence
attribute remains valid for all other departments:
SI_Department 1 -CookiePersistence 1000
Attributes set through the SI_Department directive apply to all regions in the
specified department unless overridden by a region-wide directive or reset by a
subsequent SI_Department directive.
•
By Region-Wide Attributes
You can override a default attribute value and a department-wide attribute value by
specifying the SI_Department command in the Region directive, which has the
following form
SI_Department departmentID -attribute value \
[-attribute value]...
For example, the following Region directive specifies the period (1800 seconds)
that Session Identifiers are valid.
Region /info/* {
SI_Department 1 -AnonymousTicketExpiration 1800
}
Any SI_Department commands in a region must precede all Region directive
SI_RequireSI commands in the same region. Attributes set through the
SI_Department command apply only to requests for contents in the region in
which the attributes are specified. For all other requests, the default or department-
wide attributes apply.