iTP Secure WebServer System Administrator's Guide (iTPWebSvr 6.0+)

Configuration Directives
iTP Secure WebServer System Administrator’s Guide—523346-002
A-54
Anonymous Ticket Attributes
Anonymous Ticket Attributes
The ticket attributes for use with the SI_Department and SI_Default Region
commands (and directives) include the following:
•
-CookiePersistence time-in-seconds on page A-54
•
-EnableAnonymousTicketing {GroupID GroupID ...} on page A-55
•
-PostExpirationExtension add-seconds on page A-55
•
-RequireIP on page A-56
•
-RewriteHostAlias "alias-name alias-name ..." on page A-56
•
-RewriteHtmlLinks { Relative | Off } on page A-57
•
-RewriteImageLinks { Absolute | Relative | Off } on page A-57
•
-SignatureLength { 32 | 64 | 128 } on page A-57
-AnonymousTicketExpiration time-in-seconds
The AnonymousTicketExpiration attribute specifies the lifespan of Session
Identifiers generated by the iTP Secure WebServer. When this period expires, the
Session Identifier is no longer valid. If access is attempted using an expired
Session Identifier, the iTP Secure WebServer issues a new ticket.
This attribute is effective only for anonymous ticketing (see Anonymous Ticketing
on page 11-1).
The Session Identifier Specification 1.0 allocates 16 bits for the expiration field. To
provide a useful set of values within these 16 bits, the content server sets
expiration times in increments of 8.5 minutes so that any expiration value between
0 and 511 results in an expiration time at the next 8.5-minute boundary. Likewise,
any value between 512 and 1023 results in an expiration time of approximately 17
minutes in the future.
The range of expiration times is approximately 8.5 minutes to 1 year.
The following default applies:
-AnonymousTicketExpiration 21600
where 21600 seconds equals 6 hours.
To use -AnonymousTicketExpiration in an SI_Default Region command,
enter the following:
SI_Default -AnonymousTicketExpiration 1800
-CookiePersistence time-in-seconds
The CookiePersistence attribute specifies the number of seconds that a
cookie remains valid, from the time that the cookie is issued. (The time period is
called the persistence of the cookie.)