iTP Secure WebServer System Administrator's Guide (Version 7.0)

Configuration Directives
iTP Secure WebServer System Administrator’s Guide—523346-012
A-64
Anonymous Ticket Attributes
Session Identifier is no longer valid. If access is attempted using an expired
Session Identifier, the iTP Secure WebServer issues a new ticket.
This attribute is effective only for anonymous ticketing (see Anonymous Ticketing
on page 11-1).
The Session Identifier Specification 1.0 allocates 16 bits for the expiration field. To
provide a useful set of values within these 16 bits, the content server sets
expiration times in increments of 8.5 minutes so that any expiration value between
0 and 511 results in an expiration time at the next 8.5-minute boundary. Likewise,
any value between 512 and 1023 results in an expiration time of approximately 17
minutes in the future.
The range of expiration times is approximately 8.5 minutes to 1 year.
The following default applies:
-AnonymousTicketExpiration 21600
where 21600 seconds equals 6 hours.
To use -AnonymousTicketExpiration in an SI_Default Region command:
SI_Default -AnonymousTicketExpiration 1800
-CookiePersistence time-in-seconds
The CookiePersistence attribute specifies the number of seconds that a
cookie remains valid, from the time that the cookie is issued. (The time period is
called the persistence of the cookie.)
Cookies that have a persistence greater than 0 can be stored in the Web client,
across browser sessions so that sessions can continue across browser restarts,
whether or not the session is anonymous.
This attribute is effective only for anonymous ticketing (see Anonymous Ticketing
on page 11-1). For non-anonymous tickets, the ticketing agent controls how long
the ticket is valid.
This default applies:
-CookiePersistence 0
To use -CookiePersistence in an SI_Default Region command:
SI_Default -CookiePersistence 1800
-EnableAnonymousTicketing {GroupID GroupID ...}
The EnableAnonymousTicketing attribute turns on anonymous ticketing for
regions accessible to the specified groups. Anonymous ticketing enables you to
track requests without performing authentication or authorization. For more
information about anonymous ticketing, see Anonymous Ticketing
on page 11-1.