The session timeout should be a moving window, more a tracker of inactivity than a hard stop. This timeout should be 20 minutes.
So basically any time the user makes a request the session expiration time should be moved back X minutes in the session store.
patch submitted as:
[PATCH 63] Implement session activity timeout
master: 059a907
ipa-2-2: dc8cca8
Metadata Update from @rcritten: - Issue assigned to jdennis - Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/02
Login to comment on this ticket.