Forums log me out and dont remember me

[uzeruzer]

These forums log me out after like 1 or 2 hours and its annoying because I have it set to remember me, so it should remember more than just my email address and keep me logged in for a longer time

[Guest]

Noted.

[pwillener]

Yes it does, and it sometimes does it in the middle of a post, and if you don't have recovery software (like the Lazarus add-on for Firefox), your post will be lost.

They know it, and they won't fix it!

[Phillip M Jones]

Someone said in one of the threads I belive if was Jockem, that the combination Adobe's upgrade cycle, and Jive's it will be about 9 months before the next upgrade. The next upgrade might fix this issue, then it might not. The only sure cure is split the login server for the Forums away from the Adobe Store. Nether should be tied to the other what so ever, for any reason.

[pwillener]

The reason for the timeout is indeed because the userid of the forum is tied with the Adobe store.

However, using the same login ID & profile is fine, but they don't need to use the same cookie for the login expiration.  After all, the URIs are different: forums.adobe.com vs. store1.adobe.com, so they could use a different cookie.

This is the only forum on the whole Internet where I need to login every few hours!

[Jochem van Dieten]

Pat Willener wrote on 8/26/2009 4:58 AM:

The reason for the timeout is indeed because the userid of the forum is tied with the Adobe store.

The reason for a login timeout is security and scalability. The reason

for the 4 hour timeout (which follows from the Jive sessions) is the

scalability of the Jive system. The reason for the 24 timeout (from the

Adobe AUID cookie) is the security of other Adobe systems.

This is the only forum on the whole Internet where I need to login every few hours!

I have a bunch of forums where I need to log in after 20 to 30 minutes

of inactivity. That is quite appropriate for those forums. For these

forums a 5 day timeout seems appropriate to me.

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[pwillener]

jochemd wrote:

I have a bunch of forums where I need to log in after 20 to 30 minutes

of inactivity. That is quite appropriate for those forums.

"Inactivity" seems to be the key here.  In this forum we get logged out while active; sometimes while typing a reply.  When clicking on the Post button, we find ourselves logged out, and the Back button does not bring the lost text back!

[Jochem van Dieten]

Pat Willener wrote on 8/28/2009 10:24 AM:

jochemd wrote :

>>

>> I have a bunch of forums where I need to log in after 20 to 30 minutes

>> of inactivity. That is quite appropriate for those forums.

"Inactivity" seems to be the key here. In this forum we get logged out while active; sometimes while typing a reply. When clicking on the Post button, we find ourselves logged out, and the Back button does not bring the lost text back!

What is happening is the following:

- you log in on the Adobe SSO portal;

- the Adobe SSO portal sets a cookie for 24 hours;

- the Adobe portal redirects you to login.jspa on the Jive side;

- Jive obtains your credentials from Adobe;

- Jive sets session cookies that expire when you close your browser;

- Jive creates a session on the server that expires after 4 hours of

inactivity.

Your session ends after 4 hours of inactivity (server side session

expiration) or when you close your browser (and your session cookies

disappear). That is all functioning as designed.

If your Jive session ends before your adobe.com cookie expires you can

continue to work with the forums. That is for up to 24 hours after your

login on the Adobe SSO portal. But all that time you will not have a

Jive session. So the moment your Adobe.com cookie disappears, which is

on a fixed date not related to activity, the forums will show you as

logged out because your session disappeared long ago and now your cookie

did too.

All of this can easily be verified by looking at the cookies in your

browser and playing with their values.

The simple fix for this is to make the adobe.com cookies session cookies

too. That way they disappear when you close your browser. So that way

you are logged out much sooner because you don't get the 24-hour period.

So you don't run the risk of loosing a reply, but instead are logged out

much faster. Would you prefer that behavior?

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[Guest]

That very comprehensive reply is no doubt completely accurate but it overlooks one important fact.

These forums are for users – not geeks and nerds!

PS – Due to the overlying adobe policy, I am in no doubt that neither the log-in farce not the pathetic slowness problem will ever be fixed.

[Jochem van Dieten]

John Joslin wrote on 8/28/2009 12:25 PM:

That very comprehensive reply is no doubt completely accurate but it overlooks one important fact.

These forums are for users – not geeks and nerds!

The geeks and nerds don't care about the problem, they have long solved

the problem by tuning their browser. Users don't care about the problem,

for them the forums are just a tool to get answers and their usage of

the forums does not follow a pattern where this is a problem.

There is a very specific and small group of people who follow a regular

pattern where they use the forum everyday at the same time of the day

who will be hit by the cookie expiring while they are writing a reply. I

think Adobe is paying way too much attention to the noise that is

generated by that group. Adobe should just kill cookies way more

aggressively to enforce its defined login policy and focus on solving

the other problems these forums have.

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[Guest]

jochemd wrote:

There is a very specific and small group of people who follow a regular

pattern where they use the forum everyday at the same time of the day

who will be hit by the cookie expiring while they are writing a reply.

That's not me. I am just annoyed that at the start of every day I have to log in.  OK, it's a couple of clicks, but I resent it because it needn't be necessary.  And of course the lumbering sluggish responses don't help either.

You should work for the UK government – they like answers that evade the issue! 

[Jochem van Dieten]

John Joslin wrote on 8/28/2009 1:07 PM:

You should work for the UK government – they like answers that evade the issue!

Unlike some I am not in the habit of repeating myself ad nauseam. I may

occasionally post on some of the technical aspects, but for the rest you

better use the search.

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[Harbs.]

Maybe this is a dumb question (I don't have any programming experience

with cookie), but why can't both session and stored cookies be used?

If it's still within the 24 hours (or whatever) of the original login,

a session cookie can automatically be created, and the stored cookie

should be reset to a new 24 hour period (or more). As long as the

session cookie is valid, the user should never be logged out.

Harbs

[Jochem van Dieten]

Harbs. wrote on 8/28/2009 12:48 PM:

Maybe this is a dumb question (I don't have any programming experience

with cookie), but why can't both session and stored cookies be used?

That limitation is implementation defined. If I were to guess I would

say that Adobe has created a rather limited specification for the

functionality and Jive implemented just that and nothing else. Other

things missing in that specifications are documentation and webservices

support.

If it's still within the 24 hours (or whatever) of the original login,

a session cookie can automatically be created, and the stored cookie

should be reset to a new 24 hour period (or more). As long as the

session cookie is valid, the user should never be logged out.

The stored cookie should never be changed by Jive since the stored

cookie is valid not just for the forums but for the whole of adobe.com.

If Jive wants to set a long-term cookie it should create a new one

specific to the forums.adobe.com domain. As I am sure they will be doing

as part of the upcomming changes.

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[Jochem van Dieten]

If you can not paraphrase me correctly, please take the effort of

finding the original post and just quoting it instead of spreading rumour.

What I wrote was:

Yes, improvements are being made. But Jive is on a release train model where a back to back fix / enhancement takes 9 to 12 weeks and Adobe is currently on a twice a year update cycle. Even if everything is scheduled immediately it may take 9 months for fixes to become visible.

I didn't write there was 9 months between updates nor did I write where

we are in the update cycle.

Your "it will be about 9 months before the next upgrade" is solely your

own fabrication.

Jochem

--

Jochem van Dieten

http://jochem.vandieten.net/

[JayJhabrix]

Well, it's all double-Dutch, jive-speak anyway... In effect, logins are a PIA, which is not the scene with any other forums i visit... the ones you visit that log you out every 20 mins as you say, is no excuse for these... speed is another major issue... and this last post nonsense instead of taking you to the last read post. The list goes on but as you are justifying or rationalising all this mediocre jive excreta, there's no point going on about it.

PS: And are you allowed to post personal data in your posts?

[risahe]

maybe the Administrator think you send a Spam