Session timeout in IIS and web.config, which overwrites which?

[antonyliu2002@yahoo.com]

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.

I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:

If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?

Thank you.

[=?Utf-8?B?YnJ1Y2UgYmFya2Vy?=]

RE: Session timeout in IIS and web.config, which overwrites which?

the IIS session setting is for asp only, not asp.net

-- bruce (sqlwork.com)


"antonyliu2002@ yahoo.com" wrote:

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.
>
I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:
>
If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?
>
Thank you.
>

[antonyliu2002@yahoo.com]

Re: Session timeout in IIS and web.config, which overwrites which?

On Apr 23, 12:02 pm, bruce barker
<brucebar...@di scussions.micro soft.comwrote:

the IIS session setting is for asp only, not asp.net
>
-- bruce (sqlwork.com)
>
"antonyliu2...@ yahoo.com" wrote:

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.

>

I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:

>

If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?

>

Thank you.

Ha, thank you very much. No wonder, from my series of tests, my
timeout setting in web.config always outlives the IIS session setting.
I searched for MSDN documentation about what you said, but could not
find it.

[antonyliu2002@yahoo.com]

Re: Session timeout in IIS and web.config, which overwrites which?

On Apr 23, 12:02 pm, bruce barker
<brucebar...@di scussions.micro soft.comwrote:

the IIS session setting is for asp only, not asp.net
>
-- bruce (sqlwork.com)
>
"antonyliu2...@ yahoo.com" wrote:

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.

>

I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:

>

If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?

>

Thank you.

I looked into the asp.net configuration setting console, and notice
that we can also set the session timeout there. So, if I have session
timeout value of 20 minutes in this asp.net configuration setting
console, but in my web.config, I set this value to be 30 minutes.
Which one will take effect?

[Juan T. Llibre]

Re: Session timeout in IIS and web.config, which overwrites which?

re:
!If IIS setting has a session timeout value of 20 minutes, but my
!web.config setting has a session timeout of 30 minutes, will the
!session time out in 20 minutes or in 30 minutes?

30 minutes.

ASP.NET configuration settings override IIS configuration settings.




Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
<antonyliu2002@ yahoo.comwrote in message news:a1f90110-79cb-460b-87b2-56d0e75f9c90@s5 0g2000hsb.googl egroups.com...

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.
>
I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:
>
If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?
>
Thank you.

[Juan T. Llibre]

Re: Session timeout in IIS and web.config, which overwrites which?

re:
!I looked into the asp.net configuration setting console, and notice
!that we can also set the session timeout there. So, if I have session
!timeout value of 20 minutes in this asp.net configuration setting
!console, but in my web.config, I set this value to be 30 minutes.
!Which one will take effect?

The ASP.NET configuration tool will update your web.config to whatever value you set.



Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
<antonyliu2002@ yahoo.comwrote in message news:8467759d-205e-4f61-973a-25126703ec51@f3 6g2000hsa.googl egroups.com...

On Apr 23, 12:02 pm, bruce barker
<brucebar...@di scussions.micro soft.comwrote:

>the IIS session setting is for asp only, not asp.net
>>
>-- bruce (sqlwork.com)
>>
>"antonyliu2... @yahoo.com" wrote:

By default, IIS is configured to timeout a session in 20 minutes,
which can be changed through the IIS config window.

>>

I use InProc sessionState mode. I can also set the session timeout in
web.config. So here is my question:

>>

If IIS setting has a session timeout value of 20 minutes, but my
web.config setting has a session timeout of 30 minutes, will the
session time out in 20 minutes or in 30 minutes?

>>

Thank you.

>
I looked into the asp.net configuration setting console, and notice
that we can also set the session timeout there. So, if I have session
timeout value of 20 minutes in this asp.net configuration setting
console, but in my web.config, I set this value to be 30 minutes.
Which one will take effect?

[antonyliu2002@yahoo.com]

Re: Session timeout in IIS and web.config, which overwrites which?

On Apr 23, 2:14 pm, "Juan T. Llibre" <nomailrepl...@ nowhere.com>
wrote:

re:
!I looked into the asp.net configuration setting console, and notice
!that we can also set the session timeout there. So, if I have session
!timeout value of 20 minutes in this asp.net configuration setting
!console, but in my web.config, I set this value to be 30 minutes.
!Which one will take effect?
>
The ASP.NET configuration tool will update your web.config to whatever value you set.
>
Juan T. Llibre, asp.net MVP
asp.net faq :http://asp.net.do/faq/
foros de asp.net, en español :http://asp.net.do/foros/
=============== =============== ========

Muchas gracious, senor. But I am confused by two responses of
yours. :-)

Your first response says:

ASP.NET configuration settings override IIS configuration settings.

You meant web.config setting will override whatever setting we make
through IIS config console, right?

And here is your second response, shown below:

The ASP.NET configuration tool will update your web.config to whatever
value you set.

Do you mean that my web.config's session timeout value will be changed
by the IIS config tool to whatever value we set through the IIS config
tool?

Please clarify.

[Juan T. Llibre]

Re: Session timeout in IIS and web.config, which overwrites which?

re:
!You meant web.config setting will override whatever setting we make
!through IIS config console, right?

Not all settings, but settings which only apply to ASP.NET.

Other IIS settings ( like for PHP apps or HTML pages ),
retain the IIS default configuration, unless mapped to the ASP.NET ISAPI dll.

re:
!Do you mean that my web.config's session timeout value will be changed
!by the IIS config tool to whatever value we set through the IIS config tool?

No. I said just the opposite.

For ASP.NET apps, settings which apply only to ASP.NET
will override IIS default configuration settings.





Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
<antonyliu2002@ yahoo.comwrote in message news:c0df7f2c-c6e4-42a0-ae06-340a715d0c5e@b1 g2000hsg.google groups.com...
On Apr 23, 2:14 pm, "Juan T. Llibre" <nomailrepl...@ nowhere.com>
wrote:

re:
!I looked into the asp.net configuration setting console, and notice
!that we can also set the session timeout there. So, if I have session
!timeout value of 20 minutes in this asp.net configuration setting
!console, but in my web.config, I set this value to be 30 minutes.
!Which one will take effect?
>
The ASP.NET configuration tool will update your web.config to whatever value you set.
>
Juan T. Llibre, asp.net MVP
asp.net faq :http://asp.net.do/faq/
foros de asp.net, en español :http://asp.net.do/foros/
=============== =============== ========

Muchas gracious, senor. But I am confused by two responses of
yours. :-)

Your first response says:

ASP.NET configuration settings override IIS configuration settings.

You meant web.config setting will override whatever setting we make
through IIS config console, right?

And here is your second response, shown below:

The ASP.NET configuration tool will update your web.config to whatever
value you set.

Do you mean that my web.config's session timeout value will be changed
by the IIS config tool to whatever value we set through the IIS config
tool?

Please clarify.

[antonyliu2002@yahoo.com]

Re: Session timeout in IIS and web.config, which overwrites which?

On Apr 23, 4:55 pm, "Juan T. Llibre" <nomailrepl...@ nowhere.com>
wrote:

re:
!You meant web.config setting will override whatever setting we make
!through IIS config console, right?
>
Not all settings, but settings which only apply to ASP.NET.
>
Other IIS settings ( like for PHP apps or HTML pages ),
retain the IIS default configuration, unless mapped to the ASP.NET ISAPI dll.
>
re:
!Do you mean that my web.config's session timeout value will be changed
!by the IIS config tool to whatever value we set through the IIS config tool?
>
No. I said just the opposite.
>
For ASP.NET apps, settings which apply only to ASP.NET
will override IIS default configuration settings.
>
Juan T. Llibre, asp.net MVP
asp.net faq :http://asp.net.do/faq/
foros de asp.net, en español :http://asp.net.do/foros/
=============== =============== ========

OK, good know. So, with regard to session timeout, web.config will
override the session timeout setting of the IIS config tool, right?

[Juan T. Llibre]

Re: Session timeout in IIS and web.config, which overwrites which?

re:
!>OK, good know. So, with regard to session timeout, web.config will
!>override the session timeout setting of the IIS config tool, right?

Only for ASP.NET apps... :-)




Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
<antonyliu2002@ yahoo.comwrote in message news:2538f8ff-6f6e-4ebb-a2da-d930f22d8781@x4 1g2000hsb.googl egroups.com...
On Apr 23, 4:55 pm, "Juan T. Llibre" <nomailrepl...@ nowhere.com>
wrote:

re:
!You meant web.config setting will override whatever setting we make
!through IIS config console, right?
>
Not all settings, but settings which only apply to ASP.NET.
>
Other IIS settings ( like for PHP apps or HTML pages ),
retain the IIS default configuration, unless mapped to the ASP.NET ISAPI dll.
>
re:
!Do you mean that my web.config's session timeout value will be changed
!by the IIS config tool to whatever value we set through the IIS config tool?
>
No. I said just the opposite.
>
For ASP.NET apps, settings which apply only to ASP.NET
will override IIS default configuration settings.
>
Juan T. Llibre, asp.net MVP
asp.net faq :http://asp.net.do/faq/
foros de asp.net, en español :http://asp.net.do/foros/
=============== =============== ========

OK, good know. So, with regard to session timeout, web.config will
override the session timeout setting of the IIS config tool, right?