SSL Token Timeout Setting Misleading

SSL Token Timeout Setting Misleading

book

Article ID: KB0089851

calendar_today

Updated On:

Products Versions
TIBCO DataSynapse GridServer -
Not Applicable -

Description

Resolution:
Engines needing to download resources receive a token which expires after a certain amount of time. This provides protection from unrestricted downloading. To set the value, in seconds, for the Token Timeout go to Admin > Manager Configuration > Security > Resource Deployment. Look under the Resource Deployment section for Broker Resources and Director Resources. Each has a Token Timeout field with a default value of 600 seconds.


Changing these values looks simple, but is a bit tricky.

    * If you change one field and then click Save both field values are changed to the new value for the current session. However, only the field you actually changed persists after restart.
    * If you change both values and then click Save both fields are changed for this session to the second value you specified, whichever that one is. However, this does not accurately reflect their values after restart.

There is actually no reason why these values should ever differ from each other. So, when you change the timeout value you should keep the values the same in both fields. To do this:

   1. Change one field value and click Save.
   2. Then change the other field to the same value and Save.

Doing this ensures that the values you see during the current session match the values after restart.

Issue/Introduction

SSL Token Timeout Setting Misleading