search

TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
4.27k stars 418 forks source link

Account lockout when "Session Timeout" set to "0" #618

Closed Sp00kje closed 1 year ago

Sp00kje commented 1 year ago

When i change the "Session Timeout" to "0" to disable the session timeout, i get logged-out. when i login again i get to dashboard, but every action after that will result in getting logged-out again.

this wail the text next to the Session Timeout failed is: "valid range 0-604800; default 1800; set 0 to disable"

Server: Debian 11.7, originally installed & updated using the "curl -sSL https://download.technitium.com/dns/install.sh | sudo bash" command. Technitium DNS Server - Version 11.1.1

Client: Debian 11.7

ShreyasZare commented 1 year ago

Thanks for the feedback. I checked it in two different installations and its working well without any issues. Can you provide exact steps to reproduce this issue?

Sp00kje commented 1 year ago

I just tried it on on my secondary server, and is was working as expected. after i did an Password recovery en check my account (which was "lockout") i found the problem. The session timeout was set to 1 second (which probably happened thru me using the scroll-wheel on my mouse in that number field).

so it was just an user error (Whoops, sorry). But just an an feature request, is it possible to set the minimum possible Timeout to say 60 or 120 second's?

either way, thanks for checking.

ShreyasZare commented 1 year ago

Thanks for those details. Yes, it makes sense to have a minimum value set to avoid such issues. Will get that implemented in the next release.

ShreyasZare commented 1 year ago

Technitium v11.2 is released that fixes this issue. Do check and let me know your feedback.