blocks|key|347844|text|您是否在使用Forms身份验证？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|347845|Forms身份验证使用自己的超时值(30分钟。默认情况下)。窗体身份验证超时会将用户发送到登录页面，而会话仍处于活动状态。这可能看起来像你的应用程序在会话超时时的行为，很容易混淆其中之一。|347846|<system.web>
++++<authentication+mode="Forms">
++++++++++<forms+timeout="50"/>
++++</authentication>

++++<sessionState+timeout="60"++/>
</system.web>|code-block|syntax|javascript|347847|将表单超时设置为小于会话超时的值可以为用户提供一个重新登录而不会丢失任何会话数据的窗口。|347848|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|O|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Are you using Forms authentication?

Forms authentication uses it own value for timeout (30 min. by default). A forms authentication timeout will send the user to the login page with the session still active. This may look like the behavior your app gives when session times out making it easy to confuse one with the other.

<pre><code>&lt;system.web&gt;
 &lt;authentication mode="Forms"&gt;
 &lt;forms timeout="50"/&gt;
 &lt;/authentication&gt;

 &lt;sessionState timeout="60" /&gt;
&lt;/system.web&gt;
</code></pre>

Setting the forms timeout to something less than the session timeout can give the user a window in which to log back in without losing any session data.

blocks|key|3336654|text|我不知道web.config或IIS。但是我相信在C#代码中你可以这样做|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3336655|Session.Timeout+=+60;+//+60+is+number+of+minutes|code-block|syntax|javascript|3336656|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I don't know about web.config or IIS.
But I believe that from C# code you can do it like 

<pre><code>Session.Timeout = 60; // 60 is number of minutes
</code></pre>

blocks|key|3336874|text|在web.config文件中使用以下代码块。这里的默认会话超时是80分钟。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3336875|<system.web>
+<sessionState+mode="InProc"+cookieless="false"+timeout="80"+/>
</system.web>|code-block|syntax|javascript|3336876|对于会话超时和弹出警告消息，请使用以下链接。|3336877|Session+Timeout+Example|offset|length|3336878|仅供参考:以上示例是使用devexpress+popup控件完成的，因此您需要用普通的popup控件自定义/替换devexpress+popup控件。如果您使用的是devexpress，则无需自定义|3336879|entityMap|0|LINK|mutability|MUTABLE|url|http://community.devexpress.com/blogs/aspnet/archive/2011/06/15/asp-net-how-to-show-a-popup-warning-before-session-timeout.aspx^0|0|0|0|0|N|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|Z|8|@]|9|@$K|10|L|11|1|12]]|A|$]]|$1|M|3|N|5|6|7|13|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

Use the following code block in your web.config file.
Here default session time out is 80 mins.

<pre><code>&lt;system.web&gt;
 &lt;sessionState mode="InProc" cookieless="false" timeout="80" /&gt;
&lt;/system.web&gt;
</code></pre>

Use the following link for Session Timeout with popup alert message.

<a href="http://community.devexpress.com/blogs/aspnet/archive/2011/06/15/asp-net-how-to-show-a-popup-warning-before-session-timeout.aspx" rel="noreferrer">Session Timeout Example</a>

FYI:The above examples is done with devexpress popup control so you need to customize/replace devexpress popup control with normal popup control. If your using devexpress no need to customize

blocks|key|3336903|text|在我的情况下，它是应用程序池。它被设置为在空闲xx分钟时重新启动。当我将其设置为不重新启动时，它似乎使用了来自Web+Config的值。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3336904|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

In my situation, it was Application Pool. It is set to restart when idle for xx mins. When I set it to not restart, it seems to use value from Web Config.

blocks|key|3336719|text|你在machine.config中有什么可能会生效的东西吗？在web.config中设置会话超时应覆盖IIS或machine.config中的任何设置，但是，如果您在应用程序的子文件夹中的某个位置有一个web.config文件，则该设置将覆盖应用程序根目录中的设置。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3336720|另外，如果我没记错的话，IIS中的超时只影响.asp页面，而不影响.aspx。您确定web.config中的会话代码是正确的吗？它应该看起来像这样：|3336721|<sessionState
++++mode="InProc"
++++stateConnectionString="tcpip=127.0.0.1:42424"
++++stateNetworkTimeout="60"
++++sqlConnectionString="data+source=127.0.0.1;Integrated+Security=SSPI"
++++cookieless="false"
++++timeout="60"
/>|code-block|syntax|javascript|3336722|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Do you have anything in machine.config that might be taking effect? Setting the session timeout in web.config should override any settings in IIS or machine.config, however, if you have a web.config file somewhere in a subfolder in your application, that setting will override the one in the root of your application.

Also, if I remember correctly, the timeout in IIS only affects .asp pages, not .aspx. Are you sure your session code in web.config is correct? It should look something like: 

<pre><code>&lt;sessionState
 mode="InProc"
 stateConnectionString="tcpip=127.0.0.1:42424"
 stateNetworkTimeout="60"
 sqlConnectionString="data source=127.0.0.1;Integrated Security=SSPI"
 cookieless="false"
 timeout="60"
/&gt;
</code></pre>

blocks|key|3123711|text|这通常就是你需要做的.|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3123712|您确定在20分钟后，会话丢失的原因是因为空闲...|3123713|会话可能被清除的原因有很多。您可以为IIS启用事件日志记录，然后可以使用事件查看器查看会话为什么是cleared...you可能会发现它是其他原因的原因？|3123714|您还可以读取documentation+for+event+messages和关联的table+of+events。|offset|length|3123715|entityMap|0|LINK|mutability|MUTABLE|url|https://technet.microsoft.com/en-us/library/cc784734.aspx|1|http://technet.microsoft.com/en-us/library/cc786887.aspx^0|0|0|0|6|W|0|16|F|1|0^^$0|@$1|2|3|4|5|6|7|T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|U|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|W|8|@]|9|@$H|X|I|Y|1|Z]|$H|10|I|11|1|12]]|A|$]]|$1|J|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|K|$L|$5|M|N|O|A|$P|Q]]|R|$5|M|N|O|A|$P|S]]]]

That is usually all that you need to do...

Are you sure that after 20 minutes, the reason that the session is being lost is from being idle though...

There are many reasons as to why the session might be cleared. You can enable event logging for IIS and can then use the event viewer to see reasons why the session was cleared...you might find that it is for other reasons perhaps?

You can also read the <a href="https://technet.microsoft.com/en-us/library/cc784734.aspx" rel="nofollow noreferrer">documentation for event messages</a> and the associated <a href="http://technet.microsoft.com/en-us/library/cc786887.aspx" rel="nofollow noreferrer">table of events</a>.

blocks|key|345666|text|https://usefulaspandcsharp.wordpress.com/tag/session-timeout/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|345667|<authentication+mode="Forms">
++<forms+loginUrl="Login.aspx"+name=".ASPXFORMSAUTH"+timeout="60"+slidingExpiration="true"+/>
</authentication>

<sessionState+mode="InProc"+timeout="60"+/>|code-block|syntax|javascript|345668|entityMap|0|LINK|mutability|MUTABLE|url^0|0|1P|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|F|7|T|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|4]]]]

<a href="https://usefulaspandcsharp.wordpress.com/tag/session-timeout/" rel="nofollow noreferrer">https://usefulaspandcsharp.wordpress.com/tag/session-timeout/</a>

<pre><code>&lt;authentication mode="Forms"&gt;
 &lt;forms loginUrl="Login.aspx" name=".ASPXFORMSAUTH" timeout="60" slidingExpiration="true" /&gt;
&lt;/authentication&gt;

&lt;sessionState mode="InProc" timeout="60" /&gt;
</code></pre>

blocks|key|347876|text|如果您正在使用身份验证，我建议在web.config文件中添加以下内容。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|347877|在我的例子中，用户在超时后被重定向到登录页面：|347878|<authentication+mode="Forms">
++++<forms+defaultUrl="Login.aspx"+timeout="120"/>
</authentication>|code-block|syntax|javascript|347879|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

If you are using Authentication, I recommend adding the following in web.config file.

In my case, users are redirected to the login page upon timing out:

<pre><code>&lt;authentication mode="Forms"&gt;
 &lt;forms defaultUrl="Login.aspx" timeout="120"/&gt;
&lt;/authentication&gt;
</code></pre>

blocks|key|347885|text|由于ASP.Net核心1.0+(vNext或其他名称)会话的实现方式有所不同。我使用以下命令更改了Startup.cs，void+ConfigureServices中的会话超时值：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|347886|services.AddSession(options+=>+options.IdleTimeout+=+TimeSpan.FromSeconds(42));|code-block|syntax|javascript|347887|或者，如果要使用appsettings.json文件，可以执行以下操作：|347888|//+Appsettings.json
"SessionOptions":+{
++++"IdleTimeout":+"00:30:00"
}

//+Startup.cs
services.AddSession(options+=>+options.IdleTimeout+=+TimeSpan.Parse(Config.GetSection("SessionOptions")["IdleTimeout"]));|347889|entityMap^0|1D|A|1O|M|0|0|8|G|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|Z|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|P|$]]

Since ASP.Net core 1.0 (vNext or whatever name is used for it) sessions are implemented differently.
I changed the session timeout value in <code>Startup.cs</code>, <code>void ConfigureServices</code> using:

<pre class="lang-c# prettyprint-override"><code>services.AddSession(options =&gt; options.IdleTimeout = TimeSpan.FromSeconds(42));
</code></pre>

Or if you want to use the <code>appsettings.json</code> file, you can do something like:

<pre class="lang-c# prettyprint-override"><code>// Appsettings.json
"SessionOptions": {
 "IdleTimeout": "00:30:00"
}

// Startup.cs
services.AddSession(options =&gt; options.IdleTimeout = TimeSpan.Parse(Config.GetSection("SessionOptions")["IdleTimeout"]));
</code></pre>

blocks|key|350613|text|您可以在IIS中找到该设置：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|350614|​|350615|📷|atomic|offset|length|350616|350617|它可以在服务器级别、网站级别或应用程序级别的"ASP“下找到。|350618|我认为您可以在此处将其设置为web.config级别。请您自己确认一下。|350619|<configuration>
+++<system.web>

++++++
+++++++<sessionState+timeout="1440"/>

+++</system.web>
</configuration>|code-block|syntax|javascript|350620|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/e9ea214ba135ad0ca62a326b3f20ee62.png|imageAlt^0|0|0|0|1|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|12|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|13|8|@]|9|@$G|14|H|15|1|16]]|A|$]]|$1|I|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|18|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|19|8|@]|9|@]|A|$]]|$1|N|3|O|5|P|7|1A|8|@]|9|@]|A|$Q|R]]|$1|S|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z|10|-4]]]]

You can find the setting here in IIS:

<a href="https://i.stack.imgur.com/vxEgU.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/vxEgU.png" alt="Settings"></a>

It can be found at the server level, web site level, or app level under "ASP".

I think you can set it at the web.config level here. Please confirm this for yourself.

<pre><code>&lt;configuration&gt;
 &lt;system.web&gt;

 &lt;!-- Session Timeout in Minutes (Also in Global.asax) --&gt;
 &lt;sessionState timeout="1440"/&gt;

 &lt;/system.web&gt;
&lt;/configuration&gt;
</code></pre>

blocks|key|3124000|text|IIS会话超时值仅适用于传统.asp应用程序，这由IIS配置控制。对于ASP.NET应用程序，仅应用web.config指定的超时值。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|3124001|entityMap^0|X|Y|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

IIS sessions timeout value is for classic .asp applications only, this is controlled on IIS configuration. 
In your case For ASP.NET apps, only the web.config-specified timeout value applies.

blocks|key|347118|text|默认会话超时在IIS中定义为20分钟|type|unstyled|depth|inlineStyleRanges|entityRanges|data|347119|对于IIS+8.5+web上托管的每个站点，请按照以下步骤操作|347120|​|347121|📷|atomic|offset|length|347122|347123|347124|打开IIS8.5管理器。|blockquote|347125|347126|单击站点名称。|347127|选择“管理”部分下的“配置编辑器”。|347128|从配置编辑器顶部的"Section:“下拉列表中，找到"system.web/sessionState”。|347129|将“超时”设置为"00:+20+:00或更少“，并根据应用程序使用可能的最小值。可接受的值为5分钟(对于高价值应用程序)、10分钟(对于中值应用程序)和20分钟(对于低价值应用程序)。|347130|在"Actions“窗格中，单击”Apply“。|347131|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/3a457c0a34c35c0493a41a083dcdc632.png|imageAlt^0|0|0|0|0|1|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|19|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1A|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1B|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|1C|8|@]|9|@$I|1D|J|1E|1|1F]]|A|$]]|$1|K|3|E|5|6|7|1G|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|M|3|N|5|O|7|1I|8|@]|9|@]|A|$]]|$1|P|3|-4|5|6|7|1J|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1K|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1L|8|@]|9|@]|A|$]]|$1|U|3|V|5|6|7|1M|8|@]|9|@]|A|$]]|$1|W|3|X|5|6|7|1N|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|1O|8|@]|9|@]|A|$]]|$1|10|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]]|11|$12|$5|13|14|15|A|$16|17|18|-4]]]]

The default session timeout is defined into IIS to 20 minutes

Follow the procedures below for each site hosted on the IIS 8.5 web

<a href="https://i.stack.imgur.com/3twp9.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/3twp9.png" alt="IIS Timeout configuration"></a>

<blockquote>
 Open the IIS 8.5 Manager.
 
 Click the site name.
 
 Select "Configuration Editor" under the "Management" section.
 
 From the "Section:" drop-down list at the top of the configuration
 editor, locate "system.web/sessionState".
 
 Set the "timeout" to "00:20:00 or less”, using the lowest value
 possible depending upon the application. Acceptable values are 5
 minutes for high-value applications, 10 minutes for medium-value
 applications, and 20 minutes for low-value applications.
 
 In the "Actions" pane, click "Apply".
</blockquote>

blocks|key|3123950|text|如果您想要网站会话超时，请删除|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3123951|<authentication+mode="Forms">
++++++<forms+timeout="50"/>
</authentication>|code-block|syntax|javascript|3123952|来自web.config文件的标签。|3123953|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

if you are want session timeout for website than remove

<pre><code>&lt;authentication mode="Forms"&gt;
 &lt;forms timeout="50"/&gt;
&lt;/authentication&gt;
</code></pre>

tag from web.config file.

blocks|key|350545|text|Timeout属性指定分配给应用程序会话对象的超时时间，以分钟为单位。如果用户在超时期限内没有刷新或请求页面，会话将结束。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|350546|350547|+IIS6.0:允许的最小值为1分钟，最大值为1440分钟。|blockquote|350548|350549|350550|Session.Timeout+=+600;|code-block|syntax|javascript|350551|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|P|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|Q|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|R|8|@]|9|@]|A|$]]|$1|G|3|-4|5|6|7|S|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|T|8|@]|9|@]|A|$K|L]]|$1|M|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|N|$]]

The Timeout property specifies the time-out period assigned to the Session object for the application, in minutes. If the user does not refresh or request a page within the time-out period, the session ends.

<blockquote>
 IIS 6.0: The minimum allowed value is 1 minute and the maximum is
 1440 minutes.
</blockquote>

<pre><code>Session.Timeout = 600;
</code></pre>

blocks|key|345549|text|更改IIS中的会话超时值后，请重新启动IIS。要实现此目的，请转到命令提示符。键入IISRESET，然后按enter键。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|345550|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

After changing the session timeout value in IIS, Kindly restart the IIS.
To achieve this go to command prompt. Type IISRESET and press enter.

I am running an ASP.NET 2.0 application in IIS 6.0. I want session timeout to be 60 minutes rather than the default 20 minutes. I have done the following

<ol>
<li>Set <code>&lt;sessionState timeout="60"&gt;&lt;/sessionState&gt;</code>
in <code>web.config</code>.</li>
<li>Set session timeout to 60 minutes in IIS manager/Web site properties/ASP.NET configuration settings.</li>
<li>Set idle timeout to 60 minutes in application pool properties/performance.</li>
</ol>

I am still getting a session timeout at 20 minutes. Is there anything else I need to do?

Session timeout in ASP.NET

我正在IIS6.0中运行ASP.NET 2.0应用程序。我希望会话超时为60分钟，而不是默认的20分钟。我做了以下工作在IIS管理器/网站属性/ASP.Net配置设置中，将web.config.Set会话中的<sessionState timeout="60"></sessionState>超时设置为60分钟。在应用程序池IIS中将空闲超时设置为60分钟在20分钟时，我仍然会遇到会话超时。还有什么

问ASP.NET中的会话超时
EN

回答 15

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问ASP.NET中的会话超时EN

回答 15

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问ASP.NET中的会话超时
EN