Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PD-1419 / 25.04 / PD-1419 Add Session Expiration Information to Auditing and System Acc… #3472

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

micjohnson777
Copy link
Contributor

…ess Setting

This PR adds information on how system session timeout are treated and reflected in audit logging.

Thanks for contributing to TrueNAS documentation! By opening a Pull Request, you're acknowledging that your changes will be distributed under the Creative Commons 4.0 license.

…ess Setting

This PR adds information on how system session timeout are treated and reflected in audit logging.
@micjohnson777 micjohnson777 requested a review from a team as a code owner January 24, 2025 21:27
@bugclerk bugclerk changed the title PD-1419 Add Session Expiration Information to Auditing and System Acc… PD-1419 / 25.04 / PD-1419 Add Session Expiration Information to Auditing and System Acc… Jan 24, 2025
@bugclerk
Copy link
Contributor

@linzi-ix linzi-ix added the Technical Writer Review (LM) A technical writer is reviewing the PR. label Jan 27, 2025
@@ -31,6 +31,8 @@ TrueNAS includes a manual page with more information on the [VFS auditing functi
### Session and User Auditing Events
{{< expand "Authentication Events" "v" >}}
Audit message generated every time a client logs into the TrueNAS UI or an SSH session or makes changes to user credentials.

TrueNAS terminates inactive sessions when the it reaches the specified timeout limit. If a new session is initiated within a five-minute period, TrueNAS logs the user in as the previously login session. If the log in occurs outside the five-minute period TrueNAS initiates a new websocket session. This activity shows in the audit logs for sessions.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"audit logs for sessions" are we saying sessions in general? or a specific number of sessions?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It appears to be talking about sessions where the user logs out, or are logged out by the session time, where they turn around and log back into the system as the same user. If it is within this 5 minute period, the system re-establishes the same session. If outside of the period, it starts a brand new websocket session. Tricky to say such that it makes sense. What do you think???

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Re-Review Technical Writer Review (LM) A technical writer is reviewing the PR.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants