Cookies: Making them last longer than a session

This will enable users to remain logged in beyond one browser session.

If a Plone instance is being used as an intranet, repetitive logging in is a barrier to ease-of-use. This can also apply to internet sites. This can be circumvented by allowing the user to remain logged in after they close their browser.

Setting cookie expiration length:

  • Call up the ZMI via http://your_portal_url/manage
  • Go to portal_properties
  • Choose site_properties
  • Alter auth_cookie_length to the number of days you wish to let your users stay logged in for.

That's it. Easy when you know how.

plone 3

Posted by Ivan Price at Jan 17, 2008 04:27 AM
i don't think this works in plone 3 any more... that is a shame because it was a good feature!

fix for this..

Posted by Ivan Price at Jan 21, 2008 04:16 AM
i found a fix for this.. but note the security issue as a result:
https://dev.plone.org/plone/ticket/7706

a better fix

Posted by Manuel Amador (Rudd-O) at Jan 28, 2009 06:12 PM
I wrote a better fix:

http://rudd-o.com/en/linux-[…]when-you-close-your-browser

Note that this fix does not have a security problem, as long as you remember to log off.