Confluence user session time on Docker
Asked by Normann P_ Nielsen _Netic_:

We use <https://hub.docker.com/r/atlassian/confluence-server> and that is fine.

But the session time for users are too short, we used to change according to: <https://confluence.atlassian.com/confkb/how-to-adjust-the-session-timeout-for-confluence-126910597.html>

`<session-config>`  
` ``<session-timeout>600<``/session-timeout``>`  
` ``<tracking-mode>COOKIE<``/tracking-mode``>`  
` ``<``/session-config``>`  
`It seems this change is not supported by the docket image? `  
I assume that ATL_TOMCAT_CONNECTIONTIMEOUT is not that setting...


Answers:
author: Thiago Masutti
body: Hi [@Normann P_ Nielsen _Netic_](/t5/user/viewprofilepage/user-id/664692)   
I hope you are well.

To extend the session timeout you need to change the 3 files suggested on the KB you mentioned -- <https://confluence.atlassian.com/confkb/how-to-adjust-the-session-timeout-for-confluence-126910597.html>

On Docker, you can copy the current file and modify them locally with the needed values.

Then you can [mount](https://docs.docker.com/storage/bind-mounts/) these individual files, similar to the following command:  

```
docker run (...) \
 -v <host-path>/tomcat-web.xml:/opt/atlassian/confluence/conf/web.xml \
 -v <host-path>/confluence-web.xml:/opt/atlassian/confluence/confluence/WEB-INF/web.xml \
 -v <host-path>/seraph-config.xml.xml:/opt/atlassian/confluence//confluence/WEB-INF/classes/seraph-config.xml \
 --name="confluence-staging" -d -p 8090:8090 -p 8091:8091 atlassian/confluence-server:7.13.1
```

The caveat with it is that, on every upgrade, you need to copy the default files and apply your modification again as using these files from previous versions can introduce problems (in case modifications were applied by the development team).

I hope that helps.

Kind regards,  
Thiago Masutti

comments: author: Normann P_ Nielsen _Netic_
body: Thanks for the advise; In reallity Im pretty sure only web.xml is needed.

Anyways, due to the caveats I have discarded that currently as an option..

But I do hope that the image will support this in the future, the default setting is somewhat low - 1 hour I belive, people are pretty annoyed, as we changed it to 6 hours years ago.


author: Normann P_ Nielsen _Netic_
body: I have accepted the answers; in the term of "nothing rellay smart", just some obvious workarounds with caveats..


author: Thiago Masutti
body: Hi [@Normann P_ Nielsen _Netic_](/t5/user/viewprofilepage/user-id/664692)

The changes on the seraph-config.xml file are important as it controls the session when the *remember me* cookie is used.  
This is enabled by default on clustered DC, and is optional during form authentication (for Server and DC when SSO isn't used).  
See [Confluence Cookies](https://confluence.atlassian.com/doc/confluence-cookies-160794071.html) for more details

I was about to open a feature, but I realized this is already a setting on the [Docker image](https://hub.docker.com/r/atlassian/confluence-server):

> * `ATL_AUTOLOGIN_COOKIE_AGE` (default: 1209600; two weeks, in seconds)
>
>   The maximum time a user can remain logged-in with 'Remember Me'.

Kind regards,  
Thiago Masutti


author: Normann P_ Nielsen _Netic_
body: I went for the solution putting a copy of web.xml outside the container, as suggested by Thiago, - to stop users complaining over the short sessiton time.


Tags: confluence-server

server