# Kibana session doesn't expire in a expected time when proxy based authentication is enabled

**URL:** <https://forum.search-guard.com/t/kibana-session-doesnt-expire-in-a-expected-time-when-proxy-based-authentication-is-enabled/1776>\
**Category:** Search Guard\
**Created:** [March 24, 2020, 1:37pm UTC](https://forum.search-guard.com/t/kibana-session-doesnt-expire-in-a-expected-time-when-proxy-based-authentication-is-enabled/1776 "2020-03-24T13:37:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![shubha02](https://avatars.discourse-cdn.com/v4/letter/s/a88e4f/32.png) [@shubha02](https://forum.search-guard.com/u/shubha02)\
**Post date:** [March 24, 2020, 1:37pm UTC](https://forum.search-guard.com/t/kibana-session-doesnt-expire-in-a-expected-time-when-proxy-based-authentication-is-enabled/1776/1 "2020-03-24T13:37:07Z")

</div>

I have confgiured below two searchguard parameter for kibana under kibana\_configmap\_yml section.

configMaps:  
kibana\_configmap\_yml: |-

```auto
searchguard.cookie.ttl: 300000
searchguard.session.ttl: 300000

```

When the Kibana UI session remains idle for 5 mins (as configured above) , and try to hit any tab in Kibana UI , the session is expected to expire - it should either redirect to the user login page or give an appropriate msg “Session expired”

The above parameters are not working as expected when proxy based authentication is enabled for Kibana.

Could you please suggest how Kibana session can be expired when proxy based authentication is enabled ?

Thanks  
Subhashree

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [March 24, 2020, 3:44pm UTC](https://forum.search-guard.com/t/kibana-session-doesnt-expire-in-a-expected-time-when-proxy-based-authentication-is-enabled/1776/2 "2020-03-24T15:44:43Z")

</div>

The setting you used are valid only if the basic authentication is used [Kibana Basic Auth | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/kibana-authentication-http-basic#session-management)

In case of proxy, SeachGuard has no control over session. Look, there are no session related options for proxy authentication in the documentation [HTTP Proxy Quick Start | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/proxy-authentication#http-headerproxy-based-authentication)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [April 14, 2020, 3:44pm UTC](https://forum.search-guard.com/t/kibana-session-doesnt-expire-in-a-expected-time-when-proxy-based-authentication-is-enabled/1776/3 "2020-04-14T15:44:43Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.