Increase max session time

[azhinu]

Hello everybody. I'm trying to increase session time, but with no success.
Firstly, I tried to increase max_session_ttl in role options, but nothing changed. Then I changed auth_service.authentication.default_session_ttl, but still no success. Teleport still require login every 12 hours.
How can I increase time that i haven't to relogin teleport?

[webvictim]

You will get the lowest value for max_session_ttl which is set across all your roles, so make sure that max_session_ttl is set to > 12 hours in EVERY role that you have.

[azhinu]

All roles have max_session_ttl set to 230h

[webvictim]

Try setting everything to 30h and see if that works. Teleport has an upper limit of 30 hours on session length.

[azhinu]

Is there a way to bypass this restriction?

[webvictim]

You could fork the code, edit it and recompile Teleport. The limit is there for security, as issuing a certificate allowing access for over a week based on one login is undesirable in most cases.

[kelvich]

Can you let your users decide on the desired tradeoff between risk and amount of inconvenience? I get it when products forbid some outright bad configurations, but requiring login every 30 hours is not an industry standard by any means, e.g., none of the major clouds has such a limit. In my opinion, this is a sign of health issues with your product management—somebody on the security side has overreaching influence and imposes decisions that result in infinitesimal security gains at the cost of major user discomfort.

[dmelo]

I have set all my roles to have max_session_ttl set to 30h, but my certificate is valid only for 12h. Is there anywhere else that I have to set TTL?

In the end, I want users who login using Web UI to have more time before Teleport asks to login again. Or perhaps a way to trust the device (the browser the user is using). Is there any way to do this?

I'm asking about this questions again, because it has been a while since @azhinu posted the original question and I see that Teleport evolves quickly.