Admin Logs Out Too Frequently

When I am logged into the admin portion of our site, whether its adding products, making changes, updating, etc...., it seems to randomly log me off way too often.  Sometimes I'll log in and add one product, and it will make me re-login.  Sometimes I can get through a bunch more before it logs me off.  There doesn't seem to be a pattern.  Anyone see this before or know how to fix this?  It becomes very frustrating when I need to keep logging in so often and repeating work.

I noticed the same problem, version 2.1

Does that happen in any specific browser ? Have you tested your website in the same scenario in other browsers ?

In my case it is Mozilla 6 (6.0.2 at the moment). BTW, I am not sure but it is not impossible that I experience the issue since recent Mozilla update. Did not try other browsers yet.

A quick experiment with Opera produced the same result: sudden kick out of the admin's area with login prompt, despite the "Remember me" check box set upon the previous login.

I'd say that the "Remember me" login option fails to work for me in 1/3 - 1/4 of cases - very frequently. I suppose these issues can be related. I also do not think that the issue applies to admins only, I am tended to think that it is a generic login issue, which is noticeable mostly in the administration scenario just because in such a scenario a user typically spents much longer time on site than a store visitor does.

What version are you using? There was a bug in v2.00 with "remember me". But it was fixed in v2.10

Don't know if this is relevant, but ever since I put SSL on my website,
I do find I get logged out a few times a day, here and there.
I never got logged out at all when the website had no SSL on it.

I want to take SSL off the Admin.
It is not need on any pages except the page with Credit Card info.

Anyone know how to do this?

Have a look here: https://www.nopcommerce.com/boards/t/11780/login-issue-in-21.aspx#48471

Adding a machineKey fixes the problem of being logged out every 30 seconds or so. This is because the machineKey is required for forms authentication. I'm running nopCommerce 2.65.

First, you need to generate a machineKey. Got to http://www.developerfusion.com/tools/generatemachinekey/
and generate the machineKey online. The generator will give you the code that you need to insert into web.config in your Nop.Web app.

The generated code will look something like this (by the way, don't copy and paste from here, generate your own code!):

<machineKey validationKey="D9A123CFA99A739E6397B6F15602C5C3BA32B7B30CCF259908CA8BCD955820F80B40920A217883994C62F687ACDC1668D23D47F2361BACF07A33EAD5C23B9257" decryptionKey="D788111905A577E2D8B1BB79E0BB969F3FD74AA025447949FDC95FF153712504" validation="SHA1" decryption="AES" />

Once you have the code like above, insert it inside your <system.web></system.web> tags in web.config. I put it right after the </authentication> tag like so:

<authentication mode="Forms">
  <forms name="NOPCOMMERCE.AUTH" loginUrl="~/login" protection="All" timeout="43200" path="/" requireSSL="false" slidingExpiration="true" />
</authentication>
<machineKey validationKey="D9A123CFA99A739E6397B6F15602C5C3BA32B7B30CCF259908CA8BCD955820F80B40920A217883994C62F687ACDC1668D23D47F2361BACF07A33EAD5C23B9257" decryptionKey="D788111905A577E2D8B1BB79E0BB969F3FD74AA025447949FDC95FF153712504" validation="SHA1" decryption="AES" />

That's all there is to it. No more being logged out, well, until the timeout in <authentication> occurs.