User Inactivity Timeout Feature Removed

Pritunl Pritunl VPN
1

Between Nov 17 2023 and Nov 23 2023 the following commits removed access to the User Inactivity Timeout:

https://github.com/pritunl/pritunl/commit/99fa35fa38219ebca23bb43aa072f2bf6aafd81d
https://github.com/pritunl/pritunl/commit/f2132583e667e09d120458ba1a183e81a78ff031
https://github.com/pritunl/pritunl/commit/0a7e65e7f2276aab5c5446696cd40630f0c45d96

There is no explanation provided in the change log or any reference to it here on the forum. Why was this feature removed? Is there a plan to replace this functionality?

2

The feature wasn’t reliable and caused a lot of confusion. The session timeout which sets a maximum duration for the session should be used instead.

3

Thanks.

An explanation of this in the changelog or an update to docs.pritunl.com is needed. The setting of this feature is used as evidence of meeting some compliance requirements we have. Now that it is no longer available our auditor is asking for details on its removal.

4

It shouldn’t have been used for security compliance because it isn’t reliable. The feature was removed because it wasn’t reliable. If you have compliance requirements follow the recommendations in the high security environment documentation.

5

Please document feature removals in the future. Either in the changelog or somewhere else.