How many user sessions ?

[SergioFerrari]

It seems there is no limit to the number of concurrent user sessions opened from the same internet browser.

While there a check of already active user sessions during the login process, it is possible to open as many TABs as you like just copying the URL and pasting into another TAB.

Any idea to limit the number of active HTTP sessions per user?

[jozsef_hegyi · Accepted solution]

Dear Sergio

Web Dynpro ABAP:

For http plugin, SAP doesn't provide any profile parameter for

controlling number of modes or sessions. This can be verified by sm04.

If you open new browser then it is considered as new session always.

By default number of mode is set as 1 for http plugin and rfc

connection.

Best regards

Jozsef

[SergioFerrari · Accepted solution]

Indeed I attached the SM04 screenshot that shows several sessions and that's why I'm a bit worried about that.

Thanks a lot Jozsef.

[frank_stdle · Accepted solution]

Sergio,

there is a parameter that sets the expiry time for inactive sessions - so in practice the number of open sessions for one user will be limited since one user will no really be able to keep that many sessions alive. Also, the Internet Communication Framework can easily handle a great number of concurrent sessions, so I don't really see why this should be a problem in anyway?

Cheers,

Frank

[SergioFerrari · Accepted solution]

I'm partially with you but the system could be more robust (e.g. bad guys).

[frank_stdle · Accepted solution]

I see your point - I suppose that there might be other mechanisms at work in ICF to prevent such things as a DDOS, if that has been considered by SAP at all.

Doing performance testing using JMeter (see http://goo.gl/DxifX) I have had up to 800 concurrent users accessing the same web dynpro application under my user name without any noticeable effect on the performance.

Cheers,

Frank

[SergioFerrari · Accepted solution]

Great test Frank, 800 concurrent sessions !!!

A WDA session allocates around 25 MB memory (visible in SM04) and at the end, some kind of swap will occurs. As you say it's may be not so a big issue.

sergio

[vivek_kalyankar]

Hi

Is there any parameter to restrict inactive RFC sessions in SM04 tcode.

Regards

Naresh