Changing the validity period of connection sessions and authentication tokens by using a script

In Kaspersky Industrial CyberSecurity for Networks version 3.0.1, you can change the defined validity period for connection sessions with the Server through the web interface and for authentication tokens in the Kaspersky Industrial CyberSecurity for Networks API. The parameter that defines the time limit is changed by using the kics4net-params.py script, which is located on the Server computer in the /opt/kaspersky/kics4net/sbin/ folder.

You can use the kics4net-params.py script to view the current value of the time period and to define a different value. The value is presented in minutes. You can define a time limit in the range from 1 to 43200 minutes (600 minutes by default, which equals 10 hours).

To view the current value of the time limit:

1. On the Server computer, log in to the system using the account credentials of a user account with root privileges that you want to use to run the kics4net-params.py script.
2. Go to the /opt/kaspersky/kics4net/sbin/ folder and enter the following command for running the script to view the currently defined value:

   python kics4net-params.py get -t -n

   where:

   • -t designates a request for the currently defined value for the validity period (mandatory parameter).
   • -n disables display of the internal name used to represent the value in the application configuration. If this parameter is not defined, the value is displayed together with the following name: logon_session_timeout=<value>.

To change the value of the time limit:

1. On the Server computer, log in to the system using the account credentials of a user account with root privileges that you want to use to run the kics4net-params.py script.
2. Go to the /opt/kaspersky/kics4net/sbin/ folder and enter the following command for running the script to change the value:

   python kics4net-params.py set -t=<value> -r

   where:

   • -t=<value> is the new value of the validity period (mandatory parameter).
   • -r enables automatic restart of application services on the Server computer after the new value for the validity period is applied. If this parameter is not defined, you will have to manually restart the Server computer or restart services after the script is finished.

Page top