I'm having a issue, just in Debian based distros, since at CentOS 6.6 it does not happen, and I don't know how to get rid of this other than set the property gc_probability
to 0
which leads me to another issue. This is how my configuration looks at config.yml
:
framework:
session:
# handler_id set to null will use default session handler from php.ini
handler_id: ~
cookie_lifetime: 86400
gc_maxlifetime: 600 # session will expire after 10 minutes of inactivity
gc_probability: 1
gc_divisor: 1
That configuration in CentOS works perfectly as I said before but in Debian it fails with the following error:
Notice: SessionHandler::gc(): ps_files_cleanup_dir: opendir(/var/lib/php5) failed: Permission denied (13)
Why? What is the cause of this?
Doing a research I found here that disabling the value will makes the error goes out but then if I disabled that one the session never expires and the page could be opened for hours (I leave it open a complete night and the day after when I hit F5 surprise the same session with same values still open which is a security hole)
Any advice around this? Solutions? Clues?