in our company, we never change the session settings which come with php.ini.dist (default php.ini that comes with the distribution - you should have it) and encountered no problems.
[however what we change is error reporting and register_globals]
as for httpd.conf (apache settings), I don't know whether there are any issues.
