Is there a way, that an administrator can terminate all active sessions, so that every user needs to relogin?
Delete them from the database.
In which table can I find them?
No idea, where have you looked so far?
ah, found it. My fault before was, that I only digged into DB phabricator_auth, but i found it now at phabricator_user, table phabricator_session.