dzhao00, There was no requirement to not re-use session ID in original question of sundartri. The problem was how to invalidate the session. The original poster was under the impression that the session was not being invalidated because the ID did not change. You mis-read the problem and added a solution that was unecessary.
cgriffith View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957890#3957890 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3957890 _______________________________________________ jboss-user mailing list [email protected] https://lists.jboss.org/mailman/listinfo/jboss-user
