I have HttpSession session = req.getSession( true);
already, which is the functional equivalent since "true" is the default behavior for both the non-parameterized and the parameterized methods of the Interface. But I call this method in both the controller servlet and the validation servlet - the former to track new logins and the latter to authenticate new users. Then the validation servlet hands off control back to the controller. Me wonders if this could be the problem? Am I stepping on my sessions? (I'm at the office right now and can't test this.) Mark -----Original Message----- From: Richard Yee Sent: Wednesday, January 02, 2002 8:17 PM Mark, You need to have HttpSession session = req.getSession(); . . . session.setAttribute("user", userBean); in your controller. ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html