If a user is logged in (by using FORM auth), and tomcat is restarted,
the "logged in" status for the user is forgotten, even though the
session and session attributes are remembered.
Apparently the status is not stored in the session (but in a HttpRequest note)?

Is this a "feature", or is there going to be work on it in the future?

BTW, using SSO cookies doesn't seem to help (don't know if this is related).

-km


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to