I have tested some other cases:

We have a SessionListener who sets a flag of the user to logout out, when
there is a session invalidate. Now it seems that the session.invalidate()
don't calls the listener in Tomcat 5.0. is this possible?

Thanks,
Marc





                                                                                       
                                                
                      "Mike Curwen"                                                    
                                                
                      <[EMAIL PROTECTED]         An:      "'Tomcat Users List'" 
<[EMAIL PROTECTED]>                         
                      m>                       Kopie:                                  
                                                
                                               Thema:   RE: How to really destroy a 
Session                                            
                      16.04.04 15:56                                                   
                                                
                      Bitte antworten                                                  
                                                
                      an "Tomcat Users                                                 
                                                
                      List"                                                            
                                                
                                                                                       
                                                
                                                                                       
                                                



The cookie is removed when the user closes the browser, no ?


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Sent: Friday, April 16, 2004 8:34 AM
> To: [EMAIL PROTECTED]
> Subject: How to really destroy a Session
>
>
>
>
>
>
> Hi all,
>
> I am using Tomcat 5.0.19.
>
> In my application the generated sessions are identified by a
> cookie on the client. I only allow single sign on. Now I want
> to destroy the session and I call in a session an
> invalidate() and the session isn't available. Then the
> application  redirect the request to the start page. But
> there is still the cookie with JSESSIONID on the client and
> there is no new session possible.
>
> Is there a solution to remove these cookies?
>
> Thanks,
> Marc
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to