Are you creating a basic authentication or form based authentication ?
-----Original Message-----
From: Hendrik Neumann [mailto:[EMAIL PROTECTED]
Sent: 18 May 2005 14:11
To: tomcat-user@jakarta.apache.org
Subject: Tomcat totally ignores my timeout-settings
Hi everybody,
I have the following problem: I have created and registered an
HttpSessionListener which sets the MaxInactiveInterval to 120 seconds in the
sessionCreated-method, whenever a new session is created. Then I have
System.out.println("session is killed") in the sessionDestroyed-method of
this listener. But the sessionDestroyed-method is never called and the
session is NEVER killed. I have also a
<session-config>
<session-timeout>2</session-timeout>
</session-config>
in my web.xml but this doesn't help ether.
What am I doing wrong? Why doesn't tomcat kill my session, why does it
ignore
my settings?
The following is a small part from my logfile. As you can see, the timeout
is
never called by tomcat (look at the time-values). The session is only
destroyed if the user uses the logout-button:
############## /var/log/messages/tomcat5/ catalina.out ###################
new session-object created, # '9A8DC55C6B8043AA6BE12E9027699C64'
-> CreationTime (DD.MM.YY HH:MM): 18.05.05 14:11
-> MaxInactiveInterval: 120 seconds
-> Web-Browser: Mozilla/5.0 (compatible; Konqueror/3.4; Linux
2.6.11-gentoo-r8; X11; i686; de) KHTML/3.4.0 (like Gecko)
logged in: admin (Administrator, 11)', from session-id
'9A8DC55C6B8043AA6BE12E9027699C64'
-> Time (DD.MM.YY HH:MM): 18.05.05 14:15
admin (Administrator, 9A8DC55C6B8043AA6BE12E9027699C64) manually logs out!
-> Time (DD.MM.YY HH:MM): 18.05.05 14:20
session destroyed for 9A8DC55C6B8043AA6BE12E9027699C64 (username: admin)
############################################
What can I do to solve this problem?
Greetings,
Hendrik
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
