At 09:05 3/28/01 -0500, you wrote:
>> i have noted that, when using form based security (tomcat 
>> 3.2.1), a kind of expiration is on: if i connect to a secured 
>> page (actually a servlet) and stay inactive for a while (not 
>> sure about the lapse) when i reload the page or try to 
>> connect to another resource, i have to re insert username and 
>> password.
>> am i right? which parameter have i to change to prevent 
>> tomcat to do this?
>
>Set your session timeout in your web.xml.  Or you can set the session
>timeout in your jsp as well.
>
>
>---
>Michael Wentzel
>Software Developer
>Software As We Think - http://www.aswethink.com
>mailto:[EMAIL PROTECTED]
>
>- Punisher of those who cannot spell dumb!

thanks for your reply, but i am not using sessions any way. either this does not 
happen when i use simple basic authentication.
it seems that session management is turned on some way, when i use form based sec.
any hint?
simone

Reply via email to