Hi,
One possibility: you can set a sesson timout value in the web.xml for your
application
<!-- session timeout -->
<session-config>
<session-timeout>30</session-timeout> <!-- 30 minutes -->
</session-config>
Don't know what default is if you don't
andrew
On Wed, 28 Mar 2001, you wrote:
> dear colleagues,
> i have noted that, when using form based security (tomcat 3.2.1), a kind of
>expiration is on: if i connect to a secured page (actually a servlet) and stay
>inactive for a while (not sure about the lapse) when i reload the page or try to
>connect to another resource, i have to re insert username and password.
> am i right? which parameter have i to change to prevent tomcat to do this?
> thanks,
> simone
