> When a Tomcat session times out does it send you to a preset
> error page?
No. not unless you throw an exception due to dependence on something
from session. You could develop an entire webapp without ever using
the session and despite the fact you never use it it will still be
instantiated. For obvious reasons.
> What is the mechanism there?
No mechanism!
> What is the best way to handle timed out users?
Depends. Do you have a security concern(if so you should be implementing
Realms of some sort which manage the session timeout for you)? Are you
requiring something to exist in the session for certain portions of your
app? ....... It all depends on what you specs and app requirements state.
---
Michael Wentzel
Software Developer
Software As We Think - http://www.aswethink.com