Taavi:

Thanks for you help.  I have implemeted the call as you suggested when the
user logs out.  

Regarding logging out of JDBC realms.  This does not seem ideal if I have to
explicitly call session.invalidate() when the user logs out.  Do you have
any suggestions for having Jakarta-tomcat automatically invalidating the
session after x period of time.

Tam

-----Original Message-----
From: Taavi Tiirik [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 31, 2001 2:12 PM
To: [EMAIL PROTECTED]
Subject: Re: Loggin out using JDBC realms


> when using security realms, more specifically JDBC realms,
> how do you log-out?

Call session.invalidate() and it does the trick.

with best wishes,
Taavi

Reply via email to