Thanks Ralph.  But can't I force j_security to read an existing cookie?  how
do i map the sessionid back to the user in case he closed his browser?

Thanks,
Guru

----- Original Message -----
From: "Ralph Einfeldt" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Thursday, October 31, 2002 4:18 AM
Subject: RE: keeping user logged in using j_security_check


That feature is caused by the livetime of the session
cookie. That cookie is just valid for the current browser
session. If you close the browser the cookies is deleted.

If you disable cookies you can reenter a session, if
you use an url that contains a valid session id.

> -----Original Message-----
> From: Guru Mandavia [mailto:gmandavia@;smartbrief.com]
> Sent: Wednesday, October 30, 2002 11:03 PM
> To: [EMAIL PROTECTED]
> Subject: keeping user logged in using j_security_check
> Every time a user closes the browser window,  he is forced to
> re-login even though he logged in just a couple of minutes ago.
>
> Is there a way to configure j_security_check to use an
> existing session after the browser window is closed?
>

--
To unsubscribe, e-mail:
<mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail:
<mailto:tomcat-user-help@;jakarta.apache.org>


--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@;jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@;jakarta.apache.org>

Reply via email to