Thanks for your help Sylvian. 

> 
> Session management is a servlet engine concern, and session 
> listener is the way to go.
> 

I think I have a handle on it now using my authentication class with
HttpSessionBindingListener.


> Does this mean a limited global number of sessions, or forbid 
> a given user to be logged more than once?
> 

I need to limit the number of sessions for a given user, probably 2 but
controlled by a license.  Since this product will be licensed by number of
named users we don't want a logon to be passed around the enterprise.

Gary



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]