hv @ Fashion Content wrote:
So what if my login page does NOT create a session and the user browses to
the login page and then enters credentials ?
Tomcat will create one if it does not exist.
I recognise the text "The time allowed for the login process has been
exceeded. If you wish to continue you must either click back twice and
re-click the link you requested or close and re-open your browser" as
something I wrote so I am pretty sure this is coming from Tomcat. The
message is generated when the session is invalid. This was only seen
as the result of a time-out but could also be as a result of other
session problems.
Using a tool like ieHttpHeaders (IE), Live HTTP Headers (Firefox) or
TcpMon (from Apache Axis) should help you figure out what is going on.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]