My requirements: 1) to be able to get the session given a JSESSIONID
2) to persist active sessions across tomcat restart (which is default tomcat behavior) Since there is no way in tomcat (for security reasons?) to obtain the session object given a JSESSIONID, I have implemented my own session listener, which maintains a hash of active sessions. Now I can obtain the session object given a JSESSIONID. However I am broken on tomcat restart. Because session listener does not notify me on the pre-existing active sessions upon restart. One solution is to implement my own persistence in my session listener code. Q1. However I was wondering if there is a way to influence session listener to notify me on the pre-existing active sessions upon tomcat restart? Q2. Is there another way to get the session given a JSESSIONID? Thanks. -Ajay