regarding invalidating sessions

[Gaurav Chikara]

Is it possible to forcefully invalidate a session
generally we invalidate a session on some event
by session.invalidate() method
but if we want to forcefully invalidate it thru server or ny other means can anyone pls tell as how is it possible?

[William Brogden]

You would need an independent storage for references to the sessions since the API no longer lets you get at all sessions in an application.
Some sort of Administration servlet with a Vector of sessions would work.
Bill