Session timeout is determined by web.xml or weblogic.xml?

[Solo Chiang]

Hi

I like to know if I have web.xml and weblogic.xml both define the session time out
which file is the one which actually dominate the application session time?
Anyone get an idea?

Using the following as the example, session will be expired in 10 minutes or 40 minutes?

======== web.xml ========
<session-config>
<session-timeout>10</session-timeout>
</session-config>


======== weblogic.xml ========
<session-descriptor>
<timeout-secs>2400</timeout-secs>
<cookie-name>AFSSESSIONID</cookie-name>
<cookie-comment>AFWEB Session Tracking Cookie</cookie-comment>
<persistent-store-type>replicated_if_clustered</persistent-store-type>
<url-rewriting-enabled>false</url-rewriting-enabled>
<encode-session-id-in-query-params>true</encode-session-id-in-query-params>
</session-descriptor>

[Solo Chiang]

I found the answer myself,
it is web.xml who take the precedence if both web.xml and weblogic.xml has set the session time out