Hi there... any help would be appriciated. I am currently using Apache Tomcat/4.1.12 as an application server. It is configured using a tomcat jndi realm which hits an openldap ldap directory server for authentication. Everything seems to run great. But if nobody uses the website for a while then it will double authenticate the next user to login. That is, Internet explorer prompts for the credentials twice, making it appear as if the first attempt was incorrect even though the password/username was right. I traced it down a bit and discovered it is most likely due to the openldap timeout. After the ldap connection times out (30 seconds or so), it appears that tomcat has to fail the authentication and re-ask to reopen the jndi connection. Any ideas how to prevent a double login by the user without changing the ldap timeout? Thanks!