I have a question about session timeout of a Java application. I have found out that it can be controlled using the Application Server which in my case is Tomcat 6.0. the web.xml file for tomcat has a section:
We want it set to 1hr so I have it at 60 above. My question is that if there is more than 1 application running on the same Tomcat server 6.0 all of them would have the session timeout altered to 1hr - am I right? If so is there another way to control session timeout of a Java application so that not all applications running on the same Tomcat have the session timeout changed as above?
I am not very familiar with session timeout issues, so would really appreciate it if someone can either point me to a good place to read up about it, or give very good explanation.
Each application can (and should) have its own deployment descriptor (web.xml). There is a parent descriptor file in tomcat/conf. The application specific ones override the parent for each application.