"Craig R. McClanahan" wrote:
>
> You might want to look at how Tomcat 4.0 addresses the "single sign
> on" feature of the servlet spec, which requires user authentication
> to be global across the web apps in a virtual host (even though the
> sessions are unique). It's done by maintaining a sepa
On Fri, 11 May 2001, Antony Bowesman wrote:
> Hi,
>
> Is it correct behaviour for Tomcat to create a different session when a
> call is made to request.getSession(true) if the context is different.
>
Yes. That's required by the servlet spec. It also makes sense when you
think about the cla
