DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10526>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10526 Authenticators do not always cache the Principal [EMAIL PROTECTED] changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Enhancement ------- Additional Comments From [EMAIL PROTECTED] 2004-01-01 18:45 ------- After a quick discussion on tomcat-dev, the conclusion is that this is by design. The patch proposed (to always create the session) will not be applied as it is not desirable in all circumstances to have a session created for every authenticated user. However, if this was made a configurable option (defaulting to off) then this would be acceptable. I am therefore marking this report as an enhancement request. In the absence of the enhancement, there is always the option to create the session in your web application. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]