Hello - currently HTTP sessions are configured to timeout after 120 seconds, in $CATALINA_BASE/conf/web.xml
<session-config> <session-timeout>2</session-timeout> </session-config> However this is not being honoured by the web services, where many session are lasting longer. >From what I understand - the order for session timeouts is - HttpSession.setMaxInactiveInterval(int) $WebApplication/webapp/WEB-INF/web.xml $TOMCAT_BASE/conf/web.xml Is there something that I'm missing? Theo ----------------------------------------------------------------------------------------------------------------------------------------- The Mileage Company Limited is a limited company registered in England under company number 2260073 whose registered office address is at Astral Towers, Betts Way, London Road, Crawley, West Sussex, RH10 9XY. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by Mimecast for the presence of computer viruses. -----------------------------------------------------------------------------------------------------------------------------------------