One other thing I just noticed. The login servlet runs under https. After successful login, including creating a valid session, it calls HttpServletResponse.sendRedirect("http://myHost.myDomain.com/context/servlets/main"); which is the one that ends up with no cookie.
--------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]