Doubts regarding session management.

[murliprasad]

Once we set the session using session.setAttribute(). Will it stay active for the duration of session timeout set in WEB.XML
(I am using tomcat server).

How can the user manually logout and create a new session(before the session timeout). Do we have to use session.inactivate method.

Thank you in advance.

[murliprasad]

Cheers All, I have got the problem solved.

I got my problem sorted using the two functions session.invalidate()
and request.getSession.isNew().

whenever the isNew() method returns false, the user is redirected to the homepage and if the user wants to forcefully logout, I have used the session.invalidate() method to do so.

Thanks everybody for your time.