dzhao00,
There was no requirement to not re-use session ID in original question of sundartri. The
problem was how to invalidate the session. The original poster was under the impression
that the session was not being invalidated because the ID did not change. You mis-read
the problem and added a solution that was unecessary.
cgriffith
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957890#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...