You don't need to read an attribute, just need to be sure
HttpServletRequest.getSession() is invoked. You should verify, but I think it almost
always is without any effort on your part; e.g. by the Tomcat authentication logic if you
use container managed security or by populating the standard 'session' variable if
you use a jsp.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4153056#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...