We're running a fairly complex system (a full ERP system) via JBoss 3.0.6 w/Jetty and are not having any issues with regard to servlets and session management. We didn't have to do anything to make it work, and in fact in runs on different app servers identically.

Admittedly, in our web.xml file, we do specify a <session-config> directive (for session timeout), however that is all.

Our layout is probably significantly different from yours, in that we make use of a filter to handle session management (creating it, logging the user in, etc.) so the actual servlets themselves really don't care about whether there is or isn't a session-- they never get called if the user isn't authorized to be there in the first place, and they have all their persistent information passed into them via attributes.

The one problem we've had with Jetty, was solved very quickly (read hours), but we had to go to Jetty to get the answer. Have you posted your problem on the Jetty site at http://jetty.mortbay.org/jetty/resources.html (select mailing lists, then support) ?

rob.