have you set the session time out in web.xml of your war?
<session-config> <session-timeout>30</session-timeout> </session-config>
The default timeout used by the tomcat instance is under deploy/jbossweb-tomcatxxx.sar/conf/web.xml
You shud override in your web.xml
Yes, I have done this -- I set it to 45 minutes, and it is honoring that... like I said, at 9:00 the user logs in, at 9:30 the user sends a touch request, and at 9:45 the session expires... when the touch request comes in, however, it SHOULD move the expire time out to 10:45 (45 minutes from the last access), but it's not doing this for some reason...