I used to work with jboss-4.0.1sp1, when I had redeployed the web application the server didn't flush the session's attributes, but since the attributes where Serializabled they where saved.

Now I use jboss-4.0.3rc1, when I redeploy the application, updating WAR file, the attributes are gone.

I hope it's only a matter of configuration of AS?