You can configure session timeout per web-application - put this in Your app's web.xml:
<session-config>
<session-timeout>
30
</session-timeout>
</session-config>
which sets 30 minute session timeout.
/mareks
[Message sent by forum member 'mareks' (mareks)]
http://forums.java.net/jive/thread.jspa?messageID=327814