> From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Subject: Re: Want to customise the tomcat's session logic > > No, you can't customize the session id
Well, you can, sort of. The StandardManager can be configured to use a specific algorithm for the message digest calculation. If you create a custom security provider, you could generate whatever digest value desired. However, it would probably be easier just to create a custom manager class, thereby allowing pretty much any session id desired. http://tomcat.apache.org/tomcat-5.5-doc/config/manager.html - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.