Hi, But how to call the logout on my LoginModule? That is my actual question. I do not have a LoginModule object with me. LoginModule is called by tomcat himself when we use Form Based Authentication.
============================================================= Javed Just call Session.invalidate() or HttpServletRequest.logout(). The JAASRealm will do the rest, and call logout() on your LoginModule. Note that you can't assume it is the same instance of your login module, that's what all the shared state is for. EJP
