Root element for the shared session config. If this is present in the root of an ear then all war's deployed in the ear will share a single session manager. The session-configType defines the session parameters for this web application. Used in: web-app The session-timeout element defines the default session timeout interval for all sessions created in this web application. The specified timeout must be expressed in a whole number of minutes. If the timeout is 0 or less, the container ensures the default behaviour of sessions is never to time out. If this element is not specified, the container must set its default timeout period. The cookie-config element defines the configuration of the session tracking cookies created by this web application. The tracking-mode element defines the tracking modes for sessions created by this web application The tracking modes for sessions created by this web application Used in: session-config The cookie-configType defines the configuration for the session tracking cookies of this web application. Used in: session-config The name that will be assigned to any session tracking cookies created by this web application. The default is JSESSIONID The domain name that will be assigned to any session tracking cookies created by this web application. The path that will be assigned to any session tracking cookies created by this web application. The comment that will be assigned to any session tracking cookies created by this web application. Specifies whether any session tracking cookies created by this web application will be marked as HttpOnly Specifies whether any session tracking cookies created by this web application will be marked as secure even if the request that initiated the corresponding session is using plain HTTP instead of HTTPS The lifetime (in seconds) that will be assigned to any session tracking cookies created by this web application. Default is -1 web web.dist ]]> SESSION or ATTRIBUTE ]]>