How can I set the session time out value for the entire application? I know how to do for a single session. But how to do for all sessions in any application? Should I modify the xml file?
The application-wide setting can be controlled in the deployement descriptor file: web.xml <session-config> <session-timeout> 30 </session-timeout> </session-config> Remember, there is usually a default web.xml and then one that applies to your application ...which can override the default settings. Note: there is also a ServletConfig method for changing this setting dynamically.