Steven,
It might be entirely unrelated, but something in your original post makes me curious.
you said:
I've tried using both the include directive and action. This has nothing to do with session objects. includes are for including resources like other jsps, plain HTML files, etc.
What is the code you are using?
As for cookies and Tomcat, here is
their pagewhere they mention configuration of session tracking. This page is for the Default Context, which is used if you haven't provided your own Context for the web application in question. If you have,
you should check that Context for the appropriate attribute.
A
word on URL-rewriting: If your client doesn't support or won't accept cookies, then the container will 'switch' to URL rewriting, but you must help it out a bit. Check out the API for the HttpServletResponse.encodeURL() method. It says '
servlets' but JSP pages count too.