1. Perhaps that object has a non-serializable member? You left out when and where the exception is generated so I am just guessing.
2. No, don't be silly, it is up to the servlet container to serialize sessions out to disk when it needs to.
Bill
Thanks for the reply William.
As you said that object may have non-serializable member . If so, that is applicable for every role but it doesn't happen.
Anyways I implemented serializable for the object which was generating exception.
Thanks