NonStop Servlets for JSP System Administrator's Guide

Configuring NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) System Administrator’s Guide—525644-001
3-37
Configuring the Manager for Sessions Support
maxInactiveInterval
The maximum inactive interval (in minutes) for any sessions created. The default
value is 30 minutes.
The value of this property is automatically inherited from the web application
deployment descriptor (WEB-INF/web.xml) based on the value specified in the
<session-timeout> element.
NSJSP provides two implementations of the manager that you can use.
•
The default one, NSJSPStandardManager, provides no persistence and stores
sessions in memory only.
•
The optional one, NSJSPPersistentManager, stores active sessions that have
been swapped out and additionally saves sessions across restarts of the NSJSP
container. By configuring the appropriate <Store> element nested under the
<Manager> element, you can specify the storage location for the session data.
NSJSPStandardManager (Standard Implementation)
NSJSPStandardManager is the standard manager implementation that is used for
any context unless overridden by specifying a <Manager> element nested under a
<Context> element. This manager implementation does not provide session
persistence: sessions are stored in memory only.
In addition to the above common manager attributes, NSJSPStandardManager
supports the following attributes:
algorithm
Name of the message digest algorithm to calculate the session identifiers it
generates. The java.security.MessageDigest class must support this value.
The default value used is MD5.
checkInterval
The number of seconds between checks for expired sessions. The default value
used is 60 seconds.
debug
The debug level for messages logged to the associated <Logger>. Higher numbers
generate more detailed output. The default debug detail level value used is 0
(zero).
entropy
A string value that is utilized when seeding the random number generator used to
create session identifiers. If this attribute is not specified, a semi-useful preset
value is used. For a security-conscious environment, use a long string value.