How can I set session timeout so that it never expires? It\'s for a Java EE web application.
Specify a negative time.
<session-config> <session-timeout>-1</session-timeout> </session-config>
The benefit is however questionable. The webapp will leak memory away on long term. Think twice before you do this.