https://issues.apache.org/bugzilla/show_bug.cgi?id=55804
--- Comment #2 from Sachin Kumar <sachinkumar...@yahoo.com> --- If request.getUserPrinicpal() returns null, then we go on reauthenticate and repopulates a new GSSCrential. However, when we reauthenticate the session also changes. I believe the session changes because changeSessionIdOnAuthentication is true by default, so the we have to reinitialize session(populate some objects just as in case of fresh login onto session) in our application. Can we have request.getUserPrinicipal null and then when a session already exists not create a new session. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org