spring - Session data is lost before session time out if the appilcation goes in ideal state -


i using spring security 3.1.1 , mybatis 3 ,session data lost before session time out if application goes in ideal state , user behaves anonymous user after

please in advance

*spring security file reference*

<beans:beans xmlns="http://www.springframework.org/schema/security"              xmlns:beans="http://www.springframework.org/schema/beans"               xmlns:xsi="http://www.w3.org/2001/xmlschema-instance"              xsi:schemalocation="http://www.springframework.org/schema/beans     http://www.springframework.org/schema/beans/spring-beans-3.1.xsd     http://www.springframework.org/schema/security     http://www.springframework.org/schema/security/spring-security-3.1.xsd">         <http auto-config="false" use-expressions="true" >         <intercept-url pattern="/jsp/home*" access="hasanyrole('role_guest','role_admin','role_support')" />         <intercept-url pattern="/jsp/search*" access="hasanyrole('role_guest','role_admin','role_support')" />         <intercept-url pattern="/jsp/errorsearch*" access="hasanyrole('role_guest','role_admin','role_support')"/>         <form-login login-page="/jsp/login.htm" default-target-url="/jsp/home.htm" login-processing-url="/jsp/j_spring_security_check"                     authentication-failure-url="/jsp/login.htm?error=true"/>                     <logout logout-url="/jsp/j_spring_security_logout" logout-success-url="/jsp/login.htm" delete-cookies="jsessionid"/>         <access-denied-handler error-page="/jsp/accessdenied.htm"/>         <session-management session-authentication-error-url="/loginfailed" session-fixation-protection="migratesession">              <concurrency-control expired-url="/loginfailed" error-if-maximum-exceeded="true" max-sessions="1"/>         </session-management>     </http>     <beans:bean id="ldapactivedirectoryauthprovider" class="org.springframework.security.ldap.authentication.ad.activedirectoryldapauthenticationprovider">         <beans:constructor-arg value="homeoffice.test.com" />         <beans:constructor-arg value="ldap://honts0102.homeoffice.test.com:1568" />         <beans:property name="useauthenticationrequestcredentials" value="true" />         <beans:property name="convertsuberrorcodestoexceptions" value="true" />         <beans:property name="userdetailscontextmapper" ref="dashboarduserdetailscontextmapper"/>     </beans:bean>     <beans:bean id="dashboarduserdetailscontextmapper" class="com.test.dashboard.security.userdetailscontextmapperimpl"/>      <authentication-manager>            <authentication-provider ref="ldapactivedirectoryauthprovider" />      </authentication-manager> </beans:beans> 


Comments