Max Session Issue

[mislam]

I have an issue where user can't no longer login when the close their browser without logging out. So I have max sessions allowed to ( max-sessions="2"). And if the user logs in, closes browser a couple of times he/she can't login anymore. Is there a way to timeout those orphan session? If not, what can I do to prevent this type of scenario (other than asking user to logout when they are done).

[Marten Deinum]

Session will time out eventually (tomcat default is 30 minutes). When a user does shutdown his browser there isn't much you can do, you could try to execute some javascript, although this isn't 100% save. (Also what if the computer of the user crashes, power down etc.).