<session-config>        <enable-cookies>false</enable-cookies>         <enable-url-rewriting>true</enable-url-rewriting>         <use-persistent-store/>         <!--   <save-mode>on-shutdown</save-mode>   -->   <session-timeout>40</session-timeout>   <file-store>WEB-INF/sessions</file-store>   <always-save-session>true</always-save-session>   <always-load-session>true</always-load-session>       </session-config>


​​http://blog.163.com/new_liu.popo/blog/static/438709212008101131726570/​​