Sun Java System Web Server 7.0 Update 5 Developer's Guide to Java Web Applications
Setting a Session Timeout
Session timeout is set using the session-timeout element
in the web.xml deployment descriptor file. For more information,
see the Java Servlet 2.5 specification.