cacheable https requests

[Morris, Andi]

Hi all,
I need to stop my shibboleth IDP sending out cacheable https requests.  I've done a bit of research and found that I need to add the following lines into the login.jsp:

response.setHeader("Cache-Control");
response.setHeader("Pragma", "no-cache");

However, I'm not sure whether just adding this in, and then restarting the tomcat service will have the desired effect.  Would anyone with a bit more experience in this be able to point me in the right direction please?

Cheers,
Andi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111020/1e1415ff/attachment.html