> Except with Shibboleth it's not a hack, it's the only thing you can do (unless > you can get the Tomcat guys to modify their code) Except for the other thing you can do which is explicitly the title of this thread, I suppose. -- Scott