title: Session Id Length in Tomcat
body: <p>We need to change the session ID length generated by tomcat. By default it is 32 bytes, unfortunately we need a session ID length of 20. Looking online I can see the <code>StandardManager</code> seems to manage this which extends <code>PersistanceManager</code>.</p>
  
  <p>Does anyone know if the <code>sessionIdLength</code> can be modified in the tomcat config? If so what files?</p>
  
  <p>An alternative would be to create a custom <code>Manager</code> which simply overrides/sets the <code>sessionidLength</code>. Is this possible? How do you tell tomcat to use the custom manager in the config?</p>