* @param registry
* @see checkAuthenticationAllowed
*/
protected void allowableSessionsExceeded(String sessionId, List<SessionInfo> sessions,
int allowableSessions, SessionRegistry registry) throws SessionException {
if (exceptionIfMaximumExceeded || (sessions == null)) { throw new SessionException(
"over max online sessions "); }
// Determine least recently used session, and mark it for invalidation
SessionInfo leastRecentlyUsed = null;
for (int i = 0; i < sessions.size(); i++) {
if ((leastRecentlyUsed == null)