JBoss Session Timeout
JBoss 5 allows you to define a session timeout for all applications at:
deployers/jbossweb.deployer/web.xml
It may be that is overriding your settings in web.xml. It shouldn't, but, you know...
Check if changing that is working. If not, you can set up the timeout programatically for your test:
HttpSession.setMaxInactiveInterval(int seconds)
That way you can force the timeout in a particular session.
Sadly in JBoss EAP 6.1.0.Alpha1 (AS 7.2.0.Alpha1-redhat-4) we're back to having to set it per web app in web.xml: See the JBoss docs.
Which say use this:
<session-config>
<session-timeout>30</session-timeout>
</session-config>