This is a very interesting article describing how to use
Tomcat's JDBCStore module to store session information in a JDBC-compliant database, rather than in memory or on disk. Probably most useful for large, high-traffic, sites running a lot of sessions at once.