In JServ 1.0b3, the cookie expiration date was being sent with a two-digit year. Most browsers are forgiving on this count, but certain versions of MSIE4 wouldn't accept the cookie, thinking it had already expired (you know, back in 1900...).

Took me two days to figure out why certain people around the office weren't getting authenticated for various pages/activities...

Upgrading to 1.0 fixed it -- beware, if you try to use your old jserv.properties file, the name of the ApacheJServ.jar no longer contains a dash (look for your wrapper.classpath lines).
tjmATusaDOTnet