public class HibernateSessionFilter implements Filter {

    private SessionFactory sf;

    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {

        try {
           HibernateUtil.logger.info("HIBERNATE FILTER: Getting Session and opening transaction..");
            sf.getCurrentSession().beginTransaction();
            HibernateUtil.logger.info("HIBERNATE FILTER: Session open, transaction ready");
           
            //Anfrage weiterschicken..
            chain.doFilter(request, response);
           
            // Anfrage kommt zurück
            HibernateUtil.logger.info("HIBERNATE FILTER: Committing transaction and closing session..");
            sf.getCurrentSession().getTransaction().commit();
            sf.getCurrentSession().close();
            HibernateUtil.logger.info("HIBERNATE FILTER: Transaction and session closed");

        } catch (Throwable ex) {
           HibernateUtil.logger.info(ex.toString());
            try {
                if (sf.getCurrentSession().getTransaction().isActive()) {
                    sf.getCurrentSession().getTransaction().rollback();
                }
            } catch (Throwable rbEx) {
               HibernateUtil.logger.info(rbEx.toString());
            }
        }
    }

    public void init(FilterConfig filterConfig) throws ServletException {
        HibernateUtil.logger.info("HIBERNATE FILTER: Filter initializing..");
        HibernateUtil.logger.info("HIBERNATE FILTER: Aquiring SessionFactory from HibernateUtil..");
        try {
           sf = HibernateUtil.getSessionFactory();
           HibernateUtil.logger.info("HIBERNATE FILTER: Filter ready.");
        }
        catch (Exception e) {
           HibernateUtil.logger.fatal(e.toString());
        }
    }

    public void destroy() {
       HibernateUtil.logger.info("HIBERNATE FILTER: Filter unloaded.");
    }
}

<?xml version='1.0' encoding='utf-8'?>
<!DOCTYPE hibernate-configuration PUBLIC "-//Hibernate/Hibernate Configuration DTD 3.0//EN" "http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
<hibernate-configuration>
  <session-factory>
    <property name="hibernate.connection.driver_class">
      com.mysql.jdbc.Driver
    </property>
    <property name="hibernate.connection.url">
       jdbc:mysql://217.***.***.***/**
    </property>
    <property name="hibernate.connection.username">****</property>
    <property name="hibernate.connection.password">****</property>
   
      <property name="c3p0.min_size">10</property>
   <property name="c3p0.max_size">100</property>
   <property name="c3p0.timeout">10</property>
   <property name="c3p0.acquireRetryAttempts">30</property>
   <property name="c3p0.acquireIncrement">5</property>
   <property name="c3p0.idleConnectionTestPeriod">300</property>
   <property name="c3p0.initialPoolSize">20</property>
   <property name="c3p0.maxPoolSize">100</property>
   <property name="c3p0.maxIdleTime">300</property>
   <property name="c3p0.maxStatements">50</property>
   <property name="c3p0.minPoolSize">10</property>
   
    <property name="dialect">org.hibernate.dialect.MySQLDialect</property>
    <property name="show_sql">false</property>
    <property name="transaction.factory_class">
      org.hibernate.transaction.JDBCTransactionFactory
    </property>
    <property name="hibernate.cache.provider_class">
      org.hibernate.cache.HashtableCacheProvider
    </property>
    <property name="hibernate.hbm2ddl.auto">update</property>
    <property name="hibernate.current_session_context_class">org.hibernate.context.ThreadLocalSessionContext</property>
    <mapping resource="Area.hbm.xml"/>
    <mapping resource="Site.hbm.xml"/>
    <mapping resource="Company.hbm.xml"/>
    <mapping resource="Employee.hbm.xml"/>
    <mapping resource="Currency.hbm.xml"/>
    <mapping resource="Customer.hbm.xml"/>
    <mapping resource="Product.hbm.xml"/>
    <mapping resource="Forecast.hbm.xml"/>
    <mapping resource="ForecastValue.hbm.xml"/>
  </session-factory>

</hibernate-configuration>

public final class HibernateSessionFilter implements Filter {
   
   static Log logger = LogFactory.getLog(HibernateSessionFilter.class);
   
   /**
    * @see javax.servlet.Filter.destroy()
    */
   public void destroy() {
   }
   /**
    * @see javax.servlet.Filter.init()
    */
   public void init(FilterConfig arg0) throws ServletException {
   }

   /**
    * Time the processing that is performed by all subsequent filters in the
    * current filter stack, including the ultimately invoked servlet.
    * @param request The servlet request we are processing
    * @param result  The servlet response we are creating
    * @param chain   The filter chain we are processing
    * @exception IOException      if an input/output error occurs
    * @exception ServletException if a servlet error occurs
    */
   public void doFilter(ServletRequest request, ServletResponse response,
         FilterChain chain) throws IOException, ServletException {
      try {
         // Pass control on to the next filter
         chain.doFilter(request, response);
      } finally {
         try {
            HibernateUtil.closeSession();
            logger.debug("session closed!");
         } catch (Exception e) {
            logger.warn("closeSession failed! : " + e.getMessage());
         }
      }
   }

   /**
    * Return a String representation of this object.
    */
   public String toString() {
      return this.getClass().getName();
   }
}

public class HibernateUtil {
   
    static Log log = LogFactory.getLog(HibernateUtil.class);
    static ThreadLocal<Session> session = new ThreadLocal<Session>();
    private static SessionFactory factory = null;
   
    /** Creates a new instance of HibernateUtil */
    public HibernateUtil() {
    }
   
    private static void getFactory() throws HibernateException {
        if (factory == null) {
   factory = new Configuration().configure().buildSessionFactory();
         }
    }
   
    private static void getFactoryJNDI() throws NamingException, HibernateException {
        if (factory == null) {
            factory = (SessionFactory) new InitialContext().lookup("java:comp/env/hibernate/SessionFactory");
        }
    }
   
    public static Session openSession() throws NotFoundException {
       
        Session s = (Session) session.get();
        try {
            if (s == null) {
               
                // Don't get from JNDI, use a static SessionFactory
                if (factory == null) {
                    try {
                        getFactoryJNDI();
                    } catch (Exception e) {
                        //e.printStackTrace();
                        getFactory();
                    }
                }
               
                s = factory.openSession();
                session.set(s);
            }
        } catch (HibernateException ne) {
            throw new NotFoundException(ne.getMessage(), ne);
        }
        return s;
    }
   
    public static void closeSession() {
       
        Session s = (Session) session.get();
        session.set(null);
        if (s != null) {
            try {
                s.close();
            } catch (HibernateException he) {
                log.warn(he.getMessage());
                if (log.isDebugEnabled()) log.debug(he.getMessage(), he);
            }
        }
    }
   
   
}

   public static void updateAttribute(Long attributeId, AttributeForm attributeForm, User user) throws Exception {
         
      Session session = HibernateUtil.openSession();
      Attribute attribute = (Attribute)session.load(Attribute.class, attributeId);
      if(!user.testPermissionFlag(User.PERMISSION_MANAGE_ATTRIBUTES))
         throw new PermissionException("User is not allowed to manage attributes!");
      
      Transaction tx = session.beginTransaction();
      try {
//Attributwerte mit attributeForm updaten
         tx.commit();
      } finally {
         if (tx != null && tx.isActive()) tx.rollback();
      }
   }

      <property name="dialect">org.hibernate.dialect.MySQLDialect</property>
      <property name="connection.driver_class">com.mysql.jdbc.Driver</property>
   <property name="connection.url">jdbc:mysql://XXXXXXX</property>
      <property name="connection.username">XXXX</property>
      <property name="connection.password">XXXX</property>


   <property name="hibernate.show_sql">false</property>
   <property name="hibernate.max_fetch_depth">1</property>
   <property name="hibernate.cglib.use_reflection_optimizer">true</property>