When an established BOSH session gets terminated on the server (eg: an admin pressing the 'close session' button on the admin console), then the client isn't informed of this. The client gets an empty body in a response to any outstanding HTTP request, but that does not tell the client that the session is in fact terminated.

The Converse client has been observed to make a new request, using the same SID (and why wouldn't it? It does not know yet that something is amiss). That request results in an error response: "440 Invalid SID".

Openfire should tell the client that the session got terminated.

I do not believe that this is a problem for other connection types (tcp/socket), as there's a stream close tag that does achieves this 'letting the client know that the session is terminated'.