JassSecurityManagerService mbean's DefaultCacheTimeout prope

[osenhaji]

Hello,

Jboss 3.0.7

I am using the DatabaseServerLoginModule. I am trying to configure out the JaasSecurityManagerService mbean's DefaultCacheTimeout property to force authentication to occur every time (the property is set to 0). When I made a change in the UserRoles table (a user's role is dropped) nothing seems to happen with the SecurityManager. The user continue to access to an EJB method.

How can I force the SecurityManager to be synchronized with the security information store?

Regards,

[juhalindfors]

try the flushAuthenticationCache() operation

[talgolan]

NOTE: This assumes that you are running the latest version of JBoss. I have no idea if this answer will apply to older versions.

Check out the jboss-service.xml file. You will find this in <JBOSS_HOME>/server/default/conf.

Inside this file you will find the following...

<!-- JAAS security manager and realm mapping -->


org.jboss.security.plugins.JaasSecurityManager



If you add the following attribute JBoss will perform no authentication caching.

0

The complete entry should be as follows...

<!-- JAAS security manager and realm mapping -->


org.jboss.security.plugins.JaasSecurityManager

0


HTH.

Peace,

Tal