When flush JAAS cache

[formenti]

(I use JBoss 3.2.3)
I read the wiki about the flush of JAAS cache but i'm confused: when i must flush the cache?
My application allows the administrator:
1) create a new user
2) delete a new user
3) change user details
4) change user password
and allows the logget user:
5) change their password from within a session

When, in the scenario above, i must call the flush method?

Thanx and sorry for my english!
Gio

[_alex]

never ;)

flush cache against particular user means that
1) if this user has an open session, he/she should relogin prior any client-server interaction could be performed;
2) if this user has noopen session (how could he be flushed?), flushing the cache will not touch him at all.

1) create a new user
don't flush
2) delete a new user
don't flush, if the user has noopen session
3) change user details
don't flush if the user has no open sessions (may be don't flush without any conditions)
4) change user password
don't flush (in fact - up to you)
and allows the logget user:
5) change their password from within a session
don't flush

Alexander

[formenti]

Many thanks for your quick reply... :)

So, why it's flush needed? I read many posts about flush of JAAS cache... it it's not needed why so many threads about that?!

Gio

[_alex]

from my point of view, the flush is needed when you would like some user to abort his current session and relogin immediately, prior to his next call to the server.

Alexander

[ereze]

Can someone please help?
I want to let users modify their username.
How can I flush the cache entry of this specific user and not
of the whole application?

Thanks in advance (hoping for some replies)

Erez

[starksm64]

http://www.jboss.org/wiki/Wiki.jsp?page=CachingLoginCredentials