is authenticated login cached anywhere?

[jagdeep]

Is there a way to clear it before next login attempt? Is this a setting?
Basically, I have a custom implementation of the login module, with a funtionality to check for number of times a user attempted bad logins before throwing a LoginException. Thing is, if I attempt a good login, then x amount of bad logins, then a good login, I can log in successfully, leading me to believe my first successful login is cached somewhere.

[jagdeep]

I figured this out. It is the defaultcachetimeout and defaultcacheresolution variables in jboss-service xml