JBoss 3.2.1 Username and password (bad?) caching

[kunta89]

Hi I'm working with JBoss 3.2.1. I've developed and deployed into it a web application. The application is working well, but I'm having problems with some kind of data cache.

E.g.: I'm logged as admin user, then change the password for a normal user ("user01"), then I logout and login with "user01" as username and the old password and I can access to my web application.

Also I can access if I try with the new password.

Restarting the server fix this situation and I can access only with the new password.

The data into the database is updated ok.

This is clearly wrong but I don't know why it is happening. It is a JBoss bug?

I'm using container-managed security

Can anyone help me?

Thanks in advance

[jaikiran]

Have a look at:

http://www.jboss.org/wiki/Wiki.jsp?page=CachingLoginCredentials

[kunta89]

That solve my problem, I just add the tag:

0

to the jboss-service.xml configuration file and now the changes works.

Thanks!

[kunta89]

Tag:
0

[kunta89]

attribute name="DefaultCacheTimeout">0</attribute