Hi,
i need to disable the session-based Principal Cache in AS7 provided by JBossWeb/Tomcat.
In Tomcat and JBoss Versions <= AS6 the cache could be disabled by using a context.xml file like descibed in the sources below:
http://anil-identity.blogspot.com/2007/12/disable-tomcat-caching-principal.html
http://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Basic_Authenticator_Valve
Searching within the jboss-as-web_1_1.xsd i couln't find a replacement for the cache attribute from context.xml.
As a temporary quick&dirty workaround i would like to patch org.apache.catalina.authenticator.AuthenticatorBase to disable caching by default but i had no luck in finding the JBossWeb sources that ship with AS7.1.0.Final. According to the AS7 pom.xml AS7.1.0.Final ships with JBossWeb 7.0.10.Final but i couldn't find a JBOSSWEB_7_0_10_FINAL tag in the subversion repository at http://anonsvn.jboss.org/repos/jbossweb/tags/
Any hints about disabling the principal cache or finding the JBossWeb sources in question would be appreciated.
Regards
Robert