i need to disable the session-based Principal Cache in AS7 provided by JBossWeb/Tomcat.
In Tomcat and JBoss Versions <= AS6 the cache could be disabled by using a context.xml file like descibed in the sources below:
Searching within the jboss-as-web_1_1.xsd i couln't find a replacement for the cache attribute from context.xml.
As a temporary quick&dirty workaround i would like to patch org.apache.catalina.authenticator.AuthenticatorBase to disable caching by default but i had no luck in finding the JBossWeb sources that ship with AS7.1.0.Final. According to the AS7 pom.xml AS7.1.0.Final ships with JBossWeb 7.0.10.Final but i couldn't find a JBOSSWEB_7_0_10_FINAL tag in the subversion repository at http://anonsvn.jboss.org/repos/jbossweb/tags/
Any hints about disabling the principal cache or finding the JBossWeb sources in question would be appreciated.
Configuring valve attibutes moved to jboss-web.xml in AS7. Since the XML schema for jboss-web is not yet available (see AS7-3401) this page: https://community.jboss.org/wiki/JBossAS7SecurityDomainModel#Deploying_Custom_Tomcat_Authenticators_in_AS7 is the only reference i found.