If you're using standalone EJB clients then the user/password information is propagated with each invocation regardless of authentication cache. Authentication cache only caches the security context information on the server side therefore minimizing access to potentially slow datasources (for example, only accessing the database to query users, passwords and roles every 30 seconds).
I was curious to know ,what is the function of CachePolicy,ObjectFactory etc,which are associated with AuthenticationCache usage and how to use them in our application.
And do we any sample demonstrating the same?
Thanks in advance,
CachePolicy interface is for different authentication cache implementations. ObjectFactory is JNDI interface for handling object lookups that create object instances at lookup time -- in this case they return a proxy to a naming context interface that allows you to list and lookup information in a given security domain (such as java:/jaas/MyApplicationSecurity)