you are right, the authentication date is cached.
for more information have a look at
and look for UserManagerJBossSpecific at
First link speaks about 'DefaultCacheTimeout'. I haven't seen this attribute in my xml file for jboss-3.2.2RC4. And this attribute wouldn't be a good solution for me.
Second link speaks about 'UserManagerImpl' and I haven't seen this class in jboss-3.2.2RC4.
Some idea more?
Thank you in advance.