Previously I said there was no way short of performing an authentication to place an entry in the auth cache. This is true of the default cache, but you can install your own org.jboss.util.CachePolicy instance for use by the security manager and this would allow you to directly manipulate the cache entries. See the JaasSecurityManagerService documentation on how to install your own CachePolicy.

--
xxxxxxxxxxxxxxxxxxxxxxxx
Scott Stark
Chief Technology Officer
JBoss Group, LLC
xxxxxxxxxxxxxxxxxxxxxxxx

Spencer wrote:

Currently, my web app uses LDAP to authenticate.  When a user changes
their password in LDAP, it does not get updated in the Auth Cache
(which is expected behavior), so the old password is valid until the
user logs in with the new password.

I found the manual entry about flushing the authentication cache, but
doing so logs the user out of the app.  So if I do it upon the password
change, the user has to log right back in.  I would do it upon logout,
but there's no guarantee that the user will logout, as opposed to just
closing the browser.

So the question is whether or not there's a way to update a specific
user's credentials in the Auth Cache without having the user forcibly
logged off.

TIA,
Spencer



------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to