Yes there is a MBean for it, org.jboss.security.plugins.JaasSecurityManagerService. 
And there is a flush method you can reach on 
http://localhost:8082/ViewObjectRes//Security%3Aname%3DJaasSecurityManager page.
/Lennart

----- Original Message ----- 
From: Nicolai P Guba <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 24, 2001 2:59 PM
Subject: Re: SV: [JBoss-user] Killing off a session?


> On Mon, 2001-09-24 at 13:16, Lennart Petersson wrote:
> > Hi Nicolai!
> > I'm remembering your question from London. I've tested this and although JBoss 
>security is caching a users authentication it is not possible for another user to log 
>on and use the cached state unless he is using same user/password. Because there is 
>always a check forthe correctnes of user/password. If you do change the roles that a 
>user belongs to then you have to flush the cache manually (use 8082) - or wait for 
>the time out. Maybe even the password is cached, don't know about that.
> > /Lennart
> 
> Hmmm, flushing the cache manually is bad.  However, if there is
> something on port 8082 then there must be a mbean for this.
> 
> -- 
>   Nicolai P Guba    http://www.gnu.org         http://www.frontwire.com
>                     mailto:[EMAIL PROTECTED]     mailto:[EMAIL PROTECTED]
>                     GSM: +44 (0)7909 960 751   DDI: +44 (0)20 7368 9708
> 
> _______________________________________________
> JBoss-user mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/jboss-user


_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to