I've taken a look in the jboss-cache project and it seemed to me that it suits our
need of a cluster aware security cache. Besides managing the consistency of cache state in
all cluster nodes, it allows for a number of configurations, such as replication messages
mode (sync/async) and eviction policies (LRU, MRU, FIFO, etc).
Currently, the JaasSecurityManagerService instantiates a TimedCachePolicy by default. If
we were to make the cache policy configurable, we would have to make some arrangements
(like, for example, creating a new CachePolicy subclass to handle clustered environments
and allowing the user to define which policy is to be used). On the other hand, maybe it
would be possible to simply redefine the cache solution used by JaasSecurityManager to use
solely the cluster-aware policy (since TreeCache can also be used in non-clustered
environments).
In any case, the time-out behaviour of the TimedCachePolicy could be achieved by
registering eviction policies that would cause the nodes to be evicted after a
configurable amout of time. A TreeCacheListener would then register for eviction events
and cause the principal to be logged out upon reception of such an event.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042876#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...