We don't do any manual connection management: it's all handled by the container, but I suppose that something we are doing is preventing the container from closing them. I have the debug and error on for the ccm and I will look through the logs to see if I can identify the leak.