Is there a way to clear it before next login attempt? Is this a setting? Basically, I have a custom implementation of the login module, with a funtionality to check for number of times a user attempted bad logins before throwing a LoginException. Thing is, if I attempt a good login, then x amount of bad logins, then a good login, I can log in successfully, leading me to believe my first successful login is cached somewhere. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4166253#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...