This is not possible as tomcat caches the roles within the principal (instance of
GenericPrincipal).
You have two requirements: you need SSO as well as roles refresh. These cannot be mixed
with the current standard valves.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4119896#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...