[jboss-dev-forums] [Design of Security on JBoss] - Re: Cluster Aware Cache Policy for the Jaas Security Manager

[sneusatz]

I've taken a look in the jboss-cache project and it seemed to me that it suits our need of a cluster aware security cache. Besides managing the consistency of cache state in all cluster nodes, it allows for a number of configurations, such as replication messages mode (sync/async) and eviction policies (LRU, MRU, FIFO, etc).

Currently, the JaasSecurityManagerService instantiates a TimedCachePolicy by default. If we were to make the cache policy configurable, we would have to make some arrangements (like, for example, creating a new CachePolicy subclass to handle clustered environments and allowing the user to define which policy is to be used). On the other hand, maybe it would be possible to simply redefine the cache solution used by JaasSecurityManager to use solely the cluster-aware policy (since TreeCache can also be used in non-clustered environments).

In any case, the time-out behaviour of the TimedCachePolicy could be achieved by registering eviction policies that would cause the nodes to be evicted after a configurable amout of time. A TreeCacheListener would then register for eviction events and cause the principal to be logged out upon reception of such an event.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4042876#4042876

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4042876