[jboss-dev-forums] [Design of Security on JBoss] - Re: Security Cache Flush on Http Session Expiration

[anil.saldhana@jboss.com]

"clevelam" wrote : Thanks for the reply Anil.
  | 
  | Should this be the same case for when a user closes the browser and a session-timeout occurs.  I will try again, but I am not noticing the LoginModule's logout method being called.
  | 

http://anonsvn.jboss.org/repos/jbossas/trunk/tomcat/src/main/org/jboss/web/tomcat/security/SecurityFlushSessionListener.java

Next time do a google search before you press the panic button on the forums.  This listener should be enabled by default in the conf/web.xml of the tomcat deployer in your AS.

Have you added some system out messages in your custom LM logout? Is it even being called? 

If you have more problems, take it to the user forums. This is design forum. Ok?

Good luck!

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190541#4190541

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4190541