Authentication Cache

Issue

• By default, cache-type of your security-domain is "default" which uses a ConcurrentHashMap implementation which never expire cached entries. However, when the HTTP session expires the cache entry is removed.
• How does this apply to ajp threads/sessions? We leverage ajp connector as we proxy our Jboss AS farm using Apache HTTPD using mod_cluster.