Users Connect with Old Credentials

Problem: A user changes password in the backend security system, but can still authenticate with the previous password when connecting to Unwired Server.

Description: Unwired Server securely caches authenticated login credentials (1 hour by default), so that subsequent connection requests using the same credentials are not sent to the underlying security provider until the login cache timeout is reached. However, if the same user uses changed credentials, the authentication request us sent to the underlying security provider. The authorization outcome is not cached and always delegated to the security provider in the security configuration.

Solution: To reduce the cache period, decrease the default authentication cache timeout for a security configuration using Sybase Control Center (go to the Cluster > Security > <security configurationname> > Settings tab). Setting the property to 0 results in disabling the authentication caching (not recommended for performance reasons).

Related tasks
Error in Listing Application Connections and ADMIN_WEBSERVICE_INVOCATION_ERROR in gateway.log
Unexpected Listener Startup or Connection Errors
AuthorizationException Displays Instead of Status
Related reference
Server List Not Retrieved
Unwired Server Fails to Start
Starting or Restarting a Remote Server from Sybase Control Center Fails
Port Conflict Issues
Refreshing Server Configuration Displays Only Partial Updates
Increasing Messaging Queue Counts Degrades Performance
Saving Server Configuration Fails Due to Certificate Validation Error