This post has NOT been accepted by the mailing list yet.
Currenlty we are using shiro 1.2.3. This comes with an in-built cache MemoryConstrainedCacheManager. The problem is that the cache elements does not expire once authenticated. Due to this any changes happened in the ldap realms are not realized. Is there any cache provided by shiro that expires after some time?