What is stored in the HTTP session of the Dist-Auth application? Can I tune the parameters?
The HTTP session of Dist-Auth points to AuthContext. After successful authentication, the session remains active for upgrade and logout purposes. In case of logout or failure, the session is invalidated and released. Dist-Auth contains no parameters you can tune for HTTP sessions. Any performance tuning must occur on the Web container instead. For details, see your Web server or other relevant container’s tuning guide.