Configure a Broker with LDAP and continuosly send and receive messages using one user for more time than the case expiration timeout (10000ms by default). Using the following Bytema rules, it's possible to recognize that the cache is loaded just before the expiration but not after. RULE Trace LDAPLoginModule-addRoles CLASS org.apache.activemq.artemis.spi.core.security.jaas.LDAPLoginModule METHOD addRoles AT ENTRY IF TRUE DO #traceStack( "LDAPLoginModule#addRoles:\n" , 20) traceln( "###LDAPLoginModule#addRoles" ) ENDRULE RULE Trace SecurityStoreImpl-checkAuthorizationCache-act CLASS org.apache.activemq.artemis.core.security.impl.SecurityStoreImpl METHOD checkAuthorizationCache AFTER WRITE $act IF $act == null DO traceln( "###checkAuthorizationCache:NOT IN GUAVA CACHE\n" +$0+ "\n" +$1+ "\n" +$2+ "\n" +$3); traceln( "###checkAuthorizationCache:Cache " +$ this .authorizationCache.hashCode()+ "\n\t" +$ this .authorizationCache.asMap()); ENDRULE RULE Trace SecurityStoreImpl-constructor CLASS org.apache.activemq.artemis.core.security.impl.SecurityStoreImpl METHOD <init> AT EXIT IF TRUE DO traceln( "###SecurityStoreImpl-constructor:Guava Cache\ninvalidationInterval:" +$3+ "\nauthenticationCacheSize:" +$8+ "\nauthorizationCacheSize:" +$9) ENDRULE RULE Trace Cache-put INTERFACE com.google.common.cache.Cache METHOD put AT EXIT IF TRUE DO traceln( "###put:Cache put [" +$1+ "," +$2+ "]" ); traceln( "###put:Cache " +$ this .hashCode()+ "\n\t" +$ this .asMap()); ENDRULE RULE Trace Cache-isExpired CLASS com.google.common.cache.LocalCache METHOD isExpired AT EXIT BIND expired: boolean = $!; IF expired DO traceln( "###expired:" +$1.hashCode()); ENDRULE