Thanks for you post Lisa. Renier preposed an interesting solution to my problem. I'm prepared to try out this route, but if I could get away with not using a web filter then that would be great.
Do you have any code that you could send on how to do the JNDI lookup and retrieve the Principal? We are using JBoss 3.2.6 and will soon be upgrading to 4.x.x - I'm not sure if this makes a difference when looking up the SecurityManager. Paul
