Yeah that works great if you arn't using a realm, however the JBossSecurityMgrRealm creates an instance of SimplePrincipal which is then returned by sessionContext.getCallerPrincipal() inside the EJB's.
So it would appear that LoginModule.login() creates the Principal which goes in the HttpServletRequest.getUserPrincipal(), which is fine; and the realm creates the Principal which goes into the EJB layer. How do I get the Principal in LoginModule.login() to go to the EJB layer? All I want is one instance of MyPrincipal() to be created and this single instance to be returned by both HttpServletRequest.getUserPrincipal() and javax.ejb.SessionContext.getCallerPrincipal(). Thanks again. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3950446#3950446 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3950446 _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user