Thanks for your reply Jeanfrancois, but I need more help !! - I know from the Javadocs the syntax for getting a subject from a login context, and the login context from an Access controller, but how do you access the particular login context and/or access controller for a logon.
-also I understand that I can store the subject as a session attribute, but does Tomcat automatically store the subject as a session attribute? Matt > > > >Can anybody tell me how to access in my servlets the > >javax.security.auth.Subject object generated at login? > > > > > You can get it using > > Subject.getSubject(AccessController.getContext()) > > > > > Tomcat 5 store the Subject as an attribute. Do a: > > getAttribute("javax.security.auth.subject") > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]