I took a look a the source code. It seems that LoginModule.login() exceptions are not propagated from JAASRealm.authenticate() to TomcatSecurityService.login(). Implementing my own Realm wouldn't change it, since the exception is 'swallowed' in TomcatSecurityService.login().
Any workaround? Maybe my design is not good. -- View this message in context: http://openejb.979440.n4.nabble.com/Remote-EJB-Client-Authentication-JAAS-tp4666734p4666763.html Sent from the OpenEJB User mailing list archive at Nabble.com.
