Remote EJB client using SPNEGO authentication is not thread safe ---------------------------------------------------------------- Key: SECURITY-846 URL: https://issues.jboss.org/browse/SECURITY-846 Project: PicketBox Issue Type: Bug Components: Negotiation Affects Versions: Negotiation_2_1_3 Environment: JBoss EAP 5.2 with JBPAPP-10613 patch installed Reporter: Tom Fonteyne A standalone program uses SPNEGO authentication to call an EJB on the server from several threads at the same time. Some calls will work, some will throw "Invalid User" exceptions