Incorrect CallerPrincipal used for ejbCreate method of Stateful Session Bean ---------------------------------------------------------------------------- Key: JBAS-6006 URL: https://jira.jboss.org/jira/browse/JBAS-6006 Project: JBoss Application Server Issue Type: Bug Security Level: Public(Everyone can see) Components: EJB2, Security Affects Versions: JBossAS-4.2.3.GA Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: JBossAS-4.2.4.GA If a security domain is defined within a login module that has an unauthenticatedIdentity defined once that unathenticated identity has been used once it will be made visible as the CallerPrincipal for calls to ejbCreate on stateful session beans.