[jboss-user] [Security] - Re: Caller unauthorized on using a ejb3 statetlesssessionbea

Hi, I think I get it now. Your JAASLoginInterceptor should perform a login using the class "org.jboss.web.tomcat.security.login.WebAuthentication": http://www.jboss.org/community/wiki/WebAuthentication This way, your authentication will be propagated to the security layer. I don't know your class "LoginFacade", but I assume that you don't use "WebAuthentication" there? Hope this helps Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4258331#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...