[jboss-user] [Security & JAAS/JBoss] - Re: receiving both my custom callback handler AND SecurityAs

When I declare my.first.login.module as "sufficient" I am able to access the EJBs, although they are declared with @SecurityDomain("policy1") and I log on using the following code: | LoginContext lc = new LoginContext("policy2", cbHandler); | lc.login(); | When I'm debugging with Eclipse, it seems my.first.login.module is still touched, although it shouldn't (it's in policy1, not policy2) Any ideas why ? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4032743#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...