[jboss-user] [Security & JAAS/JBoss] - Servlet Authentication without j_securitycheck

I have a servlet that receives a non-SOAP XML message with authentication information in the message, and I need to establish a temporary security context to call a secured EJB. What is the best method for doing this? The client is not able to call j_securitycheck. Currently I'm creating a LoginContext, getting the Subject and invoking the EJB through a Subject.doAs call. So far I haven't been able to get this to work. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3987879#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...