Here are more Traces which makes me confused: 2008-09-05 10:07:44,984 TRACE [org.jboss.security.ClientLoginModule] Security domain: orga-security | 2008-09-05 10:07:44,984 TRACE [org.jboss.security.ClientLoginModule] Enabling multi-threaded mode | 2008-09-05 10:07:44,984 TRACE [org.jboss.security.ClientLoginModule] Enabling restore-login-identity mode | 2008-09-05 10:07:44,984 TRACE [org.jboss.security.ClientLoginModule] Enabling useFirstPass mode | 2008-09-05 10:07:44,984 TRACE [org.jboss.security.ClientLoginModule] Begin login | 2008-09-05 10:07:45,406 TRACE [org.jboss.security.ClientLoginModule] commit, subject=Betreff: | Principal: username | Principal: Roles(members:admin,read) | | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.SecurityAssociation] pushSubjectContext, subject=Betreff: | Principal: username | Principal: Roles(members:admin,read) | , sc=org.jboss.security.SecurityAssociation$SubjectContext@ee6ba6{principal=username,subject=14519264} | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] defaultLogin, lc=javax.security.auth.login.LoginContext@10a3f5e, subject=Subject(14519264).principals=org.jboss.security.SimplePrincipal@30812805(username)org.jboss.security.SimpleGroup@6401464(Roles(members:admin,read)) | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] updateCache, inputSubject=Subject(14519264).principals=org.jboss.security.SimplePrincipal@30812805(username)org.jboss.security.SimpleGroup@6401464(Roles(members:admin,read)), cacheSubject=Subject(29775540).principals=org.jboss.security.SimplePrincipal@30812805(username)org.jboss.security.SimpleGroup@6401464(Roles(members:admin,read)) | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] Inserted cache info: org.jboss.security.plugins.JaasSecurityManager$DomainInfo@666f6a[Subject(29775540).principals=org.jboss.security.SimplePrincipal@30812805(username)org.jboss.security.SimpleGroup@6401464(Roles(members:admin,read)),credential.class=java.lang.String@22591049,expirationTime=1220603840125] | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] End isValid, true | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.SecurityAssociation] pushSubjectContext, subject=Betreff: | Principal: username | Principal: Roles(members:admin,read) | , sc=org.jboss.security.SecurityAssociation$SubjectContext@e11d0e{principal=,subject=20623813} | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.SecurityAssociation] getPrincipal, principal= | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.SecurityAssociation] getSubject, sc=org.jboss.security.SecurityAssociation$SubjectContext@e11d0e{principal=,subject=20623813} | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] doesUserHaveRole(Set), subject: Betreff: | Principal: username | Principal: Roles(members:admin,read) | | 2008-09-05 10:07:45,421 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] roles=Roles(members:admin,read) | 2008-09-05 10:07:45,437 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] hasRole(read)=true | 2008-09-05 10:07:45,437 TRACE [org.jboss.security.plugins.JaasSecurityManager.orga-security] hasRole=true | 2008-09-05 10:07:45,484 TRACE [org.jboss.security.SecurityAssociation] getPrincipal, principal= | 2008-09-05 10:07:45,484 TRACE [org.jboss.security.SecurityAssociation] pushSubjectContext, subject=null, sc=org.jboss.security.SecurityAssociation$SubjectContext@8f11a6{principal=,subject=null} | 2008-09-05 10:07:45,562 DEBUG [org.hibernate.impl.SessionImpl] opened session at timestamp: 4999586060288000 username = correct principal admin, read = correct roles I don't understand why at the most entrys, the correct username and roles a listed. I seems that they are commited by the ClientLoginModule. But in the last two trace logs, the principal and the subject are null... I still can't use the getCallerPrincipal() method get to work... :(... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4174509#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...