JAAS & WebContainer interaction

Hi everybody,

is there any common way to retrieve authenticated user subject?

For example, Tomcat/JBoss store it in "javax.security.auth.subject" session attribute after successful authentication, but WebSphere does not.

Stricktly speaking LoginModule cannot access session or application context with standard form based authentication (without doing something fancy) and it does look like web container cannot access JAAS subject. Is that correct or am i missing something here?

Any opinion will be greatly appreciated.

Igor.

[564 byte] By [inksystemsa] at [2007-10-2 22:37:22]