LoginModules and Thread-Safety

[pitdingo]

Does each user get an instance of a LoginModule or is there only on instance per app or server?

In other words, are attributes shared as in Servlets?

[starksm64]

A login module is created for each LoginContext.login operation so they are unlike servlets.