Basic question about security

[albert_steed]

Hello,

I noticed that the values for SECURITY_PRINCIPAL and SECURITY_CREDENTIALS specified by my app are not taken into account.

Here is a snippet from my app:

p.put(Context.SECURITY_PRINCIPAL,"sa");
p.put(Context.SECURITY_CREDENTIALS,"WRONG");

This allows me to connect to the ejb even if the value for SECURITY_CREDENTIALS is wrong.

Can anyone tell me why?

Thanks in advance,

Albert.

[starksm64]

Start with the JAAS Howto topic in this forum.