JAAS custom login module cannot get login Pricipal informati

[bshirley]

I am having problems obtaining the principal/credentials on a custom server-side login module.

I can use a standard module, and my client is passing the credentials correctly via JNDI/InitialContext. I've

@Override
 public boolean login() throws LoginException {

 userIdentity = SecurityAssociation.getPrincipal();

 Boolean success = super.login();

 if (debug)
 System.out.printf(this.getClass().getName() + ".login(): principal = " + userIdentity +
 "success = " + success);

 //if (userIdentity == null)
 // throw new LoginException("Principal was not found.");

 return success;
 }

http://www.timfanelli.com/item/98 has been mostly useful in me getting this far, but I'm not sure why I can't access the principal/credentials at this point. (and the Sticky JAAS readme post has broken links)

[jaikiran]

See if the SecurityFAQ http://wiki.jboss.org/wiki/SecurityFAQ is of any help. Probably Q3, Q7 and Q10 in that FAQ may be what you are looking for?

[bshirley]

I have read all of the Security FAQ, several times, to no avail.

Also,
Q3: "This also needs to be explained more..." I'd agree. And what does "propagating to the called component" even mean in the security context? It could fail for multiple reasons. It should be clarified.

Q7: followup Q, what does "user has authenticated to the container" mean?!

Q10: as mentioned, I'm setting the information into the InitialContext correctly, because I can use the org.jboss.security.auth.spi.UsersRolesLoginModule

additionally:
Q4: I've updated my log4j config file as mentioned and don't see any extra logging, is there something additional I need to configure?