Hello. I'm trying to create a website that has custom login & logout features. I'd also like to use this feature to control access to what servlet and what EJB they can access. But the login & logout features is also suppose to keep track of what time they logged in and what time they logged out. I was thinking about writing my own login-module to handle a custom login but is there another way? and is it possible to attach more than just Principal & roles information?
