Just to inform you all, the issue is fixed in JBoss 7.
Mandar Kulkarni wrote:
Any workarounds(except for programmatic login) if the bug still exists in JBoss 6?
Is it possible to do a programmatic login from within an EJB module? There is a web based programmatic authenticator in JBoss AS and there's the Servlet 3.0 method in request, but what about doing this purely from the EJB module?