I have a cutom login module in which I use getConnection(user,pw) to validate a user's password. The problem is that even though the password is wrong I'm still able to retrieve the connection. I guess the connection is taken from the pool without proper authentication. Is this a bug or should I configure something differently? I'm using oracle (oracle-service.xml) and JBoss 3.0.0.