Dear All,

I was wondering since a long time about custom login modules and whether it is possible somehow to write such a login module which would use EJB. Why ? Just because I'm developing a web application which stores user data in Container managed entity beans and it would be very appropriate for me to operate on those beans not on raw database, furthermore I would like to log every attempt of login into the system even if it's not successful.

My doubts come from the fact that I must define the security/login policy in login-config.xml file and of course before deploying my application this login module using EJB wont be available on the server (since the application will be not deployed).

Is there any way of solving this problem? Thx a lot in advance for any advice.

Karol