And to provide some more insight.
I have several types of applications that I need to support (thin clients, thick clients, flash clients, etc) and need to provide a way for all clients to authenticate against a JAAS domain. Does JBoss provide a mechanism to do this?
Ok, so I have gotten a little farther with this and was hoping someone could push me over the edge.
I have an EJB whose only purpose in life is to determine the set of Roles a user belongs to. The EJB looks up the JaasSecurityManager and I would like to invoke getUserRoles on it, but what is the 3rd parameter of type Object used for?
answered my own question.
This interface seems a bit quirky to me though. I don't have access to the users credentials at this point so is there another way to get a list of roles that the user belongs to?