Jeff, I hate to be blunt, but you are way off base. JAAS is an API whose sole purpose is to externalize the authentication/authorization (A/A) from the application as well as make it pluggable. JAAS is not a service/API that can be used to gain info about or modify a set of users (a.k.a a realm.)
If you want to have a service that can provide CRUD actions on a realm then you need to create such a beast. This is not what JAAS is for. My comments about how to do this then are still valid. later, cgriffith View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3943010#3943010 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3943010 ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user