How to provide own security mechinism

[John Pletka]

Is it possible to override Orion's security classes with my own?  The main
things I'm looking for are 1) the ability to authenticate against a 3rd
party LDAP server, and 2) From the client process, dynamically change the
Principal reported in an EJBContext object.