Hi Legolas,
IIOP autentication can be used if you have for example a standalone
client that accesses protected EJBs in your container with IIOP.
The username/passwords are taken from the configured security realm (eg.
default file realm). To login from the client you can use the
ProgrammaticLogin class or use a properly configured application client.
-Daniel