The previous reply is exactly on-target.
You did not mention exactly which version or build of GlassFish you are using. There was a bug that prevented custom callback handlers from being used that we fixed in October, so as long as you have a recent build the <callback-handler> feature should work and should do what you want.
To add just a bit to what kumarjayanti said, using the <callback-handler> setting is the only thing you should need to do. Make sure to remove your app client's logic that attempts to work directly with the login context.
And please let us know if this solves your problem.
- Tim
[Message sent by forum member 'tjquinn' (tjquinn)]
http://forums.java.net/jive/thread.jspa?messageID=251925