I am just using the JAAS file realm that was created when the server was installed. I am using facelets and seam and have a managed bean that simply calls an ejb with an @resource sessionContext and the method calls sessionContext.getUserPrincipal().getName() and it returns a name (I believe ANONYMOUS) even before I try to authenticate to the secure portion of the application.
[Message sent by forum member 'chadws' (chadws)]
http://forums.java.net/jive/thread.jspa?messageID=288262