I don't have much experiecne with convergence, but it should be possible to handle the network authentication (in Glassfish) via a JSR 196 server auth module or SAM, which would populate the request subject, and for the convergence layer to implement gtuid and getdomain, by operating on that subject. The subject itselgf can be acquired form subject.getSubject ( if you run with the secuirty manager enabled), or form PolicyContext.getContext(subjectkey) if the security manager is not enabled.
[Message sent by forum member 'monzillo' ]
http://forums.java.net/jive/thread.jspa?messageID=376452