Ron, thanks for hints about: "com.sun.web.RealmAdapter.register" :). Do not get me wrong about spec, I really appreciate the spec, but for me after reading this it was hard to understand how transform some high level abstract thinking (about principals, subjects) into real implementation (session, Principal interface), i had little experience with JAAS so maybe this was contributing to the effect. It would be very nice to see some "implementation hints" in the spec. As I said before I really appreciate that we (Java users) have standard intercontainer mechanism for such problems as servlet authentication, thanks for great job leading this spec :)
[Message sent by forum member 'jszczepankiewicz' (jarrman_at_poczta.onet.pl)]
http://forums.java.net/jive/thread.jspa?messageID=385525