From: Sudarsan Sridhar <Sudarsan.Sridhar_at_Sun.COM>
Date: Tue, 06 Apr 2010 11:43:26 +0530

On 06-Apr-2010, at 3:55 AM, Sarah kho wrote:

> hi
> if using a client application to access secure EJBs, where i should specify the security realm which should be used for the authentication and authorization?
>
The authentication is done on the server side, so the security realm must be specified in the EJB module descriptor.

Regards,
Sudarsan
> thanks.