From: <glassfish_at_javadesktop.org>
Date: Wed, 08 Sep 2010 08:02:01 PDT

maybe you should read info in:

http://forums.java.net/jive/message.jspa?messageID=386382

the trick is to save / restore principal information between subsequent requests, one of the option suggested is:

"In Glassfish, a SAM may instruct the container to register the authentication state (with the session machinery), by adding the following flag to the MessageInfo map.

"com.sun.web.RealmAdapter.register""
[Message sent by forum member 'jszczepankiewicz']

http://forums.java.net/jive/thread.jspa?messageID=482101