At my customer we have a legacy application that used to authenticate to JBoss 4.2.3 via the web container security module in web xml over form based authentication. In our EJBs we restrict the access to method using permissions.

Now we need to throw away the web based authentication and start using a CAS server (external).

When we disabled the security constrain in the web.xml we get error from EJBs (as expected) but we do not know how to inject the principals and workaround the authentication.

The questions are:

I am facing a very strange issue with respect to the cache names referenced by the EhCache module under jboss5. It is pre-pending the word "true" before my cache names and hence they can no be found:

"starting query cache at region: true.org.hibernate.xxx.yyy "

and also:

"Could not find a specific ehcache configuration for cache named true.com.xxx.yyy.xxx.userList]; using defaults.

Has anyone faced a similar issue and was able to resolve it?

No Google references please unless trhere is an answer there, thank you.  

• When migrating your application from JBoss 4.x to JBoss 5.x, some problems might occur.
• Below is a list of some of these possible problems.

http://java.dzone.com/videos/embedded-jboss