> "Note that the java.security.Principal class does not implement > Serializable. Therefore all concrete Principal implementations > associated with Subjects must implement Serializable." Yeah, though I think at the end of the day that depends on actually wanting to serialize Subject. -- Scott