On 9/12/12 4:35 PM, "It Meme" <it.meme01 at gmail.com> wrote: > >We use JAAS for authentication. Then you have some other bug that may or may not be fixed that's letting null principal identities through. That should never happen. -- Scott