The JBoss run-as-principal identity only works if calling a single EJB. Example:

MDB with run-as-principal set calls SB which calls EB

The SB will contain the correct principal name as specified in the jboss.xml file, but when the EB is called, the principal becomes null (or anonymous if using the UsersRolesPassword login module).

This is currenlty holding up a port from WLS to JBoss. I have an example to attach.

Randy Ott
Capstone Consulting
randy.ott@capstonec.com
402.597.3664 x225