Accepting Unauthenticated Users

Web applications accept unauthenticated web clients and allow these clients to make calls to the EJB container. The EJB specification requires a security credential for accessing EJB methods. Typically, the credential will be that of a generic unauthenticated user. The way you specify this credential is implementation-specific.

In the Application Server, you must specify the name and password that an unauthenticated user will use to log in by modifying the Application Server using the Admin Console:

1. Start the Application Server, then the Admin Console.

2. Expand the Configuration node.

3. Select the Security node.

4. On the Security page, set the Default Principal and Default Principal Password values.