i've read the following in Designing Enterprise Application with the J2EE Platform, Second Edition from The Javas series in the chapter about authentication and autorization:
"there is no way to authenticate to an EJB Container"
the book further elaborates on authenticating to a web-container. does this mean that authentication is not possible when using a swing client to connect the j2ee application ? maybe a stupid question, but a very important one for the application i'm developping.