How to save success JAAS authentication?

[daphna deutsch]

I’m trying to secure my web application using JAAS and Jboss7.
When I’m trying to access secure page – it popup the login page as expected,
But after success login, it keep popup the login page.

If I use the default servlet - j_security_check – it remember the login.
In my servlet – what is required in order to save the authentication on the session?

Here is my code:

login.jsp

<form action="LoginServlet" method="GET">
		<input type=text name=login><br>
		<input type=text name=password><br>
		<input type=submit value=submit>
	</form>

LoginServlet

public class LoginServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;

	@Override
	protected void doGet(HttpServletRequest request,
			HttpServletResponse response) throws ServletException {
		try {
			String login = request.getParameter("login");
			String password = request.getParameter("password");

			final LoginContext lc = new LoginContext("exgl", new PassiveCallbackHandler(login, password));
			lc.login();
			final Subject subject = lc.getSubject();
			final Set<Principal> principals = subject.getPrincipals();
			request.getSession().setAttribute("subject", subject);
			final Principal userPrincipal = request.getUserPrincipal();
			
			System.out.println("ok");
		} catch (LoginException e) {
			System.out.println("Failed to get loginContxt.");
			e.printStackTrace();
		}

	}

}