final Subject s = new Subject();
final com.sun.enterprise.deployment.PrincipalImpl p
= new com.sun.enterprise.deployment.PrincipalImpl(username);
final GSSUPName name = new GSSUPName(username, realmName);
AppservAccessController.doPrivileged(new PrivilegedAction() {
public java.lang.Object run() {
s.getPrincipals().add(p);
s.getPublicCredentials().add(name);