if (!new String(tmpPassword).equals(infos[0])) {
throw new FailedLoginException("Password for " + user + " does not match");
}
principals = new HashSet<Principal>();
principals.add(new UserPrincipal(user));
for (int i = 1; i < infos.length; i++) {
principals.add(new RolePrincipal(infos[i]));
}
users.clear();