if (defaultRealm == null) {
throw new LoginException("No Tomcat realm available");
}
final Principal principal = defaultRealm.authenticate(username, password);
if (principal == null) throw new CredentialNotFoundException(username);
final Subject subject = createSubject(defaultRealm, principal);
return registerSubject(subject);
}