public abstract Subject getUnprivilegedSubject() throws LoginException;
public Subject authenticate(String login, String password) throws LoginException {
final String securityDomain = System.getProperty("jboss.security.domain", getSecurityDomainName());
LoginContext lc = new LoginContext(securityDomain, new LoginHandler(login, password));
lc.login();
return lc.getSubject();
}