How to retrieve distinguished name from EndpointContext?

Question

I am building a web service on OAS10.1.3 that uses X509 authentication and LDAP as the security provider in its security configuration. I would like to extract the authenticated user's identity in the form of its full distinguished name, but the ServletEndpointContext API only returns the common name of the authenticated user.
Here is a simplified version of the code I am using to get the user's distinguished name:
public class MyService implements javax.xml.rpc.server.ServiceLifecycle {
private javax.xml.rpc.server.ServletEndpointContext context;
public void init(Object obj) throws javax.xml.rpc.ServiceException {
context = (javax.xml.rpc.server.ServletEndpointContext)obj;
public String helloUser(String message) throws java.rmi.RemoteException {
java.security.Principal principal = context.getUserPrincipal();
return principal.getName();
public void destroy() {
context = null;
context.getUserPrincipal only returns the common name in my application. I suspect that there is some security handler deployment descriptor that I do not have configured correctly, but can't seem to locate the correct documentation. Any help is greatly appreciated,
Dayn

Answer 1

I figured this out. Apparently, the concrete class implementing the Principal interface is not one of the known implementing classes such as X500Principal, but rather an undocumented (at least I can't find any) class: oracle.security.jazn.oc4j.JAZNUserAdaptor. Once the jazn.jar is added to my JDeveloper project properties, I can access the methods. Here is a code snippet:
public String getDN(ServletEndpointContext ctx) {
String principalDN = "Unknown";
Principal principal = null;
if (ctx != null) {
principal = ctx.getUserPrincipal();
if (principal != null) {
principalDN = principal.getName();
if (principal instanceof JAZNUserAdaptor) {
JAZNUserAdaptor user = (JAZNUserAdaptor)principal;
principalDN = user.getRealmUser().getFullName();
return principalDN;
}