UsernamePasswordLoginModule does not appear to be authenticating

Question

I'm trying to authenticate with WebLogic 10.3 from a Java client via JAAS. I'm using the JAAS config that comes with WebLogic:
Simple {
weblogic.security.auth.login.UsernamePasswordLoginModule required debug=false;
The Subject I receive is not populated with any Principals. In addition, LoginContext.login always returns true, even if I supply a bogus username and/or password. The code I use for logging in is as follows:
try {
loginContext = new LoginContext("Simple", new LoginCallbackHandler(username, password, url));
loginContext.login();
return true;
catch (Exception e) {
e.printStackTrace();
return false;
My callback handler is as follows:
     class LoginCallbackHandler implements CallbackHandler {
          private String url;
          private String username;
          private char[] password;
          public LoginCallbackHandler(String username, char[] password, String url) {
               this.username = username;
               this.password = password;
               this.url = url;
          * (non-Javadoc)
          * @see javax.security.auth.callback.CallbackHandler#handle(javax.security.auth.callback.Callback[])
          @Override
          public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
               for (Callback callback : callbacks) {
                    if (callback instanceof NameCallback) {
                         NameCallback nc = (NameCallback) callback;
                         nc.setName(username);
                    else if (callback instanceof PasswordCallback) {
                         PasswordCallback pc = (PasswordCallback) callback;
                         pc.setPassword(password);
                    else if (callback instanceof URLCallback) {
                         URLCallback uc = (URLCallback) callback;
                         uc.setURL(url);
                    else {
                         System.out.println(callback);
I'd really appreciate any help I can get. This has me stumped. (I'm not very experienced with WebLogic, so many things may have me stumped at this point.)
Thanks,
Mike

Answer 1

Thanks for your response, Faisal, but I finally figured it out. It was a classpath problem. I was running the client from within Eclipse and was using the runtime classpath Eclipse generates from the build path. Because of project dependencies, the client had a lot of unnecessary Weblogic libraries in the classpath. After I rebuilt the classpath from scratch, the authentication worked. It was probably picking up UsernamePasswordLoginModule from somewhere other than wlfullclient.jar.