Soap Service using an EJB with security constraints

[He...@zdf.de]

Hi,
 
I´m using the iPlanet Application Server 6.5 and Apache Soap 2.3.1.
 
I registered a soap service to use a  'Hello World'-EJB. This works with a
soap client.
 
But when i register a soap service to use a 'Hello World' EJB with security
constraints, the soap client returns (correctly) with a CORBA_NO_PERMISSION
Error. Same behaviour as with an IIOP Client.
But an IIOP Client can work with user credentials. So the IIOP client can be
authenticated.
 
How can i build/declare a soap service that is able to deliver user
credentials to the EJB Container and therefore can be authenticated?
 
Thanks for any help.
 
Regards
Stefan