in impl/src/main/java/org/apache/directory/fortress/realm/J2eePolicyMgrImpl.java [103:108]
public TcPrincipal createSession( String userId, String password ) throws SecurityException
{
User user = new User( userId, new String ( password ) );
return createSession( user );
}