JAAS with JSF misunderstanding

[Lukas Hnatuk]

Hi, i am trying to develop JSF based application with JAAS, but i stuck over a 3 weeks with it and I would appriciate some help:).
I have a login page, lets assume it looks like this:

 <ui:define name="content">
        <h:form>
            <h:panelGrid columns="3" border="1">
                Login:
                <h:inputText value="#{loginManagedBean.login}" id="login"/>
                <h:message for="login"/>

                Heslo:
                <h:inputText value="#{loginManagedBean.heslo}" id="heslo"/>
                <h:message for="heslo"/>
            </h:panelGrid>
            <h:commandButton value="#{loginManagedBean.button}" action="#{loginManagedBean.perform}"/>
        </h:form>
        <h:link outcome="addUser">Vlozit</h:link>
    </ui:define>

After login, I get the usenmae and password to the loginManagedBean a call my EJB. EJB has this method:

public String perform(UserSessionManagedBean user){
        LoginContext lc;
        try {
            lc = new LoginContext("entityLoginModule", new EntityCallbackHandler(user.getLogin(), user.getHeslo()));
            lc.login();
            System.out.println(lc.getSubject());
        } catch (LoginException ex) {
            Logger.getLogger(UserSessionBean.class.getName()).log(Level.SEVERE, null, ex);
        }
        return "druha";
    }

I do the authentication and if i did lc.getSubject() i see the thinks i need.
Here is the problem: When i leave this method, i cannot find any way get the Subject i just logged in. Is there some way, or i am doing it completly wrong.
The reason why I do not want to use j_username with j_password and some realm is, that I would like to have more control over application(eg redirecting each user to a different page(admins,users...) and i cant find the way.
Can you please tell me, what I am doing wrong, or post some little code, to understand this.
I read the JAAS tutorials, but still i am a lot confused.

My second questin is, how do I find the roles i put to the user?

Here is the LoginModule login and commit methods ( i found some tutorial here, so they are only copied from here:

    public boolean login() throws LoginException {
        try {
            NameCallback nameCallback = new NameCallback("Username");
            PasswordCallback passwordCallback = new PasswordCallback("Password", false);
            Callback[] callbacks = new Callback[]{nameCallback, passwordCallback};
            callbackHandler.handle(callbacks);
            username = nameCallback.getName();
            char[] password = passwordCallback.getPassword();
            passwordCallback.clearPassword();
            user = new UserPrincipal(username);
            roles = new UserPrincipal[]{new UserPrincipal("admin")};
            return true;
        } catch (IOException ex) {
            Logger.getLogger(EntityLoginModule.class.getName()).log(Level.SEVERE, null, ex);
            return false;
        } catch (UnsupportedCallbackException ex) {
            Logger.getLogger(EntityLoginModule.class.getName()).log(Level.SEVERE, null, ex);
            return false;
        }
    }

    public boolean commit() throws LoginException {
        subject.getPrincipals().add(user);
        UserGroup group = new UserGroup("Roles");
        for (UserPrincipal role : roles) {
            group.addMember(role);
        }
        subject.getPrincipals().add(group);
        return true;
    }