User is using JAAS authentication and were experiencing the same problem as outlined in ICE-3048. Unfortunately the fix for 3048 in 1.7.2 did not resolve their issue. Instead they found a work around by hacking the BridgeExternalContext. There isn't a grouping for JAAS based Authentication, so they had to write one in the style of Acegi, but not using the acegi classes (actual code not provided).

    static {
        try {
                 AcegiAuthenticationClass = Class.forName("org.acegisecurity.Authentication");
                AuthenticationClass = AcegiAuthenticationClass;
                Log.debug("Acegi Security detected.");
        } catch (Throwable t) {
                Log.debug("Acegi Security not detected.");
        }
        try {
                SpringAuthenticationClass = Class.forName("org.springframework.security.Authentication");
                AuthenticationClass = SpringAuthenticationClass;
                Log.debug("Spring Security detected.");
        } catch (Throwable t) {
                Log.debug("Spring Security not detected.");
        }
    }

I've attached an example of JAAS and Jboss. You will need to run the build script in order to compile the application and may need to make changes to the build.properties files. Also, you will need a MySql database running on your computer.