SSL認証におけるロール名について

--- web.xml ---
    <security-constraint>
      <web-resource-collection>
        <web-resource-name>Protected Area</web-resource-name>
        <url-pattern>/*</url-pattern>
	<http-method>DELETE</http-method>
        <http-method>GET</http-method>
        <http-method>POST</http-method>
	<http-method>PUT</http-method>
      </web-resource-collection>

      <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
    </security-constraint>

    <login-config>
      <auth-method>CLIENT-CERT</auth-method>
<realm-name>certificate</realm-name>
    </login-config>

    <security-role>
       <role-name>一般ユーザ</role-name>
    </security-role>
    <security-role>
       <role-name>GENERAL</role-name>
    </security-role>


--- sun-application.xml(sun-web.xmlで指定しても同じ) ---
  <security-role-mapping>
    <role-name>GENERAL</role-name>
    <principal-name>(カード証明書のSubject名)</principal-name>
  </security-role-mapping>
----------------------

    public String getName()
    {
        return(m_sys.getName());
    }

    public String getName()
    {
        Principal pr = new RolePrincipal("GENERAL");
        Set<Principal> prs = new HashSet<Principal>();
        prs.add(pr);
        Set pub = new HashSet();
        Set priv = new HashSet();
        Subject sub = new Subject(true, prs, pub, priv);
        m_role = null;
        Subject.doAs(sub, new PrivilegedAction() { 
            public Object run()  { 
                try {
                    m_role = getNameIn(); 
                }
                catch (Exception e) {
                }
                return(null); 
            }
        });
        return(m_role);
    }
    private final String getNameIn()
    {
        return(m_sys.getName());
    }