You can have a look here:

Seam 2.1.2

Or if you are using 2.1.1, look here: Seam 2.1.1

They might be helpful.

i have read it before but not quite understood it...

Then tell me what is your problem.

Not a problem with identity.getUserName()...because the username is getting verfied...its the md5 hashed password in the db that is not getting verified.

Use the password hash generator page in the Seamspace example to compare the hash with the one you have in your database. I'm guessing that you're not calculating it correctly (possibly missing a salt value, etc).

I tried using the SAME hash generator used in Seamspace (Hash.java) with my code:

@Column(name = "password", length = 50)
        @UserPassword(hash = "md5")
        @Length(max = 50)
        public String getPassword() {
                return this.password;
        }

        public void setPassword(String password) {
                this.password = password;
        }

//Retrieving User whose login name matches
                Users user = (Users) entityManager
                                .createQuery(
                                                "SELECT users FROM Users users WHERE users.name = :userName")
                                .setParameter("userName", identity.getUsername())
                                .getSingleResult();
                this.user = user;

                //User does not exist
                if (user == null) {
                        log.info("No such user " + identity.getUsername());
                        return false;
                }
                //User Exists
                log.info("Yes such user " + identity.getUsername());
                if(identity.getPassword().equals(user.getPassword()))
                {
                        log.info("Yes such password " + identity.getUsername());
                        return true;
                }

now, No password is encrypted while entering in databse. im too confused..please help

Did you tried to print received and stored passwords to the logs? Maybe there is just simple problem, like .equals() instead of .equalsIgnoreCase() or something like that?

Why are you comparing identity.getPassword() with user.getPassword()? If you're hashing your passwords in the database, then user.getPassword() will be the hash - identity.getPassword() returns the plain text password the user is authenticating with, so of course they won't be equal.

ok did that.. now i insert an entry manually into the database insert into users values('admin',null,md5('admin'))

after this i try to login using username/password as admin/admin...the user gets verified but the password does not..