Really you would be better having the domain delegate back to the realm to avoid the need for clear text passwords in the properties files.
