If you are using tomcat4/jboss3, it's not in suth.conf. Instead it's in login-config.xml.
Thanks for the help. It turns out that the problem is I'm using Java 1.3, and apparently needed to upgrade to Java 1.4. Your point about the JBoss config setup is helpful though as it gets at my next step, getting JAAS working on the server-side.