Get the quickstart document and search
for ClientLoginModule, the rest is just
a standard Jaas login.
Thanks for the reference.
Its now working. What I had neglected to do was create an auth.conf for catalina and include a reference to it in the java bootup call.