Is there a way to implement a custom JAAS authentication login without referencing vendor specific classies (ie, JBoss). The only way I've seen here is to extend JBoss DatabaseServerLoginModule. Does this mean that there is no way to create a custom JAAS login module that runs in any J2EE container, today? I can only use JAAS if I can be sure that the WARs and utility jars used by the WARs continue to be portable to any J2EE container.
If no one knows of a way, does anyone know if there is a JSR that will address this, or if it is slated for J2EE 1.4 or 1.5?