the best place for your jaas.config file is definetly within your application archive and not someplace in the filesystem. another option might be to put your configuration into conf/login-config.xml of your jboss instance.
but for me the best option is to use the DynamicLoginConfig setup. (read about it here: http://www.jboss.org/wiki/Wiki.jsp?page=DynamicLoginConfig)
but this means you have your war file, then you create a sar file with the DynamicLoginConfig and then you put both into an ear file (this step is optional but I think it's best to have everything for an application within a single archive)
question: why are you writing your own login module? there is a great DatabaseServerLoginModule (http://docs.jboss.org/jbossas/admindevel326/html/ch8.chapter.html#ch8.dabaseserverloginmodule.sect)
you will also find config examples there.
if you really need your own custom login modul use this: http://docs.jboss.org/jbossas/admindevel326/html/ch8.chapter.html#ch8.custom.sect.
the best in your case would probably be to extend the UserPasswordLoginModule or DatabaseServerLoginModule.
Thanks Tom for the info. You've included a lot that I have to digest. Frankly since I'm new to JAAS I started with an existing example from an article and was trying to make it work on JBoss. But since you've included the link to the doc I need, I can just go that route.
One question: How portable is the JBoss databaseServerLoginModule?
Thansk for your help
Using to advantage, I'd like to know if is possible put the log4j configure file togheter with the jaas config file inside the war.