Does anybody have a tutorial or guide on how to set up web application level security to verify user's against an Active Directory group in order to restrict access.

ie: if current user is in group X then they can access the site.

is this even possible with JBoss? This seems like something that should be a fairly common feature. with IIS this is a very trivial step, granted it is an MS product and so is windows.

i have looked for some time now and cannot find anything.

thanks in advance

-luke