clientside: auth.conf

defaultAuth {
 org.jboss.security.ClientLoginModule required;
 org.jboss.security.auth.spi.LdapLoginModule required
 java.naming.factory.initial="com.sun.jndi.ldap.LdapCtxFactory"
 java.naming.provider.url="ldap://localhost:389/"
 rolesCtxDN="ou=Roles,dc=eactAG,dc=ch"
 matchOnUserDN="true"
 principalDNSuffix=",ou=People,dc=eactAG,dc=ch"
 principalDNPrefix="uid="
 uidAttributeID="userid"
 roleAttributeID="roleName"
 roleAttributeIsDN="false"
 java.naming.security.authentication="simple";
};

<application-policy name="defaultAuth">
 <authentication>
 <login-module code="org.jboss.security.auth.spi.LdapLoginModule" flag="required">
 <module-option name="java.naming.provider.url">ldap://localhost:389/</module-option>
 <module-option name="rolesCtxDN">ou=Roles,dc=eactAG,dc=ch</module-option>
 <module-option name="matchOnUserDN">true</module-option>
 <module-option name="principalDNSuffix">,ou=People,dc=eactAG,dc=ch</module-option>
 <module-option name="principalDNPrefix">uid=</module-option>
 <module-option name="uidAttributeID">member</module-option>
 <module-option name="roleAttributeID">cn</module-option>
 <module-option name="roleAttributeIsDN">false</module-option>
 <module-option name="unauthenticatedIdentity">guest</module-option>
 </login-module>
 </authentication>
</application-policy>

 AppCallbackHandler handler = new AppCallbackHandler(userid, password.toCharArray());
 LoginContext lc = new LoginContext("defaultAuth", handler);