From: <glassfish_at_javadesktop.org>
Date: Thu, 19 Feb 2009 01:24:50 PST
A custom realm would still deal with user-name/password authentication in a custom way. What you need is to plug in a JSR-196 Sever Authentication Module (SAM). The SAM provides a way to define a custom authentication mechanism.