From: <forums_at_java.net>
Date: Fri, 15 Apr 2011 14:26:36 -0500 (CDT)
It looks like the JAAS class com.sun.security.auth.module.LdapLoginModule
actually does exactly what I'm asking for (auth-only mode). Too bad the
Glassfish class com.sun.enterprise.security.auth.login.LDAPLoginModule
doesn't.
I found a few resources for creating a custom Realm and LoginModule and I've
gotten it to work, but it has been a huge pain in the neck. I've
encountered stuff I never wanted to have to learn about such as OSGI, HK2,
and the inner-workings of Glassfish container managed security. The primary
resource for getting a custom module to work was this one:
http://blogs.sun.com/nithya/entry/modularized_osgi_custom_realms_in [1]