Custom UserPassword Authentication

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2014-07-01 17:24]:
> open source JAAS modules that are certainly around the net

See this post for one such example:
http://shibboleth.net/pipermail/users/2013-October/012728.html
The website is currently broken but the SVN repository with the code
is still up and working fine.

An alternative to doing this in Java is sticking Apache httpd in front
of your Java servlet container and use the Shib IDP's (default, in 2.x
IDP releases) RemoteUser login handler. But that will only make sense
if you already have a module for httpd that does what you want (or
you're doing it within httpd using e.g. mod_perl) and also has some
limitations, such as no support for passive or forced authentication
requests.
-peter