Better way to authenticate using a database ?

[Cantor, Scott]

>    Is there a better way to authenticate using a database (and a stored
> procedure to actually validate the password) than a custom JAAS
> module for the IdP ?

Depends on the desired generality I guess. The new interfaces for this are such that it's probably marginally less nutty-looking to build a native extension of the CredentialValidator interface (there's a base class for password validators) than a JAAS plugin, but of course it's specific to the IdP while JAAS is pretty generic.

-- Scott