Authenticating with a user name and password

This section explain how the JAAS LoginModule authenticates with a user name and password. To authenticate a user, the JAAS LoginModule requires the calling application to provide the following attributes:

• A principal name, specified as either a short name or an X.500 name (DN)
• A password

The LoginModule authenticates the principal and returns the Security Verify Access credential. The LoginModule expects the calling application to provide the following information:

• The user name, through a javax.security.auth.callback.NameCallback.
• The password, through a javax.security.auth.callback.PasswordCallback.

When the Security Verify Access credential is successfully retrieved, the LoginModule creates a Subject and a PDPrincipal.

Parent topic: Authenticating users and obtaining credentials