Glassfish Custom Authentication Module?

Question

I know glassfish can authenticate against an LDAP server, I also know it can authenticate against my own database. What I would like to do is authenticate users against LDAP, but get their roles from my own database.

Where would I start learning how to create my own custom authentication module?

Answer 1

See the Glassfish security FAQ, specifically "How do I write/configure my own login module and plug it into GlassFish?"

and this sun document

Answer 2

HERE is the step-by-step instructions of how to do this.