以下是一些我用来帮助理解JAAS的链接:
http://www.owasp.org/index.php/JAAS_Tomcat_Login_Module
http://www.javaworld.com/jw-09-2002/jw-0913-jaas.html
http://jaasbook.wordpress.com/
http://roneiv.wordpress.com/2008/02/18/jaas-authentication-mechanism-is-it-
possible-to-force-j_security_check-to-go-to-a-specific-
page/
还可以查看Apache tomcat领域配置方法:
http://tomcat.apache.org/tomcat-6.0-doc/realm-
howto.html



