"Have you ever needed to create a login authentication mechanism for an application? Odds are, you have, and probably more than once, with each new implementation being close, but not identical, to the previous one. For example, one implementation might use an Oracle database, another might use an NT authentication, and another, an LDAP (lightweight access directory protocol) directory. Wouldn't it be nice to support all these security mechanisms without changing any application-level code? Now in the Java world, you can with the Java Authentication and Authorization Service (JAAS)," says John Musser and Paul Feuer in this JavaWorld article: