com.tagish.auth.win32.NTSystemLogin
This module which is only available on windows  NT and 2000 allows
users to be authenticated against an NT domain. The module will
request a username, password  and optionally domain (the domain to use
may be named in the config file) and attempt to retrieve the user's
credentials using them. Depending on settings in the config file the
returned Principals may have human readable names
(eg "administrator"), NT SID format names (eg "S-1-5-32-544") or
both. Note that if the system on which authentication  is performed is
temporarily out of contact with its PDC it will not necessarily be
able to return human readable names, but it will be able to return
SID format names.
The NTSystemLogin module is configured with an entry in the config
file like this

NTLogin
{
com.tagish.auth.win32.NTSystemLogin required returnNames=true
returnSIDs=false defaultDomain="domain";
};
The following parameters may be specified:
returnNames Principals with human readable names will be created
optional
returnSIDs Principals with names in NT SID format will be created
optional
defaultDomain Domain to authenticate against. If this is ommitted the
module will raise a TextInputCallback to request the Domain if it is
not supplied here. optional

A user  logged on using this module will have a number of Principals
(actually com.tagish.auth.win32.NTPrincipal) associated with them.
There will be a USER Principal representing the user's name, a GROUP
principal for each NT group the user is a member of and a DOMAIN
Principal representing the NT Domain that authenticated the user..


Ref:- http://free.tagish.net/jaas/
http://free.tagish.net/jaas/doc.html