FJ-31 JAAS

No JBoss AS 7 standalone-jms.xml (dentro da tag security-domains)
<security-domain name="fj31domain" cache-type="default">
    <authentication>
        <login-module code="Database" flag="required">
            <module-option name="dsJndiName" value="java:/livrariaDS"/>
            <module-option name="principalsQuery" value="select password from users where user like ?"/>
            <module-option name="rolesQuery" value="select role, 'Roles' from roles where user like ?"/>
        </login-module>
    </authentication>
</security-domain>

----------------------

Para criar as tabelas e dados no MySQL:

create table users(user varchar(15), password varchar(40), primary key (user) );
create table roles(user varchar(15), role varchar(15), primary key (user, role));
INSERT INTO users VALUES ('joao', 'pass');
INSERT INTO roles VALUES ('joao', 'administrador');
INSERT INTO users VALUES ('maria', 'pass');
INSERT INTO roles VALUES ('maria', 'cliente');


-----------------------------------------------------
WEB
-----------------------------------------------------

WEB-INF/jboss-web.xml:

<?xml version="1.0" encoding="UTF-8"?>
<jboss-web>
   <security-domain>fj31domain</security-domain>
</jboss-web>

------------
A parte JAAS do WEB-INF/web.xml:

<security-constraint>
  	<web-resource-collection>
		<web-resource-name>Url de autenticacao</web-resource-name>
		<url-pattern>/*</url-pattern>
	</web-resource-collection>
	<auth-constraint>
		<role-name>*</role-name>
	</auth-constraint>
	<user-data-constraint>
		<transport-guarantee>NONE</transport-guarantee>
	</user-data-constraint>
</security-constraint>
<login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>fj31domain</realm-name>
</login-config>
<security-role>
	<role-name>cliente</role-name>
</security-role>


---------------------

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" version="3.0">
  <display-name>javaee-jboss</display-name>  
  
  <security-constraint>
		<web-resource-collection>
			<web-resource-name>Url de autenticacao</web-resource-name>
			<url-pattern>/*</url-pattern>
		</web-resource-collection>
		<auth-constraint>
			<role-name>*</role-name>
		</auth-constraint>
		<user-data-constraint>
			<transport-guarantee>NONE</transport-guarantee>
		</user-data-constraint>
	</security-constraint>
  <login-config>
      <auth-method>BASIC</auth-method>
      <realm-name>fj31domain</realm-name>
   </login-config>
	<security-role>
		<role-name>cliente</role-name>
	</security-role>
</web-app>