This graphic shows interactions of a LoginModule instance and associated LoginContext instance. The LoginModule instance communicates with a CallbackHandler instance and the LoginContext instance, and also is shown to perform the following operations:

• Initialize: set subject; set CallbackHandler; shared state; options.

• Login: call CallbackHandler; validate input.

• Commit: add principals; clean internal state.

The CallbackHandler instance is shown to perform callbacks and get input.

The LoginContext instance is shown to retrieve the JAAS configuration.

Possible types of login modules—Kerberos, Database, and LDAP—are shown providing information for the subject (or the subject itself) in the LoginContext instance.

(End of description.)