Jason thanks for the explanation.
It however doesn't work for me either. I still get the class not found error:
19:20:46,277 TRACE [org.jboss.modules] (Remoting "hattori-hanzo" task-2) Class com.my.CustomSecurityLoginModule not found from Module "org.jboss.as.remoting:main" from local module loader @3d32e42f (roots: C:\jboss\jboss-as-7\modules)
I tried:
<security-domain name="MyCustomSecurityDomain" cache-type="default">
<authentication>
<login-module code="com.my.CustomSecurityLoginModule" flag="required" module="deployment.MyEar.ear.SecurityModule.jar">
<module-option name="password-stacking" value="useFirstPass"/>
</login-module>
</authentication>
</security-domain>
and also: (after first deploying a seperate jar which only contained the LoginModule)
<security-domain name="MyCustomSecurityDomain" cache-type="default">
<authentication>
<login-module code="com.my.CustomSecurityLoginModule" flag="required" module="deployment.SecurityModule.jar">
<module-option name="password-stacking" value="useFirstPass"/>
</login-module>
</authentication>
</security-domain>