Daniel, one quick question while I am investigating - when you implement your login module are you able to access the users plain text password from wherever it is stored? If so a realm plug-in may be better so you can leave the Remoting authentication to be Digest based without the need to force it down to Plain as is required to integrate with JAAS.