The properties file based login modules just mirror the /etc/passwd type functionality. They are used mainly for test deployments or such. Nobody should go into production with property based login modules. As Marcus said, real world deployments go with ldap or db.