Hi,
in JBoss, you might use a similar approach. I JBoss, you don't configure "Realms" but a "JAAS security domain". This one in configured in "jboss-web.xml" (assuming that you use 5.0 or newer):
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 5.0//EN" "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd"><jboss-web> <security-domain>mysecuritydomain</security-domain> </jboss-web>
Then, you use either "login-config.xml" (pre-JBoss 5.1, see http://community.jboss.org/wiki/DatabaseServerLoginModule ) or a "...-jboss-beans.xml" file (see http://server.dzone.com/articles/security-features-jboss-510 ) to configure a "Login Module" which performs database lookup.
The only problem left is that you have to configure a new DataSource pointing to your oracle database and bind this DataSource to JNDI.
Hope this gives you something to start with.
Wolfgang