I would appreciate if you guys can point me to some link/tutorials
where I can get information about how exactly JAAS works for JBOSS
with embedded Tomcat as webserver.

Here we want to use Web container security, custom forms are used to
capture the username and password. We would like to build custom
LoginModule to give 3 tries for Login.  i.e if the user enters login
information incorrectly for 3 times we want to lock the account. I
want to know where can we implement this logic if we use form-based
security using JAAS.

Thanks
Khan