the JndiLoginModule should document that the if you use
LDAP, the directory needs to grant read access to the
userPassword attribute.

also, the module should no longer use the SolarisPrincipal.
it should use the UnixPrincipal.