A JAAS module can be set to optional (known as control flag) in a config file so that even it fails the whole login can succeed if another module succeeds. However, if the module cannot be loaded at all (ClassNotFoundException) or some methods are missing (NoSuchMethodException), the whole login process terminates intermediately regardless of the module control flag. This is counter-intuitive and could prevent flexible application deployment.