Role Principals
Status: Beta
Brought to you by:
yanker
jaas-pam should also support Role Principals (from /etc/group), so web.xml container based security would work.
https://tomcat.apache.org/tomcat-7.0-doc/realm-howto.html#JAASRealm