Customer wants to use LdapExtLoginModule as a login module for JConsole
instead of the traditional role/password, role/access files.

"Configuring the proper JBoss classes into the ext classloader seems to be a
bit of a challenge. So, just to test the concept I copied the LdapExtLoginModule
to a new package and deployed just that (and the minimal dependencies
which were also moved to a different package) to the JDK's ext directory. We
are running JDK 5, so for now the build-in JDK LdapLoginModule is not an
option. In this scenario, users are properly authenticated, but obviously we
don't want to manage this code ourselves. So, I am wondering if there is either
a manageable set of dependencies we could configure as extlibs, or if a more
minimal standalone realm could be created that would just delegate to another
JMX (or JNDI)-based realm. This minimal realm could then be deployed in the
ext classpath."

The customer would prefer not to manage the package containing LdapExtLoginModule
and the corresponding dependencies and to be provided this, or alternatively,
create a minimal realm that can delegate via JMX or JNDI to another realm.