<login-module code="org.jboss.security.auth.spi.DatabaseServerLoginModule" flag="required">
  <module-option name="dsJndiName" value="java:jboss/datasources/blablabla"/>
  <module-option name="principalsQuery"
    value="select PWD from DB_USER where USER_NAME=? and ENABLED=1"/> <!--или что-то подобное-->
  <module-option name="rolesQuery"
    value="select r.ROLE_NAME, 'Roles'
    from DB_ROLE r
    inner join DB_MEMBERSHIP m on r.ROLE_ID=m.ROLE_ID
    inner join DB_USER u on m.USER_ID=u.USER_ID
    where u.USER_NAME=?"/>
  <module-option name="hashAlgorithm" value="SHA-1"/>
  <module-option name="hashEncoding" value="base64"/>
</login-module>