Authorise a JAAS session by NT Group?

Is i开发者_StackOverflowt possible to authorise JAAS sessions based on membership of NT Groups?

---

It looks like it is user level only. http://download.oracle.com/javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html

http://download.oracle.com/javase/6/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/LdapLoginModule.html

(ie administration is via a policy file - not possible to change authorisation based on NT Group.)