Your stack looks wrong.
Instead of:
com.sap.security.core.server.jaas.CreateTicketLoginModule SUFFICIENT
com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule REQUISITE
com.sap.security.core.server.jaas.CreateTicketLoginModule REQUISITE
I would expect to see:
com.sap.security.core.server.jaas.CreateTicketLoginModule SUFFICIENT
com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule REQUISITE
com.sap.security.core.server.jaas.CreateTicketLoginModule OPTIONAL
Thanks
Tim