Darran Lofthouse [https://community.jboss.org/people/dlofthouse] created the discussion "Re: remote ejb client username is encrypted at the server(JBOSS7.1 CR1)" To view the discussion, visit: https://community.jboss.org/message/828826#828826 -------------------------------------------------------------- The local mechanism needs to be attempted so that we know it will not work when it fails and then we can move onto the next authentication mechanism in the list. If a client is always going to be remote from the server then the SASL_DISALLOWED_MECHANISMS is the correct way to disable this for that client, if all clients will be remote from the server remove the <local /> element from the ApplicationRealm and it will be disabled for all clients. -------------------------------------------------------------- Reply to this message by going to Community [https://community.jboss.org/message/828826#828826] Start a new discussion in JBoss AS 7 Development at Community [https://community.jboss.org/choose-container!input.jspa?contentType=1&...]