an additional trace which makes me a little bit confused: | 2008-09-04 20:25:38,531 TRACE [org.jboss.security.plugins.JaasSecurityManager.mySecurityDomain] Begin isValid, principal:, cache info: org.jboss.security.plugins.JaasSecurityManager$DomainInfo@18d0ff8[Subject(33216582).principals=org.jboss.security.SimplePrincipal@1809155(correctPrincipal)org.jboss.security.SimpleGroup@6901622(Roles(correctRoles)),credential.class=java.lang.String(a)22591049,expirationTime=1220552959218] View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4174409#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...