Location for login-config.xml is wrong. It should be under $JBOSS_HOME/server/default/conf. Also it is unclear what you are attempting to do. It appears that you are using security in your web application. If that is the case, where is your authentication information stored ? In a property file or externally in a database etc ? If in a property file, then from the exception it appears that UsersRolesLoginModule is unable to find it. On the contrary if you inspect your login-config.xml you appear to have a custom login module, which is not called. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4117414#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...