bitti1976 - you should have started a new post instead of appending to a post that is almost a year old. Did you look in the JBossAS directory structure for the user.properties and role.properties files? You already asked about the password encryption question in another post, let's continue that discussion there. The term "principle" refers to the login, and other security-related information, about the person/entity who is logged in. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4163399#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...