Hi, I don't know whether JBoss 5 still supports EJB 1.1, but I hope so ;-).An upgrade to EJB 3.0 will be quite a bunch of work if you use Entity Beans. Did you check the logs of the security layer (see sticky post "FAQ" in this forum, question 4)? Maybe there is some config error. Also, please post the snippet of "login-config.xml" (or any other config file which you use to plug in your login module), and the relevant code snippets of the login module. Do you have security constraints declared in your web.xml? Best regards Wolfgang View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4264610#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...