Hi Bdaw, thanks for your reply... But still i'm getting confusion... if my attribute my-pwd is used only for updating the existed password, then from where jboss is getting the credentials(because i'm using ldap, so from ldap only jboss checks the password...?) to chek the valid user or not....? can you clear it again.. Regards, J... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4177794#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...