Hi, one detail: your "jboss-web.xml" declares the wrong ID: <!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 2.4//EN" "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd"> should be: <!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 5.0//EN" "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd" As I fear that this does not change anything: did you try to activate logging of the security layer (see security FAQ post in this forum, question 4)? Maybe this provides you with a more detailed error, e.g. about invalid config. Hope this helps Wolfgang View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4206485#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...