i turned up the logging to get TRACE events from org.jboss.web.tomcat.security and i dont see any events coming from the GenericHeaderAuthenticator, which should be echoing to the log file. i double checked the syntax of the Valve tag in my context.xml file and it appears sane. besides deploying the webapp with a context.xml, are there any other steps that need to be done to ensure the Valve gets loaded and registered? i'm running on AS 4.2.3-GA on java 1.5.0 installed on solaris 10 (i386). == stanton View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4213876#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...