If you want to see that authentication works just comment the authorization stuff in getRoleSet and try it with sth like this instead: anonymous wrote : | Group curGroup = new SimpleGroup("authenticated"); | curGroup.addMember(ntlmIdent); | roleGroup.addMember(curGroup); | I did not made authorization work the way intended neither (but didn´t need it). If I needed it I would read the roles with code from the LdapLoginModule unless there is a solution here.. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3989392#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...