Dear all, I would appreciate it if anyone teach me how to enable digest authentication in JBoss 5.1.0 GA? Though I tried to execute digest authentication in JBoss 5.1.0 GA including the following web.xml, "Bad password for username=yagi" was displayed on a JBoss console enabling "DEBUG". Next, after trying to input the username and the hashed password on web browser, the authentication has passed. I think basic authentication has operated in this JBoss, not digest authentication. web.xml: <web-app> <login-config> <auth-method>DIGEST</auth-method> <realm-name>SampleRealm</realm-name> </login-config> <security-role> <role-name>AuthorizedUsers</role-name> </security-role> <security-constraint> <web-resource-collection> <web-resource-name>restricted contents</web-resource-name> <url-pattern>/HelloServlet/*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>AuthorizedUsers</role-name> </auth-constraint> </security-constraint> </web-app> Regards, Yagishita