Glad that it works. Point to note however, from a code design perspective you are assuming that your loginmodule is on the same machine/process as jboss-tomcat. For arguments sake say loginmodule was a proxy to another loginmodule on another platform. You totally lose portability. That is not C.O.O.L. ! Bad PolicyContext bad PolicyContext If PolicyContext was a cat, I wouldn't feed it. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957941#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...