I had perm gen issues on 5.5 so I upgraded to 5.6 now I get authentication denied =============== session-guest-9 INFO 05-02 09:42:36,249 (DemoAuthenticator.java:authenticate:54) Demo login for user (null) failed: unsupported username/credential. WARN 05-02 09:42:36,265 (AuthorizationHeaderChecker.java:loginByHeader:65) Unable to authenticate for rest api: null WARN 05-02 09:42:42,166 (RulesRepositoryManager.java:getRulesRepository:70) Creating RulesRepository with default username. In my ChangeSet.xml <resource source='http://vlslcitcat01:8082/guvnor/org.drools.guvnor.Guvnor/package/org.numbercompare/LATEST' type='PKG' basicAuthentication="enabled" username="admin" password="admin" /> If I access my 'http://vlslcitcat01:8082/guvnor/org.drools.guvnor.Guvnor/package/org.numbercompare/LATEST with no userid /password and admin/admin it works I am not sure why null is being picked up? I am not sure why its picking up null? similar changeset worked great on 5.5.0 Also tried commenting out the following lines in beans.xml with no luck. also commented out xmlns:security="urn:java:org.jboss.seam.security" xmlns:guvnorSecurity="urn:java:org.drools.guvnor.server.security" Downloaded the guvnor war from http://downloads.jboss.org/drools/release/5.6.0.Final/ -- View this message in context: http://drools.46999.n3.nabble.com/5-6-0-Unable-to-authenticate-for-rest-a... Sent from the Drools: User forum mailing list archive at Nabble.com.