Thx Esteban! I changed components.xml like this: <security:identity authenticate-method="#{nilAuthenticator.authenticate}"/> The guvnor console can login with guest, but my app's error still exists: *Server returned HTTP response code: 401 for URL: GUVNOR_SERVICE_URL* And use this URL to browser, it show this: http://drools.46999.n3.nabble.com/file/n3300912/guvnor_anth.png Click LOGIN(登录) button, it is passed(500 error), and click CANCEL(取消), it show 401 error. -- View this message in context: http://drools.46999.n3.nabble.com/How-can-I-disable-the-Authentication-Fi... Sent from the Drools: User forum mailing list archive at Nabble.com.