Are you using FORM or BASIC web authentication? Session.invalidate() only works with FORM login.
When deleting users from the database, you'll need to flush the authentication cache. Search the forum for details on that. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3836224#3836224 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3836224 ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user