We have implemented our own usermanager, and everything works as expected, except logging. After logging in using FORM based authentication, we can successfully perform a 'request.getRemoteUser()' call to retrieve the users login information. I would expect that if the server knows the remoteUser variable, it would log it in the default-web-access.log file, but this is not the case. We need to start doing trend analysis on our web server usage, and knowing who is doing what is vital. Anyway to force the logging with FORM based authentication? James Birchfield Ironmax a better way to buy, sell and rent construction equipment 5 Corporate Center 9960 Corporate Campus Drive, Suite 2000 Louisville, KY 40223