Nausheen: The auth.conf file is used as part of JASS authentication in JBoss. You don't need to change this if you are not using any type of authentication e.g. BASIC, etc. There is a very good article/example at: http://www.jboss.org/documentation/HTML/ch09.html Read the whole article and you will find it very interesting. Hope this answers your question. Regards, Jamal. P.S. I have a working example of BASIC authentication using JBoss implementation of JASS security model. I will be more than happy to share if any one interested. _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] http://lists.sourceforge.net/lists/listinfo/jboss-user