I am using Tomcat 3.1 with Apache/Stronghold. I assumed that all the web.xml stuff would not work. Am I right ? or will it still work ? Also, I want to auth against a database. In the book Professional JSP, there is an example of using a security interceptor. But again, will that work if I am using Apache + Tomcat ? >You need to set up the web-app to require authentication. In the >web.xml in the WEB-APP directory you need to add a security-constraint >element and a login-config element. There are examples in the examples >web-app. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]