Commenting out auth-method in web.xml does not lead to error

[kpalania]

..while it does lead to errors (as it SHOULD) in the other application deployed to the same JBoss container.

Essentially, the auth-method I specify is not getting picked up for one of the applications. I can even remove the entire element (auth-method) but still the authentication goes through except that it picks up FORM based by default.

Any thoughts?

[kpalania]

Subject was cut out.. I meant, it leads to errors in one application but not in the other..

[kpalania]

ok, i found the problem. the context.xml file had an entry (a Tomcat valve definition) that superceded the entry in web.xml :(