The dtd referred to in login-config.xml is not available at http://www.jboss.org/j2ee/dtd/security_config.dtdThis dtd is named in jboss-3.0.6\server\default\conf\login-config.xmlThis may be an issue for the webmaster, but there is no contact details on the JBoss website.