Hi >I solved the problem with sun.misc (was an error in directive). But now I >had a strange error. When performing form login via JDBC and trying to >read out AUTHORIZATION Header the string is NULL. Why? Does form login not >write Authorization in HTTP Header? Form-based logon uses a POST method to communicate logon information, not the Authorization header. That header is only used if you are using Basic logon. Things will remain that way until browsers and servers define other methods of logon. Twylite