At this point, we need some more information: 1) Which version of JBoss are you using? 2) Are you using EJB3 or EJB2.x? 3) Is there any security restrictions on those EJBs? If yes, then which roles are allowed to access the methods? 4) The TRACE level logs of JBoss security package which you will find in server.log , starting from the point where you called lc.login(). See Q4 at http://wiki.jboss.org/wiki/Wiki.jsp?page=SecurityFAQ for enabling TRACE level logs. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4093019#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...