I'm experiencing something strange and wondering if anybody has any ideas what the problem could be. I have two ejb modules (say module-a and module-b). All ejbs in module-a are protected and unauthenticatedIdentity of the related application-policy has been set to a valid user. EJBs under module-b are not protected and there is a timer ejb in this module that invokes another ejb from module-a. The strange thing is that the Timeout method fails to access the protected ejb always for the first attempt due to an authentication failure, but the second attempt (timer service waits for few milliseconds and tries again) works fine! Any ideas? We are using EJB 3 with JBoss [Trinity] 4.2.2.GA (build: SVNTag=JBoss_4_2_2_GA date=200710221139) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4182965#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...