anonymous wrote : So aftre both these calls, server itself will create a jms message for audit and it will put in a queue and an MDB will pick the message and for processign this message MDB will try to call the secured EJB JMS/MDB is asynchronous....JMS/MDB systems are meant for distributed enterprise messaging and they are asynchoronous You are mis-using messaging for auditing... So there is your problem Asynchronous nature of JMS/MDB.......Correct your flow...Also why use JMS/MDB for auditing ? Seems odd...Can you use a simple POJO ? May be you can have your flow as follows :- anonymous wrote : Java Client logs in --> calls jaas module --> calls secured ejb --> calls unsecured ejb --> calls a jms client --> break here, call POJO for auditing & return to client View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4175189#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...