I solved it. Turns out, that you mustn't add the security-domain tag to the EJB jboss.xml descriptor. Then it worked for me. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3960823#3960823 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3960823