I don't think the exception you are getting:
ClassNotFoundException: com/sun/enterprise/security/jmac/callback/ContainerCallbackHandler
is in any way related to alternate docroots.
To narrow down the issue, I would remove your alternate docroot configuration, see if you can reproduce the exception (it is very likely that you will), and take it from there.
Jan
[Message sent by forum member 'jluehe' (jluehe)]
http://forums.java.net/jive/thread.jspa?messageID=253474