Access Manager has a configuration file called AMConfig.properties under $glassfish/domains/domain1/config directory. The debug files for AM are referenced by a property "com.iplanet.services.debug.directory' in AMConfig.properties, you would see any failures under this directory (amWebServicesSecurity debug file). Can you check here for failures or you can send back here
[Message sent by forum member 'mallas' (mallas)]
http://forums.java.net/jive/thread.jspa?messageID=328711