I can see that there is one successful login for "wayne".
Can you attach the domains/domain1/generated/policy/<your ejb>/granted.policy file.
Also did you have a @DeclareRoles annotation, i can't see that in what you pasted so far.
Does there exist a group called "noone" ?. Does that group get assigned to the authenticated user via your custom JDBC Realm or did you use assign-groups property in the JDBC Realm defintion.
If your webservice is an EJB WebService the method permissions are imposed irrespective of the Metro version and so if there was something wrong then first of all it should not allow the invocation of the method sayHello() since it only allows someone in role "noone".
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=336047