Thanks for tip Marina,
The problem was that NB had decided to NOT include sun-cmp-mappings.xml in the deployed jar file, so GF was (silently) doing its best to guess the mappings, and got it wrong. Fixing NB's private.properties file to not exclude it got it working.
m.
[Message sent by forum member 'matterbury' (matterbury)]
http://forums.java.net/jive/thread.jspa?messageID=340965