sorry if the info was provided, and I'm somehow not seeing it, but can you provide any more details
regarding the nature of the exception; for example what type of exception was thrown.
I think the code at line 1011 of EJBSecurityManager.java is
accessControlContextCache.put(new HashSet(principalSet), acc);
and I believe the HashSet construction will throw an exception if the principalSet is null; but at least first glance it seems unlikely that the principalSet will be null since it is acquired by calling Subject.getPrincipals()...
[Message sent by forum member 'monzillo' (ronald.monzillo_at_sun.com)]
http://forums.java.net/jive/thread.jspa?messageID=389528