Class org.jboss.security.auth.callback.SecurityAssociationHandler from the 3.2.2 src gz fileLine 129 method getPassword()currently is: m.invoke(credential, args);should be: password = (char[])m.invoke(credential, args);
Its been updated.