After some tweaking, I managed to get the Seam security stuff working with GlassFish. You can download the sample project from http://blogs.sun.com/warren/.
The major changes:
# Your web.xml needs a ejb-ref definition to the new Authenticator bean
# Seam security requires a drools securtyRules.drl config file
# You need to include the associated drools libraries
# components.xml needs to declare the location of the drools securtyRules.drl file
