Is your server really on localhost?
I have found the problem with a friend:
* first: use the Jboss server with Full options
[ with the default server, RMI is not launched!!)
* second: on the client side, you have to run the client with
the options: -Djava.security.manager -Djava.security.policy=yourfile.policy
And it works!!!