In the topic:
http://www.jboss.org/modules/bb/index.html?module=bb&op=viewtopic&t=forums/ mentioned that a fix in the security mgr service should preload the auth.conf file, to avoid a race condition when multiple threads tried to login.
Does anybody know if this fix has been included in the 2.4.6 release?
Just got mail from sourceforge, it seems that Jboss 2.4.7 is out and that this bug has been fixed!
Thanks to Jboss coders!