In my app, I've declared a security-domain (<security-domain>java:/jaas/MyAppRealm</security-domain>) in my jboss-web.xml to perform user authentication via a web login form. I've declared the same security-domain in jboss.xml to restrict calls to my EJB methods to some specific roles. I'm using JBoss 3.0.2 with Jetty bundle.
Question: if my web container and my EJB container were on different machines each other, what should I declare in <security-domain> tags of jboss-web.xml and jboss.xml? I'm asking this because JNDI names that start with "java:" are visible only in the same VM.