I forgot to mention that the interactive login works (using ldap). Interactive clients get authenticated when they connect.
Well, since I removed the <load-on-startup> from the web.xml in the WAR it seams to work.
I have glue in a WAR file that is applied to an EAR. It looks like JBoss wants a principal to publish the glue servlet on startup, if a <securty-domain> is specified in jboss.xml.
Glue is now published, when the first user connects via soap and was authenticated successfully.
Is this how it works or is there a different way?