There is a class missing that is triggering rmi dynamic class loading, and this fails since there is not configured security manager.
Thanks for the reply. I must have damaged my 4.0.0 installation somehow. I DLed the 4.0.1RC2 .zip and installed it. When I copy the .ear file from the 4.0.0 deployment directory to the 4.0.1RC2 deployment directory, the pecular bahavior does not occur. That is, whatever was missing under 4.0.0 is present under 4.0.1RC2 using the same .ear.