I just worked through an issue where my development JBoss server started directing EJB calls to my local JBoss server.
It turns out I accidentally copied jndi.properties from our client app into a JAR on my local JBoss server. The new jndi.properties pointed at the development JBoss server and apparently caused my local EJBs to register with JNDI on the development server.
Is there any way to make the JNDI server read-only to external clients? Or at least ignore jndi.properties found outside the conf directory?