Tim,
Could you please have a look at MessageConsumerTest.testDurableSubscriptionOnlyOneConsumer()?
It fails.
To me, it seems that a duplicate durable subscription should be detected in ServerSessionDelegate.createConsumerDelegate() but when I added the test there, I noticed that durable.close() doesn't clean up the map properly , so I stopped there.