@Transactional
@EnableTransactionManagement
@TransactionManagement(value = TransactionManagementType.CONTAINER)
@TransactionAttribute(value = TransactionAttributeType.REQUIRED)
@Stateless
@Interceptors(SpringBeanAutowiringInterceptor.class)
public class SecurityServiceBean implements SecurityServiceLocal, SecurityServiceRemote
{
   @RolesAllowed("Security Admin")
   public QueryResults<UserRegistrationQueryResult> find(
     UserRegistrationResultQuery query) throws ApplicationException
   {
     ...
   }

   @PermitAll
   public void submit(
     UserRegistration userRegistration) throws ApplicationException
   {
     ...
   }
}

JBAS014134 EJB Invocation failed on component SecurityServiceBean for method SecurityService.find(...) JBAS013323: Invalid User

<jboss:ejb-jar>
  <assembly-descriptor>
    <s:security>
      <ejb-name>*</ejb-name>
      <s:security-domain>campaigner-policy</s:security-domain>
    </s:security>
  </assembly-descriptor>
</jboss:ejb-jar>

java.naming.factory.initial=org.jboss.naming.remote.client.InitialContextFactory
java.naming.factory.url.pkgs=org.jboss.ejb.client.naming
java.naming.provider.url=http-remoting://localhost:8080
java.naming.security.principal=gary_kephart@mycompany.com
java.naming.security.credentials=password
java.naming.security.authentication=DIGEST-MD5

<security-realm name="CampaignerRealm">
  <authentication>
    <jaas name="campaigner-policy" />
  </authorization>
</security-realm>

<security-domain name="campaigner-policy" cache-type="default">
  <authentication>
    <login-module code="Database" flag="required">
      <module-option name="dsJndiName" value="java:/jdbc/..."/>
      <module-option name="principalsQuery" value="SELECT password FROM users WHERE name=?"/>
      <module-option name="hashAlgorithm" value="MD5"/>
      <module-option name="hashEncoding" value="base64"/>
      <module-option name="rolesQuery" value="SELECT ... FROM ... WHERE ... name=?"/>
    </login-module>
  </authentication>
</security-domain>

<default-security-domain value="campaigner-policy"/>

endpoint.name=client-endpoint
remote.connectionprovider.create.options.org.xnio.Options.SSL_ENABLED=false
remote.connections=default
remote.connection.default.host=localhost
remote.connection.default.port=8080
remote.connection.default.connect.options.org.xnio.Options.SASL_POLICY_NOANONYMOUS=false
remote.connection.default.username=gary.kephart
remote.connection.default.password=password