When starting the JBoss server with a deployed ear which has on the jboss-app.xml a security-domain, I always have an error on deploy, with a NameNotFoundException: jaas is not bound.
However, when re-deploying the same ear after the server is initialized, the deploy runs fine.
My guess is that for some reason the ejb deployer service is being run before the security service...
The same ear can be deployed on JBoss 4.2.2 without problems.