Currently the org.jboss.security.* classes reside in both the jboss.jar and jbosssx.jar. The security module depends on the server module for some metadata, invocation proxy stuff and NonSerializableFactory. The metadata stuff is obsolete and should be dropped. The invocation dependency comes from the SRP service and should probably be factored out. The NonSerializableFactory needs to be updated to the org.jboss.util.naming.NonSerializableFactory version.

compile-classes:
[unjar] Expanding: C:\cvs\Releases\patch\jboss-4.0\server\output\lib\jboss-s
ecurity.jar into C:\cvs\Releases\patch\jboss-4.0\security\output\classes
[javac] Compiling 155 source files to C:\cvs\Releases\patch\jboss-4.0\securi
ty\output\classes
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\login\ConfigUtil.java:16: package org.jboss.metadata does not exist
[javac] import org.jboss.metadata.MetaData;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\spi\DeploymentRolesLoginModule.java:11: package org.jboss.metadata does no
t exist
[javac] import org.jboss.metadata.SecurityRoleMetaData;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:23: package org.jboss.invocation does not exist
[javac] import org.jboss.invocation.Invocation;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:24: package org.jboss.invocation does not exist
[javac] import org.jboss.invocation.MarshalledInvocation;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:25: package org.jboss.naming does not exist
[javac] import org.jboss.naming.NonSerializableFactory;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPServiceMBean.java:9: package org.jboss.invocation does not exist
[javac] import org.jboss.invocation.Invocation;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:273: cannot resolve symbol
[javac] symbol : class Invocation
[javac] location: class org.jboss.security.srp.SRPService
[javac] public Object invoke(Invocation invocation) throws Exception
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPServiceMBean.java:130: cannot resolve symbol
[javac] symbol : class Invocation
[javac] location: interface org.jboss.security.srp.SRPServiceMBean
[javac] public Object invoke(Invocation invocation) throws Exception;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPVerifierStoreService.java:15: package org.jboss.naming does not exist
[javac] import org.jboss.naming.NonSerializableFactory;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\SubjectSecurityProxy.java:65: warning: getActiveSubject() in org.jboss.security
.AuthenticationManager has been deprecated
[javac] final Subject subject = subjectSecurityManager.getActiveSubjec
t();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\SubjectSecurityProxy.java:103: warning: getActiveSubject() in org.jboss.securit
y.AuthenticationManager has been deprecated
[javac] final Subject subject = subjectSecurityManager.getActiveSubjec
t();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\login\ConfigUtil.java:59: cannot resolve symbol
[javac] symbol : variable MetaData
[javac] location: class org.jboss.security.auth.login.ConfigUtil
[javac] String className = MetaData.getElementAttribute(module, "code"
);
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\login\ConfigUtil.java:60: cannot resolve symbol
[javac] symbol : variable MetaData
[javac] location: class org.jboss.security.auth.login.ConfigUtil
[javac] String flag = MetaData.getElementAttribute(module, "flag");
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\login\ConfigUtil.java:80: cannot resolve symbol
[javac] symbol : variable MetaData
[javac] location: class org.jboss.security.auth.login.ConfigUtil
[javac] String value = MetaData.getElementContent(opt, "");
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\spi\DeploymentRolesLoginModule.java:104: cannot resolve symbol
[javac] symbol : class SecurityRoleMetaData
[javac] location: class org.jboss.security.auth.spi.DeploymentRolesLoginModu
le
[javac] SecurityRoleMetaData srMetaData = (SecurityRoleMetaData)
it.next();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\auth\spi\DeploymentRolesLoginModule.java:104: cannot resolve symbol
[javac] symbol : class SecurityRoleMetaData
[javac] location: class org.jboss.security.auth.spi.DeploymentRolesLoginModu
le
[javac] SecurityRoleMetaData srMetaData = (SecurityRoleMetaData)
it.next();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\plugins\SecurityDomainContext.java:61: warning: getActiveSubject() in org.jboss
.security.AuthenticationManager has been deprecated
[javac] subject = ((SubjectSecurityManager)securityMgr).getActiveSu
bject();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\propertyeditor\SecurityDomainEditor.java:158: warning: getActiveSubject() in or
g.jboss.security.AuthenticationManager has been deprecated
[javac] return delegate.getActiveSubject();
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:276: cannot resolve symbol
[javac] symbol : class MarshalledInvocation
[javac] location: class org.jboss.security.srp.SRPService
[javac] if (invocation instanceof MarshalledInvocation)
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:278: cannot resolve symbol
[javac] symbol : class MarshalledInvocation
[javac] location: class org.jboss.security.srp.SRPService
[javac] MarshalledInvocation mi = (MarshalledInvocation) invocation
;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:278: cannot resolve symbol
[javac] symbol : class MarshalledInvocation
[javac] location: class org.jboss.security.srp.SRPService
[javac] MarshalledInvocation mi = (MarshalledInvocation) invocation
;
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:317: package org.jboss.naming does not exist
[javac] org.jboss.naming.Util.rebind(ctx, serverJndiName, proxy);
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:336: cannot resolve symbol
[javac] symbol : variable NonSerializableFactory
[javac] location: class org.jboss.security.srp.SRPService
[javac] NonSerializableFactory.rebind(name, cachePolicy, true);
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:346: cannot resolve symbol
[javac] symbol : variable MarshalledInvocation
[javac] location: class org.jboss.security.srp.SRPService
[javac] Long hash = new Long(MarshalledInvocation.calculateHash(met
hod));
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPService.java:358: cannot resolve symbol
[javac] symbol : variable NonSerializableFactory
[javac] location: class org.jboss.security.srp.SRPService
[javac] NonSerializableFactory.unbind(cacheJndiName);
[javac] ^
[javac] C:\cvs\Releases\patch\jboss-4.0\security\src\main\org\jboss\security
\srp\SRPVerifierStoreService.java:100: cannot resolve symbol
[javac] symbol : variable NonSerializableFactory
[javac] location: class org.jboss.security.srp.SRPVerifierStoreService
[javac] NonSerializableFactory.rebind(name, store, true);
[javac] ^
[javac] 22 errors
[javac] 4 warnings

BUILD FAILED
C:\cvs\Releases\patch\jboss-4.0\security\build.xml:184: Compile failed; see the
compiler error output for details.

Total time: 3 seconds
[sstark@sstark security]$