Both jars should live in client/ and lib/ folder.
JBAS-2073 Remove xalan.jar and serializer.jar from ./lib/endorsed