If MBean server is obtained from JNDI and an JMX operation is invoked using it then the current JAAS objects are destroyed on the thread.
To reproduce use attached file test.jsp and put it into jmx-console.war. Access the page using http://localhost:8080/jmx-console/test.jsp.
It will try to call list operation on JNDIView mbean twice. In first case it succeeds as uses is authenticated in jmx-console domain. But after the successful call the user is no longer authenticated in the domain and the second call will fail.