BASIC authentication fails in authorization step. (i.e. kermit has no roles)

tdiesler@TDDELL /cygdrive/d/projects/jboss-head/testsuite
$ ant -Dtest=org.jboss.test.webservice.jbws309.JBWS309TestCase one-test

one-test:
[junit] Running org.jboss.test.webservice.jbws309.JBWS309TestCase
[junit] Tests run: 1, Failures: 0, Errors: 1, Time elapsed: 6.328 sec
[junit] Test org.jboss.test.webservice.jbws309.JBWS309TestCase FAILED

2005-12-10 21:58:44,265 TRACE [org.jboss.security.auth.spi.UsersRolesLoginModule:214] User 'kermit' authenticated, loginOk=true
2005-12-10 21:58:44,265 TRACE [org.jboss.security.auth.spi.UsersRolesLoginModule:195] commit, loginOk=true
2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:589] defaultLogin, lc=javax.security.auth.login.LoginContext@11bee48, subject=Subject(12107172).principals=org.jboss.security.SimplePrincipal@24108225(kermit)org.jboss.security.SimpleGroup@30698528(Roles(members:friend))
2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:726] updateCache, inputSubject=Subject(12107172).principals=org.jboss.security.SimplePrincipal@24108225(kermit)org.jboss.security.SimpleGroup@30698528(Roles(members:friend)), cacheSubject=Subject(11165301).principals=org.jboss.security.SimplePrincipal@24108225(kermit)org.jboss.security.SimpleGroup@30698528(Roles(members:friend))
2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:775] Inserted cache info: org.jboss.security.plugins.JaasSecurityManager$DomainInfo@11f5ff9[Subject(11165301).principals=org.jboss.security.SimplePrincipal@24108225(kermit)org.jboss.security.SimpleGroup@30698528(Roles(members:friend)),credential.class=java.lang.String@18019860,expirationTime=1134250119578]
2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:332] End isValid, true
2005-12-10 21:58:44,281 TRACE [org.jboss.security.SecurityAssociation:454] pushSubjectContext, subject=Subject:
Principal: kermit
Principal: Roles(members:friend)
, sc=org.jboss.security.SecurityAssociation$SubjectContext@6a1140

{principal=kermit,subject=26390829}
2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:352] getPrincipal, cache info: org.jboss.security.plugins.JaasSecurityManager$DomainInfo@11f5ff9[Subject(11165301).principals=org.jboss.security.SimplePrincipal@24108225(kermit)org.jboss.security.SimpleGroup@30698528(Roles(members:friend)),credential.class=java.lang.String@18019860,expirationTime=1134250119578]
2005-12-10 21:58:44,281 TRACE [org.jboss.security.SecurityAssociation:260] getSubject, sc=org.jboss.security.SecurityAssociation$SubjectContext@6a1140{principal=kermit,subject=26390829}

2005-12-10 21:58:44,281 TRACE [org.jboss.security.plugins.JaasSecurityManager.JBossWS:462] getUserRoles, subject: Subject:
Principal: kermit
Principal: Roles(members:friend)

2005-12-10 21:58:44,281 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase:701] Authenticated 'kermit' with type 'BASIC'
2005-12-10 21:58:44,281 DEBUG [org.apache.catalina.authenticator.AuthenticatorBase:499] Calling accessControl()
2005-12-10 21:58:44,296 DEBUG [org.apache.catalina.realm.RealmBase:739] Checking roles GenericPrincipal[kermit(friend,)]
2005-12-10 21:58:44,296 DEBUG [org.apache.catalina.realm.RealmBase:744] No roles