Hi
I am using EJB client inside of Jboss to access another JBOSS instance(EJB server). The EJB server uses hibernate 2.1.8 to for database operation. One of my object 'User' has a set of 'email'. When the User is returned too client, I got the "no security manager: RMI class loader disabled". See below for the stack trace. When I use the EJB client in a stanldalone application(not inside of jboss), I do not have this issue.

Here is the stack trace.
17:36:36,818 INFO [STDOUT] java.lang.reflect.UndeclaredThrowableException
17:36:36,819 INFO [STDOUT] at $Proxy53.createUser(Unknown Source)
17:36:36,819 INFO [STDOUT] at com.redzero.uap.UAPServicePortal.createServiceUser(UAPServicePortal.java:325)
17:36:36,820 INFO [STDOUT] at com.redzero.uap.UAPServicePortal.createUChatUser(UAPServicePortal.java:293)
17:36:36,821 INFO [STDOUT] at com.redzero.uap.RegistrationRequestProcessor.createSPUser(RegistrationRequestProcessor.java:307)
17:36:36,821 INFO [STDOUT] at com.redzero.uap.RegistrationRequestProcessor.registerSPUser(RegistrationRequestProcessor.java:405)
17:36:36,822 INFO [STDOUT] at com.redzero.uap.RegistrationRequestProcessor.registerNewUser(RegistrationRequestProcessor.java:166)
17:36:36,823 INFO [STDOUT] at com.redzero.uap.RegistrationRequestProcessor.registerNewUser(RegistrationRequestProcessor.java:122)
17:36:36,823 INFO [STDOUT] at com.redzero.uap.UAPServlet.doGet(UAPServlet.java:115)
17:36:36,824 INFO [STDOUT] at com.redzero.uap.UAPServlet.doPost(UAPServlet.java:87)
17:36:36,824 INFO [STDOUT] at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
17:36:36,825 INFO [STDOUT] at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
....
17:36:36,844 INFO [STDOUT] Caused by: java.lang.ClassNotFoundException: net.sf.hibernate.collection.Set (no security manager: RMI class loader disabled)
17:36:36,845 INFO [STDOUT] at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:371)
17:36:36,845 INFO [STDOUT] at sun.rmi.server.LoaderHandler.loadClass(LoaderHandler.java:165)
17:36:36,846 INFO [STDOUT] at java.rmi.server.RMIClassLoader$2.loadClass(RMIClassLoader.java:631)
17:36:36,847 INFO [STDOUT] at org.jboss.system.JBossRMIClassLoader.loadClass(JBossRMIClassLoader.java:79)
17:36:36,847 INFO [STDOUT] at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:257)
17:36:36,848 INFO [STDOUT] at sun.rmi.server.MarshalInputStream.resolveClass(MarshalInputStream.java:200)
17:36:36,848 INFO [STDOUT] at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1513)
17:36:36,849 INFO [STDOUT] at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1435)
17:36:36,849 INFO [STDOUT] at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1626)
17:36:36,850 INFO [STDOUT] at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1274)
17:36:36,851 INFO [STDOUT] at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1845)
17:36:36,851 INFO [STDOUT] at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1769)
17:36:36,852 INFO [STDOUT] at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1646)
17:36:36,852 INFO [STDOUT] at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1274)
17:36:36,853 INFO [STDOUT] at java.io.ObjectInputStream.readObject(ObjectInputStream.java:324)
17:36:36,854 INFO [STDOUT] at java.rmi.MarshalledObject.get(MarshalledObject.java:135)
17:36:36,854 INFO [STDOUT] at org.jboss.invocation.jrmp.interfaces.JRMPInvokerProxy.invoke(JRMPInvokerProxy.java:136)
17:36:36,855 INFO [STDOUT] at org.jboss.invocation.InvokerInterceptor.invokeInvoker(InvokerInterceptor.java:163)
17:36:36,855 INFO [STDOUT] at org.jboss.invocation.InvokerInterceptor.invoke(InvokerInterceptor.java:103)
17:36:36,856 INFO [STDOUT] at org.jboss.proxy.TransactionInterceptor.invoke(TransactionInterceptor.java:46)
17:36:36,856 INFO [STDOUT] at org.jboss.proxy.SecurityInterceptor.invoke(SecurityInterceptor.java:55)
17:36:36,857 INFO [STDOUT] at org.jboss.proxy.ejb.StatelessSessionInterceptor.invoke(StatelessSessionInterceptor.java:100)
17:36:36,858 INFO [STDOUT] at org.jboss.proxy.ClientContainer.invoke(ClientContainer.java:86)
17:36:36,858 INFO [STDOUT] ... 42 more

Help is appreciated.

-jason