Is the security-manager enabled in your server?