It was found that password validation could fail under certain circumstances in earlier versions of JBoss EAP. The cause was found to be that the +PropertiesBasedEJBClientConfiguration+ class treated the password as an expression. As a result, it would attempt to expand any passwords containing the string +$$+. This could result in the passwords differing between the client and the server and, hence, failing validation. A modification has been made to the PropertiesValueResolver so that it no longer attempts to expand password expressions by default. Users can return to earlier behavior by setting the +jboss-ejb-client.expandPasswords+ to +true+ to expand passwords.