I need to design a web service layer on top of an existing application. Really, I'm most interested in WS-Security and JMS support, possibly JTA.
What is the best server to use for this? Would it be a wise decision to go with lightweight Tomcat (which I'm experienced with), or would I be better off with a server that implements the full J2EE stack, such as JBoss, Weblogic, or even Glassfish?