before deploy \"myapp.war\" on glassfish 4 i have to
jdbc-connection-pool does no
finally i found a solution:
database create/upgrade: in ServletContextListener.contextInitialized i use compile-time-generated ddl script to create database if not exists, or use liquibase to upgrade database if exists. no more persistence.xml usage for database generation.
authentication realm deploy: i don't deploy or create any container-specific realm. in ServletContextListener.contextInitialized i register a custom JASPIC implementation, which is itself a JAAS login module wrapper. thanks to @ArjanTijms for this aricle and this answer