If the user and password are supplied on the getConnection call by a client that runs outside the WebSphere Application Server - Express process, the connection factory or data source that is looked up to obtain connections must not have a component managed authentication alias defined on it.
Make sure the connection factory or data source does not have a component managed authentication alias defined on it. See Configure Java 2 Connector connection factories for more information.