Hi!
GlassFish v3 has apparently changed what is the result of enabling MTOM in a service.
As you correctly point out, the policy declaration is different and if you look even closer, you can see that MTOM is no longer mandatory, but optional:
This causes soapUI to choose not to use MTOM when interacting with the service and thus you see no attachments in soapUI.
When I just tried the client program, shown later in section 10.3, and used a packet sniffer to examine the communication with the web service, then I found that MTOM was indeed enabled.
I will make updates to my study guide when I have time and when I have thought a little about the best way to write about this to cover both GlassFish v2 and v3.
Best wishes!
P.S. The client program seems to have a problem displaying the fetched picture now and then, I will look into this as well (guess I need to brush up my old Swing knowledge.

).