No security-constraint as they were using NTLM:
<filter>
<filter-name>NtlmHttpFilter</filter-name>
<filter-class>jcifs.http.NtlmHttpFilter</filter-class>
<init-param>
<param-name>jcifs.netbios.wins</param-name>
<param-value>10.30.2.51</param-value>
</init-param>
<init-param>
<param-name>jcifs.http.domainController</param-name>
<param-value>wiki.telesoft.com</param-value>
</init-param>
<init-param>
<param-name>jcifs.resolveOrder</param-name>
<param-value>DNS</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>NtlmHttpFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
I tried commenting it out to no avail.