> From: Michela, Andrew J (LABOR) [mailto:andrew.mich...@labor.ny.gov] > Subject: RE: Basic Authentication Valve not hitting on Tomcat7.0.20
> I have that in the server.xml(see below) still no luck. > <security-constraint> ??? Please read the servlet spec and the Tomcat doc, and show us where there's even a hint about putting <security-constraint> in server.xml. Security configuration goes into each webapp's WEB-INF/web.xml, as clearly stated in the docs. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.