Professional Apache Tomcat from Wrox Press ISBN 1-861007-73-6

This book covers the architecture, installation and configuration of 
Tomcat in detail. It covers Tomcat 3.x, 4.0.x as well as 4.1.x. The book 
also provides in depth coverage of configuration with Apache, IIS server 
in addition to details of its use as standalone server.

The developers will find chapters on Ant, JDBC and Log4j especially useful.

Tomcat security  has special focus in this book. The chapter on security 
provides excellent information on configuring Tomcat for transport layer 
security, application layer security, Realm based management, users, 
groups and lots more. Check it out.

http://www.wrox.com/books/1861007736.htm