sorry, for posting this message in 2 threads. 
Hello,

 There is something seriously wrong with Tomcat's Realms for 
authentication, or something is wrong with me. I don't need to login to do 
everything, some things are just viewable by any user, but for some 
resources, I have to login. So, I have this:

<user name="root"  password="root123" roles="admin" />

and I have, in web.xml, my security constraint set as:

.
.
.
 <web-resource-collection>
     <web-resource-name>Registration Administration Tool</web-resource-
name>
     <url-pattern>/registration/admin/*</url-pattern>
  </web-resource-collection>
....


So, when i go to http://localhost:8080/registration/admin/   
it does not throw a login screen.  I tried everything it does not work. It 
ONLY! works, if I have 

.....
<url-pattern>/*</url-pattern>
....

This would mean, all my web applications will be asked for authentication. 
Which is retarded. I just need some resources that uses authentication.  
Does anyone else have a workaround this?. 

Thank you in advance,


Nik