Summary

In this chapter, we discussed security realms and how they are used. We also covered the most common types of security realms that are packaged with Tomcat, including their configuration and use. In addition, through realm configuration examples, we demonstrated Tomcat container authentication, specifically BASIC and FORM-based authentication. Finally, we demonstrated how to access the information about authenticated user within your Servlet or JSP code. In the next chapter, we cover securing a Web application using the Secure Sockets Layer (SSL).