<security-constraint>
        <display-name>sun-web</display-name>
        <web-resource-collection>
            <web-resource-name>ProtectedArea</web-resource-name>
            <url-pattern>/home</url-pattern>
            <url-pattern>*.jsp</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>*</role-name>
        </auth-constraint>
        </security-constraint>
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>sun_web_realm</realm-name>
        <form-login-config>
            <form-login-page>/WEB-INF/jsp/login.jsp</form-login-page>
            <form-error-page>/WEB-INF/jsp/error.jsp</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <role-name>*</role-name>
    </security-role>

tomcat-users.xml
******************



<tomcat-users>
<user username="CN=XXX Repository, OU=Unknown, O=XXX Software Ltd., L=nhead, ST=UK, C=GB" roles="repository" password="null"/>
<user username="CN=XXX Repository Client, OU=Unknown, O=XXX Software Ltd., L=head, ST=UK, C=GB" roles="repoclient" password="null"/>
</tomcat-users>

<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
          connectionURL="ldaps://xxx.xx.xx:636"
          alternateURL="ldaps://xxx.xx.xx:636"
          curUserPattern="%s@corp"
          connectionName="CN=xxxxxxx LDAP,OU=Service Accounts,OU=XXX,DC=corp,DC=local"
          connectionPassword="xxxx"
          referrals="follow"
          userBase="DC=corp,DC=local"
          userSearch="(sAMAccountName={0})"
          userSubtree="true"
          roleBase="DC=corp,DC=local"
          roleName="name"
          roleSubtree="true"
          roleSearch="(member={0})" resourceName="sun_web_realm"
    />