Could you please post a link. I do not know about this example and where to find it.
Also: Your original posting leaves a lot of questions open. You are posting a web.xml but do neither mention a sun-web.xml nor which kind of realm you are using and how this realm is set up. Maybe this information can be found on the page you mention - but his only underlines the necessity for a link to this page.
What exactly do you mean with "security is not working though"? Is your request always getting rejected? Is it always getting approved? Do you see any kind of exceptions in the server.log?
--
Wolfram
[Message sent by forum member 'writtmeyer' (writtmeyer)]
http://forums.java.net/jive/thread.jspa?messageID=275078