<security-constraint>
   <display-name>Левое имя</display-name>
   <web-resource-collection>
     <web-resource-name>еще одно левое имя</web-resource-name>
     <url-pattern>*.jsp</url-pattern>
     <url-pattern>*.html</url-pattern>
     <url-pattern>*.xml</url-pattern>
     <http-method>GET</http-method>
     <http-method>POST</http-method>
   </web-resource-collection>
   <auth-constraint>
     <role-name>тут роль АДа</role-name>
   </auth-constraint>
 </security-constraint>
 <login-config>
   <auth-method>CLIENT-CERT</auth-method>

 </login-config>
</security-constraint> 

<auth-constraint>
   <role-name>MyLdapRole</role-name>
</auth-constraint>

    <security-role>
        <role-name>manager</role-name>
    </security-role>

<url-pattern>/*.jsp</url-pattern>

<login-config>
<auth-method>BASIC</auth-method>
</login-config>

request.getUserPrincipal()

request.IsUserInRole("любая роль")

<security-constraint>
<display-name>Example Security Constraint</display-name>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>ролька</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
</security-constraint>

<security-role>
<role-name>ролька</role-name>
</security-role>

<Realm className="org.apache.catalina.realm.LockOutRealm" cacheRemovalWarningTime="4000" cacheSize="1100" lockOutTime="6800" failureCount="10">

<Realm className="org.apache.catalina.realm.JNDIRealm" userSubtree="true" userSearch="(sAMAccountName={0})" userRoleName="memberOf" 
userBase="OU=кусок,DC=кусок" referrals="follow" connectionURL="лдап://хостлдапа:порт" connectionName="служебный пользователь" connectionPassword="его пароль" />

</Realm>