I have Tomcat 5.0 on my PC and I am trying to learn this product. I want to run this in security. So when I type a URL of a HTML document in webapps it should prompt me for my user id/password. I tried to put -security in Tomcat Monitor and restart it still does not prompt me for any login etc. I want to set it up as basic security model. I have all my HTML pages in webapps really. Do I need to change server.xml or else where for it to work.