Problem while using REALM Security

[ram gaurav]

Hi

I am using REALM Security Mechanisim for the first time.
I have created the following files :

1. /META-INF/context.xml
And its contents are as follows:

  <?xml version="1.0" encoding="UTF-8"?>
 
<Context>
<Realm className="org.apache.catalina.realm.MemoryRealm"
pathname="/WEB-INF/users.xml" />
</Context>
  

2. /WEB-INF/users.xml
And its contents are as follows:

 <?xml version="1.0" encoding="UTF-8"?>
 
<tomcat-users> 
 
    <role rolename="admin"/>
    <role rolename="members"/>
 
    <user username="ram1" password="ram1" roles="admin"/>
    <user username="ram2" password="ram2" roles="members"/>
    <user username="ram3" password="ram3" roles="members"/>
 
</tomcat-users> 

3. /WEB-INF/web.xml
And its contents are as follows:

 <?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee 
<a href="http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">" target="_blank" rel="nofollow">http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"></a>
 
<!-- Define the roles we want to use in the application -->
<security-role>
<role-name>admin</role-name>
</security-role>
<security-role>
<role-name>members</role-name>
</security-role>
 
<security-constraint>
<display-name>
Security constraint for the /member folder
</display-name>
 
<!-- Define the resource, a /members folder -->
<web-resource-collection>
<web-resource-name>Members Only</web-resource-name>
<url-pattern>/members/*</url-pattern>
</web-resource-collection>
 
<!-- Only administrators and members can access this resource -->
<auth-constraint>
<role-name>admin</role-name>
<role-name>members</role-name>
</auth-constraint>
</security-constraint>
 
<security-constraint>
<display-name>
Security constraint for the /admin folder
</display-name>
 
<!-- Define the resource, a /admin folder -->
<web-resource-collection>
<web-resource-name>Administration</web-resource-name>
<url-pattern>/admin/*</url-pattern>
</web-resource-collection>
 
<!-- Only administrators can access this resource -->
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
</security-constraint>
 
<!-- Use BASIC security -->
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Secure Area</realm-name>
</login-config>
</web-app>
 

I am using TOMCAT 5.x and when i am writting the URL in browser:

http://localhost/RealmTesting/admin/index.jsp

As my resource is in admin folder.

It popup a window and asking me username and password but not accepting even i am entering right credentials.

Can you please tell me where i am goin wrong?

Thanks