可能回答晚了，但是无论如何您都在web.xml中缺少角色，也不必提及领域，因此您的web.xml应该如下所示
<security-constraint> <web-resource-collection> <web-resource-name>Admin</web-resource-name> <url-pattern>/admin/*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>admin</role-name> </auth-constraint> </security-constraint> <login-config> <auth-method>BASIC</auth-method> <!-- Please note following line .. its commented --> <!-- <realm-name>Admin</realm-name> --> </login-config> <!-- Following section was missing --> <security-role> <role-name>admin</role-name></security-role>
