Sample web.xml

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN'
 'http://java.sun.com/j2ee/dtds/web-app_2_2.dtd'>

<web-app>
  <display-name>WebTier</display-name>
  <description>no description</description>
  <context-param>
    <param-name>weblogic.httpd.servlet.reloadCheckSecs</param-name>
    <param-value>10</param-value>
  </context-param>
  <context-param>
    <param-name>weblogic.jsp.compileCommand</param-name>
    <param-value>/jdk117/bin/javac.exe</param-value>
  </context-param>
  <servlet>
    <servlet-name>webTierEntryPoint</servlet-name>
    <display-name>centralJsp</display-name>
    <description>no description</description>
    <jsp-file>Main.jsp</jsp-file>
  </servlet>
  <servlet-mapping>
    <servlet-name>webTierEntryPoint</servlet-name>
    <url-pattern>/control/*</url-pattern>
  </servlet-mapping>
  <session-config>
    <session-timeout>54</session-timeout>
  </session-config>
  <welcome-file-list>
    <welcome-file>/index.html</welcome-file>
  </welcome-file-list>
  <error-page>
    <exception-type>java.lang.Exception</exception-type>
    <location>/errorpage.jsp</location>
  </error-page>
  <resource-ref>
    <description>no description</description>
    <res-ref-name>jdbc/EstoreDataSource</res-ref-name>
    <res-type>javax.sql.DataSource</res-type>
    <res-auth>Container</res-auth>
  </resource-ref>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>MySecureBit1</web-resource-name>
      <description>no description</description>
      <url-pattern>/control/signin</url-pattern>
      <http-method>POST</http-method>
      <http-method>GET</http-method>
    </web-resource-collection>
    <auth-constraint>
      <description>no description</description>
      <role-name>gold_customer</role-name>
      <role-name>customer</role-name>
    </auth-constraint>
    <user-data-constraint>
      <description>no description</description>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>MySecureBit0</web-resource-name>
      <description>no description</description>
      <url-pattern>/control/placeorder</url-pattern>
      <http-method>POST</http-method>
      <http-method>GET</http-method>
    </web-resource-collection>
    <auth-constraint>
      <description>no description</description>
      <role-name>gold_customer</role-name>
      <role-name>customer</role-name>
    </auth-constraint>
    <user-data-constraint>
      <description>no description</description>
      <transport-guarantee>NONE</transport-guarantee>
    </user-data-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>default</realm-name>
    <form-login-config>
      <form-login-page>/control/formbasedlogin</form-login-page>
      <form-error-page>/control/formbasedloginerror</form-error-page>
    </form-login-config>
  </login-config>
  <security-role>
    <description>the customer role</description>
    <role-name>customer</role-name>
  </security-role>
  <security-role>
    <description>the gold customer role</description>
    <role-name>gold_customer</role-name>
  </security-role>
  <env-entry>
    <description>no description</description>
    <env-entry-name>useCatalogEJB</env-entry-name>
    <env-entry-value>false</env-entry-value>
    <env-entry-type>java.lang.String</env-entry-type>
  </env-entry>
  <env-entry>
    <description>no description</description>
    <env-entry-name>securityAdapterClassName</env-entry-name>
    <env-entry-value>com.bea.estore.util.WLSecurityAdapter</env-entry-value>
    <env-entry-type>java.lang.String</env-entry-type>
  </env-entry>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/catalog</ejb-ref-name>
    <ejb-ref-type>Session</ejb-ref-type>
    <home>com.sun.estore.catalog.ejb.CatalogHome</home>
    <remote>com.sun.estore.catalog.ejb.Catalog</remote>
  </ejb-ref>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/cart</ejb-ref-name>
    <ejb-ref-type>Session</ejb-ref-type>
    <home>com.sun.estore.cart.ejb.ShoppingCartHome</home>
    <remote>com.sun.estore.cart.ejb.ShoppingCart</remote>
  </ejb-ref>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/account</ejb-ref-name>
    <ejb-ref-type>Entity</ejb-ref-type>
    <home>com.sun.estore.account.ejb.AccountHome</home>
    <remote>com.sun.estore.account.ejb.Account</remote>
  </ejb-ref>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/order</ejb-ref-name>
    <ejb-ref-type>Entity</ejb-ref-type>
    <home>com.sun.estore.order.ejb.OrderHome</home>
    <remote>com.sun.estore.order.ejb.Order</remote>
  </ejb-ref>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/scc</ejb-ref-name>
    <ejb-ref-type>Session</ejb-ref-type>
    <home>com.sun.estore.control.ejb.ShoppingClientControllerHome</home>
    <remote>com.sun.estore.control.ejb.ShoppingClientController</remote>
  </ejb-ref>
  <ejb-ref>
    <description>no description</description>
    <ejb-ref-name>ejb/inventory</ejb-ref-name>
    <ejb-ref-type>Session</ejb-ref-type>
    <home>com.sun.estore.inventory.ejb.InventoryHome</home>
    <remote>com.sun.estore.inventory.ejb.Inventory</remote>
  </ejb-ref>
</web-app>