Sun Java System Web Server 6.1 SP10 Programmer’s Guide
http://java.sun.com/docs/books/tutorial/security/tour2/index.html