Please check that the and <security-constraint> elements are in the right order. The right order is shown in the dtd fragment below: taglib before security-constraint.
<!ELEMENT web-app (icon?, display-name?, description?, distributable?,
context-param*, filter*, filter-mapping*, listener*, servlet*,
servlet-mapping*, session-config?, mime-mapping*, welcome-file-list?,
error-page*, taglib*, resource-env-ref*, resource-ref*, security-constraint*,
login-config?, security-role*, env-entry*, ejb-ref*, ejb-local-ref*)>
I have proved that you are right. Thank you very much.
I had check out the ddt just to foud the ddt have these elements, I hadn't consider the order the these elements .
Thank you again!