The authenticator configuration has been modified to store the authentication info in the session so it can be used by other servlets. An update script has been added to update the configuration in existing instances. The SSLAuthenticatorWithFalback was modified to propagate the configuration to the actual authenticator handling the request. -- Endi S. Dewata