Chap. 7. Dynamic Security Domains /
Procedure 7.1. Security Domain Deployment Descriptor /
step - 3. Deploy or package the deployment descriptor
in WAR file, deployment descriptor has to be in WEB-INF directory.
Directory WEB-INF/classes can contain resource files like u.properties and r.properties.