From SMB1
In server.xml <Connector port="8080" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" redirectPort="8443" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" address="127.0.0.1" protocol="AJP/1.3" tomcatAuthentication="false" /> On the apache side: LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_ajp_module modules/mod_proxy_ajp.so LoadModule proxy_balancer_module modules/mod_proxy_balancer.so LoadModule proxy_connect_module modules/mod_proxy_connect.so LoadModule proxy_ftp_module modules/mod_proxy_ftp.so LoadModule proxy_http_module modules/mod_proxy_http.so <Location /uPortal> AuthType all AuthName Cornell Require valid-user ProxyPass ajp://localhost:8080/uPortal </Location> I'm hooked to CF at the root so I specified which webapp I wanted on the TC side. I'm also sure I don't need all those proxy modules but I didn't want to screw w/it and just loaded them all. Also, don't forget things like: Alias /uPortal/media D:\data\uPortal\tomcat\webapps\uPortal\media <Location /uPortal/Media> order allow,deny allow from all satisfy any </Location> <Location ~ (.*).wsdl> order allow,deny allow from all satisfy any </Location> <Location ~ (.*).(gif|jpg|jpeg|tif|tiff|js|css)> order allow,deny allow from all satisfy any </Location>