LDAP - BlueGroups

JAZZB2A installed on WAS61 + DB2 + LDAP.
Logon from Web https://x.xx.xxx.xxx:9443/jazz/web authentication is working correctly. Intranet ID and Password must be provided in order to access.
Connect from Client https://x.xx.xxx.xxx:9443/jazz authentication is NOT working correctly. Intranet ID is checked but a blank(or anything) in the password field still make a good connection.

Any suggestion ? Thanks

Found the answer:
Need to insert in web.xml
<!-- Added to enable basic authentication for Jazz -->
<security-constraint>
<web-resource-collection>
<web-resource-name>secure</web-resource-name>
<url-pattern>/secure/*</url-pattern>
<url-pattern>/service/*</url-pattern>
<url-pattern>/resource/*</url-pattern>
<url-pattern>/resources/*</url-pattern>
<url-pattern>/projects/*</url-pattern>
<url-pattern>/users/*</url-pattern>
<url-pattern>/indexing-rules/*</url-pattern>
</web-resource-collection>

Update:
There are 2 web.xml. The one point bt Richie is the correct one->
\profiles\AppSrv01\config\cells\hostnameNode01Cell\applications\jazz_war.ear\deployments\jazz_war\jazz.war\WEB-INF
Also notice there is known bug and it is fixed in M5. If your code is before M5 need to change FORM to BASIC in the same xml.

<login-config>
<auth-method>BASIC</auth-method>
<form-login-config>
<form-login-page>/auth/authrequired</form- login-page>
<form-error-page>/auth/authfailed</form- error-page>
</form-login-config>
</login-config>