Tomcat 8.5.51 - Issues with secretRequired="false"
Tomcat 9.0.34 has that secretReqiured set to true by default now to address CVS issue.
See these URLs for details of this issue:https://access.redhat.com/solutions/4851251
https://tomcat.apache.org/tomcat-9.0-doc/config/ajp.html
https://github.com/spring-projects/spring-boot/issues/20377
Adding the address
attribute and specifying the loopback address is what worked for me on Tomcat 8.5.54.
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="0.0.0.0" secretRequired="false" />