Shield accepts any username/password combination

Realms are defined in a chain, so each realm that supports a type of token will be called in order until one has successful authentication or the chain ends.

Can you share your full configuration? I am not sure but maybe docker plays an issue here. What image are you using?