tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Vicenç <vbelt...@ac.upc.edu>
Subject Re: The purpose of provided tomcat-users.xml
Date Fri, 28 Apr 2006 10:06:23 GMT
What about adding a tomcat-users.xml.sample  with admin and manage allowed?

- Vicenç

Peter Rossbach wrote:
> Yes, defaults are very fine, but secret parameter need active user 
> interaction.
>
> also -1
>
> Peter
>
>
>
> Am 28.04.2006 um 11:54 schrieb Remy Maucherat:
>
>> Mladen Turk wrote:
>>> Hi,
>>> The provided tomcat-users.xml is obviously used
>>> as an example.
>>> Can we tweak that so that it actually allows
>>> the admin and manager users?
>>
>> Sorry, but it's a bad idea.
>>
>>> The purpose would be the same (example), but
>>> it will allow to run the provided web apps without
>>> additional editing.
>>
>> And most people wouldn't be changing them, creating a security problem.
>>
>>> Any objections if I put the 'real' values there?
>>
>> -1.
>>
>> Rémy
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: dev-help@tomcat.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message