Not sure about 4.0.4. It has to be getting the roles from somewhere,
otherwise how does your existing tomcat-users.xml file know what "tomcat" or
"role1" is? I only have access to 4.1.x versions of tomcat-users.xml, and
they look like this:
<tomcat-users>
<role rolename="tomcat"/>
<role rolename="role1"/>
<role rolename="manager"/>
<role rolename="admin"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
<user username="role1" password="tomcat" roles="role1,manager"/>
<user username="admin" password="admin" roles="admin,manager"/>
</tomcat-users>
Yes, if you wish to deploy a manager app per virtual host, you must do so.
Not sure how it works in 4.0.4 (it might be broken). In 4.1.x, all you do
is make a copy of manager.xml and drop it into the appropriate appBase
($CATALINA_HOME/appBase) for that host.
John
> -----Original Message-----
> From: Andoni [mailto:andoni@indigo.ie]
> Sent: Thursday, February 20, 2003 11:35 AM
> To: Tomcat Users List
> Subject: Re: Error 500 when trying to run /manager app.
>
>
> Sorry, let me clarify:
>
> In the documents you have linked below I see reference to the
> tomcat-users.xml file and in it the tags:
>
> <!--
> NOTE: By default, no user is included in the "manager"
> role required
> to operate the "/manager" web application. If you wish to
> use this app,
> you must define such a user - the username and password are
> arbitrary.
> -->
> <tomcat-users>
> <user name="tomcat" password="tomcat" roles="tomcat" />
> <user name="administrator" password="password" roles="manager" />
> <user name="role1" password="tomcat" roles="role1" />
> <user name="both" password="tomcat" roles="tomcat,role1" />
> </tomcat-users>
>
>
> But nowhere to I see mention of the <role rolename="manager"
> /> tag. In
> fact when I go to add this tag to my tomcat 4.0.4
> installation things start
> to go wrong.
>
> I think my other problem was to do with multiple hosts. You
> have to have a
> manager application set up for each host I think? Do you not?
>
> Andoni.
>
> ----- Original Message -----
> From: "Turner, John" <JTurner@AAS.com>
> To: "'Tomcat Users List'" <tomcat-user@jakarta.apache.org>
> Sent: Thursday, February 20, 2003 4:24 PM
> Subject: RE: Error 500 when trying to run /manager app.
>
>
> >
> > Yes, it applies to 4.0.x:
> > http://jakarta.apache.org/tomcat/tomcat-4.0-doc/manager-howto.html
> > http://jakarta.apache.org/tomcat/tomcat-4.0-doc/realm-howto.html
> >
> > Sorry, I'm really not clear what you are asking. The manager docs
> > specifically state that you must manually add a role of
> "manager" to any
> > username that wishes to access the manager app (and
> likewise, "admin" to
> > access the admin app). Shipping Tomcat with a default
> username with the
> > role of "manager" already added for you is insecure.
> >
> > John
> >
> > > -----Original Message-----
> > > From: Andoni [mailto:andoni@indigo.ie]
> > > Sent: Thursday, February 20, 2003 11:16 AM
> > > To: Tomcat Users List
> > > Subject: Re: Error 500 when trying to run /manager app.
> > >
> > >
> > > I don't see the <role> tag documented anywhere. Sorry if
> I missed it.
> > >
> > > It is included in the book I have but all the docs on the
> > > site seem to have
> > > tomcat-users.xml files without it.
> > >
> > > I have just included it in my tomcat 4.0.4 server and now it
> > > won't start
> > > java apps so I'm going to try removing it again.
> > >
> > > Please let me know if it applies to 4.0.x anyway.
> > >
> > > Andoni.
> > >
> > >
> > > ----- Original Message -----
> > > From: "Turner, John" <JTurner@AAS.com>
> > > To: "'Tomcat Users List'" <tomcat-user@jakarta.apache.org>
> > > Sent: Thursday, February 20, 2003 3:57 PM
> > > Subject: RE: Error 500 when trying to run /manager app.
> > >
> > >
> > > >
> > > > See "MemoryRealm":
> > > >
> > > > http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html
> > > >
> > > > John
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Andoni [mailto:andoni@indigo.ie]
> > > > > Sent: Thursday, February 20, 2003 10:57 AM
> > > > > To: Tomcat Users List
> > > > > Subject: Re: Error 500 when trying to run /manager app.
> > > > >
> > > > >
> > > > > Where is this "role" tag documented?
> > > > >
> > > > > I don't see it anywhere in the docs. I have the app.
> > > appearing on the
> > > > > screen now and I am about to start testing it but I have not
> > > > > installed any
> > > > > "role" tags and there are none in the file. Are they
> > > > > necessary? What do
> > > > > they do?
> > > > >
> > > > > Andoni.
> > > > > ----- Original Message -----
> > > > > From: "Roberts, Eric" <Eric.Roberts@one.at>
> > > > > To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
> > > > > Sent: Thursday, February 20, 2003 3:39 PM
> > > > > Subject: RE: Error 500 when trying to run /manager app.
> > > > >
> > > > >
> > > > > Add the role as well
> > > > >
> > > > > <?xml version='1.0' encoding='utf-8'?>
> > > > > <tomcat-users>
> > > > > <role rolename="tomcat"/>
> > > > > <role rolename="role1"/>
> > > > > <role rolename="manager"/>
> > > > > <role rolename="admin"/>
> > > > > <user username="tomcat" password="tomcat" roles="tomcat"/>
> > > > > <user username="both" password="tomcat"
> roles="tomcat,role1"/>
> > > > > <user username="role1" password="tomcat" roles="role1"/>
> > > > > <user username="admin" password="admin"
> > > > > roles="admin,manager,role1,tomcat"/>
> > > > > </tomcat-users>
> > > > >
> > > > >
> > > > > -----Original Message-----
> > > > > From: Andoni [mailto:andoni@indigo.ie]
> > > > > Sent: Donnerstag, 20. Februar 2003 13:15
> > > > > To: Tomcat Users List
> > > > > Subject: Error 500 when trying to run /manager app.
> > > > >
> > > > >
> > > > > Hello,
> > > > >
> > > > > I am getting an error 500
> > > > > ServletException
> > > > > Root Cause:
> > > > > java.lang.SecurityException: Servlet of class
> > > > > org.apache.catalina.servlets.ManagerServlet is privileged and
> > > > > cannot be
> > > > > loaded by this web application
> > > > >
> > > > > Is this because I am using the wrong username / password?
> > > > >
> > > > > I have gone to tomcat-users.xml and it looks like:
> > > > > <tomcat-users>
> > > > > <user name="tomcat" password="tomcat" roles="tomcat" />
> > > > > <user name="administrator" password="password"
> > > roles="manager" />
> > > > > <user name="role1" password="tomcat" roles="role1" />
> > > > > <user name="both" password="tomcat"
> roles="tomcat,role1" />
> > > > > </tomcat-users>
> > > > >
> > > > >
> > > > > I am trying to log in as the "administrator" user
> that I added.
> > > > >
> > > > > What else do I have to do?
> > > > >
> > > > > Andoni.
> > > > >
> > > > >
> > > > >
> > >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > > For additional commands, e-mail:
> > > tomcat-user-help@jakarta.apache.org
> > > > >
> > > > >
> > > > >
> > >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > > For additional commands, e-mail:
> > > tomcat-user-help@jakarta.apache.org
> > > > >
> > > > >
> > > > >
> > > > >
> > >
> ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > > For additional commands, e-mail:
> > > tomcat-user-help@jakarta.apache.org
> > > > >
> > > >
> > > >
> > >
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > For additional commands, e-mail:
> tomcat-user-help@jakarta.apache.org
> > > >
> > > >
> > >
> > >
> > >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail:
> tomcat-user-help@jakarta.apache.org
> > >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
|