Return-Path: 
 <users-return-143555-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 35151 invoked from network); 3 Apr 2006 15:19:27 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 3 Apr 2006 15:19:27 -0000
Received: (qmail 74545 invoked by uid 500); 3 Apr 2006 15:19:15 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 74529 invoked by uid 500); 3 Apr 2006 15:19:15 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 74518 invoked by uid 99); 3 Apr 2006 15:19:15 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Apr 2006 08:19:15 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Received: from [195.227.30.246] (HELO datura.kippdata.de) (195.227.30.246)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Apr 2006 08:19:14 -0700
Received: from [195.227.30.148] (larix [195.227.30.148])
	by datura.kippdata.de (8.13.5/8.13.5) with ESMTP id k33FIr21009686
	for <users@tomcat.apache.org>; Mon, 3 Apr 2006 17:18:53 +0200 (CEST)
Message-ID: <44313CDD.2060601@kippdata.de>
Date: Mon, 03 Apr 2006 17:18:53 +0200
From: Rainer Jung <tomcat-user@kippdata.de>
User-Agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7.12) Gecko/20050928
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: tomcat users file
References: <C4E50BAA64CDB64D98C5723A8A40224C0202C527@bdlmail1.bdl.gov.lb>
In-Reply-To: <C4E50BAA64CDB64D98C5723A8A40224C0202C527@bdlmail1.bdl.gov.lb>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

During startup, tomcat reads tomcat-users.xml and then immediately
writes it out again as tomcat-users.xml.new and afterwards renames
tomcat-users.xml.new to tomcat-users.xml (I don't know who invented that
...).

So either:

- the runtime user has write access to the directory tomcat-users.xml is
in (usually conf, but you can choose another one in server.xml), or

- you use at least Tomcat 5.5.12 (better 5.5.15 or 5.5.16) which has a
patch I submitted at 2005-08-04 that

      - logs a nicer message when it cannot write out and proceeds startup
      - allows tomcat-users.xml to be configured as readonly. I think it
works like this:

     <GlobalNamingResources>

       <Resource name="UserDatabase" auth="Container"
                 type="org.apache.catalina.UserDatabase"
          description="User database that can be updated and saved">
       </Resource>
       <ResourceParams name="UserDatabase">
         <parameter>
           <name>factory</name>
 
<value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>
         </parameter>
         <parameter>
           <name>pathname</name>
           <value>conf/tomcat-users.xml</value>
         </parameter>
         <parameter>
           <name>readonly</name>
           <value>true</value>
         </parameter>
       </ResourceParams>

     </GlobalNamingResources>

Notice the new last parameter element:

         <parameter>
           <name>readonly</name>
           <value>true</value>
         </parameter>

Ali Kassem wrote:
> Thanks, but i don't have file called tomcat-users.xml.new And the user
> have read permission to tomcat-users.xml 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org