Return-Path: 
 <users-return-223022-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 72874 invoked from network); 18 Mar 2011 22:00:56 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 18 Mar 2011 22:00:56 -0000
Received: (qmail 32485 invoked by uid 500); 18 Mar 2011 22:00:53 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 32237 invoked by uid 500); 18 Mar 2011 22:00:52 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 32228 invoked by uid 99); 18 Mar 2011 22:00:52 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 18 Mar 2011 22:00:52 +0000
X-ASF-Spam-Status: No, hits=1.5 required=5.0
	tests=FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of hmzhou@gmail.com designates
 209.85.160.173 as permitted sender)
Received: from [209.85.160.173] (HELO mail-gy0-f173.google.com)
 (209.85.160.173)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 18 Mar 2011 22:00:45 +0000
Received: by gyf1 with SMTP id 1so2169281gyf.18
        for <users@tomcat.apache.org>; Fri, 18 Mar 2011 15:00:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:date:message-id:subject:from:to
         :content-type;
        bh=Wr1Z9AA1PsZprw94GG2WzPfnWPilW1NrjM6N4/FU1d0=;
        b=VVlLvsp+m9qo4TdOYFgUDpXaa/OI+1WHxEIuWsHIrqO1DSO42H85N70niFHSXpgcmH
         iMNCD1awm2fDxJASL93Iw/3iVR0ggfMOO54K9paR/4ItY49qd0q60vgyZ3WPrvFdkoJy
         9Po1dPOoLjWsclzo6chNNLksIymkXOKbUwypY=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=TY/X7Co4d1McwhHF18UBWt0s4n2Km+LypussC2vEEXUPXKdO6x7EK05+C4nOwydW5p
         dYFb75+UbMWwab0uobsxJR932BtpSVyn7Ba/wchJItfawOkvmJvYmDDU1oQNfNB+3t+j
         ZwbBELp2jHEtxryVaZzDr4gV5QTqPBcVi4HN8=
MIME-Version: 1.0
Received: by 10.101.71.11 with SMTP id y11mr1211495ank.126.1300485624365; Fri,
 18 Mar 2011 15:00:24 -0700 (PDT)
Received: by 10.101.130.38 with HTTP; Fri, 18 Mar 2011 15:00:24 -0700 (PDT)
Date: Fri, 18 Mar 2011 18:00:24 -0400
Message-ID: <AANLkTimt=Tnmn4YojqnRUFTmztCu_9hDtsfPXsXeq7AD@mail.gmail.com>
Subject: basic auth w/ the manager application
From: hanson zhou <hmzhou@gmail.com>
To: users@tomcat.apache.org
Content-Type: multipart/alternative; boundary=0016368e1dd0ad021e049ec8e783
X-Virus-Checked: Checked by ClamAV on apache.org

--0016368e1dd0ad021e049ec8e783
Content-Type: text/plain; charset=ISO-8859-1

Hi I have Tomcat 7.0 on Windows Vista and I'm having trouble logging into
the manager app.  Ie it should pop up a basic auth user/pass login window
but instead it sends me to 403 access denied all the time.

I added the following to tomcat-users.xml:

...
<role rolename="manager-gui"/>
...
<user username="manager" password="tomcat" roles="manager-gui"/>

and I want to login w/ manager:tomcat, but instead it sends me to the 403
page.  I also tried commenting out the lockOutRealm lines in
conf/server.xml.  Not sure if that makes a difference.

Strangely when I just add the "manager-gui" role to user tomcat's roles list
it logs me in successfully every time w/out even asking for a username and
password.

-hanson

--0016368e1dd0ad021e049ec8e783--