Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of gael.therond@gmail.com
 designates 209.85.216.177 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CABzHfVnc0BFE-GwT0FUrsWfSbMwTGaRbM50PnsWBHz7Ncqx2ig@mail.gmail.com>
References: 
 <CAG+53uaiq2tmrBjNa8HTmkZX7Hfq_j+Vwkyp6vHUCnotdXpZ8w@mail.gmail.com>
	<CABzHfVnc0BFE-GwT0FUrsWfSbMwTGaRbM50PnsWBHz7Ncqx2ig@mail.gmail.com>
Date: Fri, 7 Feb 2014 14:49:38 +0100
Message-ID: 
 <CAG+53ubRXWsahGjev1-mm1xCWOgXZevJJdSwBdgbs67zXT8hBA@mail.gmail.com>
Subject: Re: Tomcat 7 and manager issues on VirtualHost environnement
From: =?UTF-8?Q?Ga=C3=ABl_THEROND?= <gael.therond@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=001a11c13ba0d9246404f1d1424c

--001a11c13ba0d9246404f1d1424c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Yep, I'm able to visit the application list, but not upload or start an
application.

I'll take a look at this CSRF Protection hint.

I'm using the default BASIC Auth provided by Tomcat to authenticate myself
on the manager.


2014-02-07 Konstantin Kolinko <knst.kolinko@gmail.com>:

> 2014-02-07 Ga=C3=ABl THEROND <gael.therond@gmail.com>:
> > Hello everyone,
> >
> > I'm facing a really strange issue since about two or three days now.
> >
> > I've got a Tomcat Server, which contain a virtualhost like this:
> >
> (....)
> >
> > If I start my tomcat instance, everything is fine, tomcat is launching
> > correctly without error, and correctly create the virtual host under th=
e
> > ${catalina_base}/conf/Catalina/
> >
> > I can see on the catalina.out log file that tomcat even create the
> > manager.xml to be able to have an isolated manager for this host.
> >
> > the manager.xml file is correct.
> >
> > However, if I try to upload a WAR I'm facing a 403 error coming from
> tomcat.
> > Where I didn't get it, it's that on my main manager everything is fine,=
 I
> > can log in and load a WAR correctly.
> >
>
> So, you are able to visit the "applications list" page in Manager, but
> upload of a WAR file results in 403?
>
> The page 403 in manager can be result of CSRF protection,
> For example, if your session has expired. The session is needed,
> because CsrfPreventionFilter stores protection token in the session.
>
> I wonder whether SingleSignOn affects this.
> What authentication schema are you using? The manager app uses BASIC by
> default.
>
> Best regards,
> Konstantin Kolinko
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

--001a11c13ba0d9246404f1d1424c--