You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2018/09/13 08:57:28 UTC
[Bug 62714] New: 403 access denied connection reset and csrf for
new install after creating user
https://bz.apache.org/bugzilla/show_bug.cgi?id=62714
Bug ID: 62714
Summary: 403 access denied connection reset and csrf for new
install after creating user
Product: Tomcat 9
Version: 9.0.12
Hardware: PC
Status: NEW
Severity: major
Priority: P2
Component: Catalina
Assignee: dev@tomcat.apache.org
Reporter: myusualnickname@gmail.com
Target Milestone: -----
Hi, I'm trying to install tomcat to do a quick test of a web app...
I installed tomcat on windows 10, gave a username and password...
got to the manager-gui page, selected the war file, and immediately the
connection was reset... I tried loading it again and got the 403 access denied
I installed it with tomcat 8 on ubuntu 8.04 ... same error (I went in and
created the user)
Perhaps there is something wrong with the openmaint war file... but I surely
would expect an error message about that being broken rather than something
telling me I am not authorized to view... what I just was authorized to do by
creating the user...
so if the malfunction is with openmaint, there is a fault in tomcat's
documentation or error messages that is just leaving me baffled.. I can't find
anything useful online.. and it's happening with two of the latest releases...
it makes me think that it is a recent error for some sort of security fix... or
the documentation is just very poor.
What I need is a step by step list of what to do and a small explanation of
why... That has also not been found.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
[Bug 62714] 403 access denied connection reset and csrf for new
install after creating user
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=62714
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
OS| |All
--- Comment #1 from Mark Thomas <ma...@apache.org> ---
Look in the log files. In a default install
$CATALINA_BADE/logs/manager.yyyy-mm-dd.log will contain the error message and
associated stack trace.
Tomcat is also sending an appropriate HTTP response (including a helpful error
message) to the client. This has been confirmed with Wireshark. That the user
agent fails to display it is an issue with the user agent, not with Tomcat.
Tomcat's behaviour when you try and reload is also correct. The CSRF protection
engages and the appropriate error page is returned to the user agent.
If you follow the installation documentation for OpenMaint you won't hit this
issue as the OpenMaint installation documentation uses a different deployment
method (direct copying on the file system).
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org