You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by saved lion <sa...@gmail.com> on 2016/06/07 19:07:01 UTC
403 Access Denied on manager app
Hi,
I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
problems to browse http://host_ip:8080.
There is one issue to access 'manager app," though I copied and pasted the
two lines for role and user.
<tomcat-users xmlns="http://tomcat.apache.org/xml"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://tomcat.apache.org/xml
tomcat-users.xsd"
version="1.0">
<role rolename="manager-gui"/>
<user username="tomcat" password="s3cret" roles="manager-gui"/>
</tomcat-users>
$ cat
/opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html HTTP/1.1"
403 3429
192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
HTTP/1.1" 403 3429
192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
HTTP/1.1" 403 3429
192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html HTTP/1.1"
403 3429
192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html HTTP/1.1"
403 3429
$
The problem looks simple, it did spend couple of days.
Any quick help?
Thanks,
sl
Re: 403 Access Denied on manager app
Posted by saved lion <sa...@gmail.com>.
Is there any wrong in the
/opt/tomcat9/apache-tomcat-9.0.0.M6/conf/tomcat-users.xml?
<!-- user manager can access only manager section -->
<role rolename="manager-gui" />
<user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
<!-- user admin can access manager and admin section both -->
<role rolename="admin-gui" />
<user username="admin" password="_SECRET_PASSWORD_"
roles="manager-gui,admin-gui" />
On Tue, Jun 7, 2016 at 3:45 PM, Hardibo Pierre-Jean <co...@hardibopj.com>
wrote:
> you have to declare also tags role for admin and manager
>
>
> Le 07/06/2016 21:41, saved lion a écrit :
>
>> <!-- user manager can access only manager section -->
>> <role rolename="manager-gui" />
>> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui"
>> />
>>
>> <!-- user admin can access manager and admin section both -->
>> <role rolename="admin-gui" />
>> <user username="admin" password="_SECRET_PASSWORD_"
>> roles="manager-gui,admin-gui" />
>>
>> were added. the problem still exists.
>>
>>
>> On Tue, Jun 7, 2016 at 3:20 PM, Hardibo Pierre-Jean <
>> contact@hardibopj.com>
>> wrote:
>>
>> try to add roles : manager and admin
>>>
>>>
>>> Le 07/06/2016 21:17, saved lion a écrit :
>>>
>>> my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log,
>>>> is
>>>> it a problem?
>>>>
>>>> inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
>>>>
>>>>
>>>> On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
>>>>
>>>> at the first, I added below entries, the problem is same.
>>>>
>>>>>
>>>>> <!-- user manager can access only manager section -->
>>>>> <role rolename="manager-gui" />
>>>>> <user username="manager" password="_SECRET_PASSWORD_"
>>>>> roles="manager-gui" />
>>>>>
>>>>> <!-- user admin can access manager and admin section both -->
>>>>> <role rolename="admin-gui" />
>>>>> <user username="admin" password="_SECRET_PASSWORD_"
>>>>> roles="manager-gui,admin-gui" />
>>>>>
>>>>>
>>>>> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <
>>>>> contact@hardibopj.com
>>>>>
>>>>> wrote:
>>>>>> me i put : manager, manager-ui, admin and admin-ui roles
>>>>>>
>>>>>>
>>>>>> Le 07/06/2016 21:07, saved lion a écrit :
>>>>>>
>>>>>> Hi,
>>>>>>
>>>>>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>>>>>> problems to browse http://host_ip:8080.
>>>>>>>
>>>>>>> There is one issue to access 'manager app," though I copied and
>>>>>>> pasted
>>>>>>> the
>>>>>>> two lines for role and user.
>>>>>>>
>>>>>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>>>>>> xmlns:xsi="
>>>>>>> http://www.w3.org/2001/XMLSchema-instance"
>>>>>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>>>>>> tomcat-users.xsd"
>>>>>>> version="1.0">
>>>>>>>
>>>>>>> <role rolename="manager-gui"/>
>>>>>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>>>>>
>>>>>>> </tomcat-users>
>>>>>>>
>>>>>>> $ cat
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200
>>>>>>> 11254
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>>>>>> HTTP/1.1"
>>>>>>> 403 3429
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200
>>>>>>> 11254
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>>>>>> HTTP/1.1" 403 3429
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>>>>>> HTTP/1.1" 403 3429
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>>>>>> HTTP/1.1"
>>>>>>> 403 3429
>>>>>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>>>>>> HTTP/1.1"
>>>>>>> 403 3429
>>>>>>> $
>>>>>>>
>>>>>>> The problem looks simple, it did spend couple of days.
>>>>>>>
>>>>>>> Any quick help?
>>>>>>> Thanks,
>>>>>>> sl
>>>>>>>
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>>
>>>>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>>>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>>>>
>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>
>>>
>>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: 403 Access Denied on manager app
Posted by Hardibo Pierre-Jean <co...@hardibopj.com>.
you have to declare also tags role for admin and manager
Le 07/06/2016 21:41, saved lion a �crit :
> <!-- user manager can access only manager section -->
> <role rolename="manager-gui" />
> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
>
> <!-- user admin can access manager and admin section both -->
> <role rolename="admin-gui" />
> <user username="admin" password="_SECRET_PASSWORD_"
> roles="manager-gui,admin-gui" />
>
> were added. the problem still exists.
>
>
> On Tue, Jun 7, 2016 at 3:20 PM, Hardibo Pierre-Jean <co...@hardibopj.com>
> wrote:
>
>> try to add roles : manager and admin
>>
>>
>> Le 07/06/2016 21:17, saved lion a �crit :
>>
>>> my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is
>>> it a problem?
>>>
>>> inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
>>>
>>>
>>> On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
>>>
>>> at the first, I added below entries, the problem is same.
>>>>
>>>> <!-- user manager can access only manager section -->
>>>> <role rolename="manager-gui" />
>>>> <user username="manager" password="_SECRET_PASSWORD_"
>>>> roles="manager-gui" />
>>>>
>>>> <!-- user admin can access manager and admin section both -->
>>>> <role rolename="admin-gui" />
>>>> <user username="admin" password="_SECRET_PASSWORD_"
>>>> roles="manager-gui,admin-gui" />
>>>>
>>>>
>>>> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <
>>>> contact@hardibopj.com
>>>>
>>>>> wrote:
>>>>> me i put : manager, manager-ui, admin and admin-ui roles
>>>>>
>>>>>
>>>>> Le 07/06/2016 21:07, saved lion a �crit :
>>>>>
>>>>> Hi,
>>>>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>>>>> problems to browse http://host_ip:8080.
>>>>>>
>>>>>> There is one issue to access 'manager app," though I copied and pasted
>>>>>> the
>>>>>> two lines for role and user.
>>>>>>
>>>>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>>>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>>>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>>>>> tomcat-users.xsd"
>>>>>> version="1.0">
>>>>>>
>>>>>> <role rolename="manager-gui"/>
>>>>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>>>>
>>>>>> </tomcat-users>
>>>>>>
>>>>>> $ cat
>>>>>>
>>>>>>
>>>>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200
>>>>>> 11254
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>>>>> HTTP/1.1"
>>>>>> 403 3429
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200
>>>>>> 11254
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>>>>> HTTP/1.1" 403 3429
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>>>>> HTTP/1.1" 403 3429
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>>>>> HTTP/1.1"
>>>>>> 403 3429
>>>>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>>>>> HTTP/1.1"
>>>>>> 403 3429
>>>>>> $
>>>>>>
>>>>>> The problem looks simple, it did spend couple of days.
>>>>>>
>>>>>> Any quick help?
>>>>>> Thanks,
>>>>>> sl
>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>>>
>>>>>
>>>>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: 403 Access Denied on manager app
Posted by saved lion <sa...@gmail.com>.
<!-- user manager can access only manager section -->
<role rolename="manager-gui" />
<user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
<!-- user admin can access manager and admin section both -->
<role rolename="admin-gui" />
<user username="admin" password="_SECRET_PASSWORD_"
roles="manager-gui,admin-gui" />
were added. the problem still exists.
On Tue, Jun 7, 2016 at 3:20 PM, Hardibo Pierre-Jean <co...@hardibopj.com>
wrote:
> try to add roles : manager and admin
>
>
> Le 07/06/2016 21:17, saved lion a écrit :
>
>> my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is
>> it a problem?
>>
>> inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
>>
>>
>> On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
>>
>> at the first, I added below entries, the problem is same.
>>>
>>>
>>> <!-- user manager can access only manager section -->
>>> <role rolename="manager-gui" />
>>> <user username="manager" password="_SECRET_PASSWORD_"
>>> roles="manager-gui" />
>>>
>>> <!-- user admin can access manager and admin section both -->
>>> <role rolename="admin-gui" />
>>> <user username="admin" password="_SECRET_PASSWORD_"
>>> roles="manager-gui,admin-gui" />
>>>
>>>
>>> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <
>>> contact@hardibopj.com
>>>
>>>> wrote:
>>>> me i put : manager, manager-ui, admin and admin-ui roles
>>>>
>>>>
>>>> Le 07/06/2016 21:07, saved lion a écrit :
>>>>
>>>> Hi,
>>>>>
>>>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>>>> problems to browse http://host_ip:8080.
>>>>>
>>>>> There is one issue to access 'manager app," though I copied and pasted
>>>>> the
>>>>> two lines for role and user.
>>>>>
>>>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>>>> tomcat-users.xsd"
>>>>> version="1.0">
>>>>>
>>>>> <role rolename="manager-gui"/>
>>>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>>>
>>>>> </tomcat-users>
>>>>>
>>>>> $ cat
>>>>>
>>>>>
>>>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200
>>>>> 11254
>>>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>>>> HTTP/1.1"
>>>>> 403 3429
>>>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200
>>>>> 11254
>>>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>>>> HTTP/1.1" 403 3429
>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>>>> HTTP/1.1" 403 3429
>>>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>>>> HTTP/1.1"
>>>>> 403 3429
>>>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>>>> HTTP/1.1"
>>>>> 403 3429
>>>>> $
>>>>>
>>>>> The problem looks simple, it did spend couple of days.
>>>>>
>>>>> Any quick help?
>>>>> Thanks,
>>>>> sl
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>>
>>>>
>>>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: 403 Access Denied on manager app
Posted by Hardibo Pierre-Jean <co...@hardibopj.com>.
try to add roles : manager and admin
Le 07/06/2016 21:17, saved lion a �crit :
> my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is
> it a problem?
>
> inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
>
>
> On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
>
>> at the first, I added below entries, the problem is same.
>>
>>
>> <!-- user manager can access only manager section -->
>> <role rolename="manager-gui" />
>> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
>>
>> <!-- user admin can access manager and admin section both -->
>> <role rolename="admin-gui" />
>> <user username="admin" password="_SECRET_PASSWORD_" roles="manager-gui,admin-gui" />
>>
>>
>> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <contact@hardibopj.com
>>> wrote:
>>> me i put : manager, manager-ui, admin and admin-ui roles
>>>
>>>
>>> Le 07/06/2016 21:07, saved lion a �crit :
>>>
>>>> Hi,
>>>>
>>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>>> problems to browse http://host_ip:8080.
>>>>
>>>> There is one issue to access 'manager app," though I copied and pasted
>>>> the
>>>> two lines for role and user.
>>>>
>>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>>> tomcat-users.xsd"
>>>> version="1.0">
>>>>
>>>> <role rolename="manager-gui"/>
>>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>>
>>>> </tomcat-users>
>>>>
>>>> $ cat
>>>>
>>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
>>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
>>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>>> HTTP/1.1" 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>>> HTTP/1.1" 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> $
>>>>
>>>> The problem looks simple, it did spend couple of days.
>>>>
>>>> Any quick help?
>>>> Thanks,
>>>> sl
>>>>
>>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>
>>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: 403 Access Denied on manager app
Posted by Konstantin Kolinko <kn...@gmail.com>.
1. Mailing list rules:
http://tomcat.apache.org/lists.html#tomcat-users
-> 6. Top-posting is bad.
2. "192.168.44.1" in access log is client IP, not server IP.
AccessLogValve can be configured to log "Local IP address", but that
is not the default configuration.
3. The Manager web application is protected by BASIC authentication.
When it asks for credentials it is HTTP response status code 401.
Response status code 403 means that your request is rejected
immediately, without asking for credentials. This is usually a doing
of a RemoteAddrValve.
See "Securing Management Applications" section in Security Guide
http://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Securing_Management_Applications
Since r1734267 a RemoteAddrValve.is configured by default.
2016-06-07 22:17 GMT+03:00 saved lion <sa...@gmail.com>:
> my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is
> it a problem?
>
> inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
>
>
> On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
>
>> at the first, I added below entries, the problem is same.
>>
>>
>> <!-- user manager can access only manager section -->
>> <role rolename="manager-gui" />
>> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
>>
>> <!-- user admin can access manager and admin section both -->
>> <role rolename="admin-gui" />
>> <user username="admin" password="_SECRET_PASSWORD_" roles="manager-gui,admin-gui" />
>>
>>
>> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <contact@hardibopj.com
>> > wrote:
>>
>>> me i put : manager, manager-ui, admin and admin-ui roles
>>>
>>>
>>> Le 07/06/2016 21:07, saved lion a écrit :
>>>
>>>> Hi,
>>>>
>>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>>> problems to browse http://host_ip:8080.
>>>>
>>>> There is one issue to access 'manager app," though I copied and pasted
>>>> the
>>>> two lines for role and user.
>>>>
>>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>>> tomcat-users.xsd"
>>>> version="1.0">
>>>>
>>>> <role rolename="manager-gui"/>
>>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>>
>>>> </tomcat-users>
>>>>
>>>> $ cat
>>>>
>>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
>>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
>>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>>> HTTP/1.1" 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>>> HTTP/1.1" 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>>> HTTP/1.1"
>>>> 403 3429
>>>> $
>>>>
>>>> The problem looks simple, it did spend couple of days.
>>>>
>>>> Any quick help?
>>>> Thanks,
>>>> sl
>>>>
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>>> For additional commands, e-mail: users-help@tomcat.apache.org
>>>
>>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: 403 Access Denied on manager app
Posted by saved lion <sa...@gmail.com>.
my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is
it a problem?
inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0
On Tue, Jun 7, 2016 at 3:14 PM, saved lion <sa...@gmail.com> wrote:
> at the first, I added below entries, the problem is same.
>
>
> <!-- user manager can access only manager section -->
> <role rolename="manager-gui" />
> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
>
> <!-- user admin can access manager and admin section both -->
> <role rolename="admin-gui" />
> <user username="admin" password="_SECRET_PASSWORD_" roles="manager-gui,admin-gui" />
>
>
> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <contact@hardibopj.com
> > wrote:
>
>> me i put : manager, manager-ui, admin and admin-ui roles
>>
>>
>> Le 07/06/2016 21:07, saved lion a écrit :
>>
>>> Hi,
>>>
>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>>> problems to browse http://host_ip:8080.
>>>
>>> There is one issue to access 'manager app," though I copied and pasted
>>> the
>>> two lines for role and user.
>>>
>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>> xsi:schemaLocation="http://tomcat.apache.org/xml
>>> tomcat-users.xsd"
>>> version="1.0">
>>>
>>> <role rolename="manager-gui"/>
>>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>>
>>> </tomcat-users>
>>>
>>> $ cat
>>>
>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html
>>> HTTP/1.1"
>>> 403 3429
>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>>> HTTP/1.1" 403 3429
>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>>> HTTP/1.1" 403 3429
>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html
>>> HTTP/1.1"
>>> 403 3429
>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html
>>> HTTP/1.1"
>>> 403 3429
>>> $
>>>
>>> The problem looks simple, it did spend couple of days.
>>>
>>> Any quick help?
>>> Thanks,
>>> sl
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
Re: 403 Access Denied on manager app
Posted by saved lion <sa...@gmail.com>.
at the first, I added below entries, the problem is same.
<!-- user manager can access only manager section -->
<role rolename="manager-gui" />
<user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" />
<!-- user admin can access manager and admin section both -->
<role rolename="admin-gui" />
<user username="admin" password="_SECRET_PASSWORD_"
roles="manager-gui,admin-gui" />
On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <co...@hardibopj.com>
wrote:
> me i put : manager, manager-ui, admin and admin-ui roles
>
>
> Le 07/06/2016 21:07, saved lion a écrit :
>
>> Hi,
>>
>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
>> problems to browse http://host_ip:8080.
>>
>> There is one issue to access 'manager app," though I copied and pasted the
>> two lines for role and user.
>>
>> <tomcat-users xmlns="http://tomcat.apache.org/xml"
>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>> xsi:schemaLocation="http://tomcat.apache.org/xml
>> tomcat-users.xsd"
>> version="1.0">
>>
>> <role rolename="manager-gui"/>
>> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>>
>> </tomcat-users>
>>
>> $ cat
>>
>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html HTTP/1.1"
>> 403 3429
>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
>> HTTP/1.1" 403 3429
>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
>> HTTP/1.1" 403 3429
>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html HTTP/1.1"
>> 403 3429
>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html HTTP/1.1"
>> 403 3429
>> $
>>
>> The problem looks simple, it did spend couple of days.
>>
>> Any quick help?
>> Thanks,
>> sl
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: 403 Access Denied on manager app
Posted by Hardibo Pierre-Jean <co...@hardibopj.com>.
me i put : manager, manager-ui, admin and admin-ui roles
Le 07/06/2016 21:07, saved lion a �crit :
> Hi,
>
> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No
> problems to browse http://host_ip:8080.
>
> There is one issue to access 'manager app," though I copied and pasted the
> two lines for role and user.
>
> <tomcat-users xmlns="http://tomcat.apache.org/xml"
> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> xsi:schemaLocation="http://tomcat.apache.org/xml
> tomcat-users.xsd"
> version="1.0">
>
> <role rolename="manager-gui"/>
> <user username="tomcat" password="s3cret" roles="manager-gui"/>
>
> </tomcat-users>
>
> $ cat
> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt
> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254
> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html HTTP/1.1"
> 403 3429
> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254
> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status
> HTTP/1.1" 403 3429
> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status
> HTTP/1.1" 403 3429
> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html HTTP/1.1"
> 403 3429
> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html HTTP/1.1"
> 403 3429
> $
>
> The problem looks simple, it did spend couple of days.
>
> Any quick help?
> Thanks,
> sl
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org