You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Zaki Akhmad <za...@gmail.com> on 2009/08/25 08:14:59 UTC

tomcat-users.xml on Tomcat6

Hello,

I've failed login on manager webapp and host-manager webapp. I've add
the manager and admin role on tomcat-users.xml
[/etc/tomcat6/tomcat-users.xml]. The status is HTTP Status 500.

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager"/>
  <role rolename="admin" />
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>
  <user username="za" password="za" roles="manager" />
  <user username="ki" password="ki" roles="admin" />
</tomcat-users>

I am using Debian Lenny (Testing).

-- 
Zaki Akhmad

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat-users.xml on Tomcat6

Posted by Michael Ludwig <ml...@as-guides.com>.
Zaki Akhmad schrieb:

> I've failed login on manager webapp and host-manager webapp.
> I've add the manager and admin role on tomcat-users.xml
> [/etc/tomcat6/tomcat-users.xml]. The status is HTTP Status 500.

What's the message in the error log?

Did you restart Tomcat?

Did you read the doc concerning the MemoryRealm?

http://localhost:8080/docs/realm-howto.html#MemoryRealm

The usual expert advice on this list is to avoid the prepackaged
Tomcat and install the real one that can be downloaded from the
Apache site.

-- 
Michael Ludwig

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat-users.xml on Tomcat6

Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Zaki,

On 8/25/2009 10:55 PM, Zaki Akhmad wrote:
> On Tue, Aug 25, 2009 at 2:28 PM, André Warnier<aw...@ice-sa.com> wrote:
>>
>> That does not look like a login error, it looks like a "server error".
>> What does the Tomcat log say ?
> 
> Here's the log:
> [1]/var/log/tomcat6/localhost.2009-08-***.....
> [2]/var/log/tomcat6/catalina.2009-08-****.....

Looks like a broken SecurityManager configuration:

> SEVERE: Servlet.service() for servlet HTMLHostManager threw exception
> java.security.AccessControlException: access denied
> (java.util.PropertyPermission java.runtime.version read)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
>         at java.security.AccessController.checkPermission(AccessController.java:553)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
>         at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1302)
>         at java.lang.System.getProperty(System.java:669)
>         at org.apache.catalina.manager.host.HTMLHostManagerServlet.list(HTMLHostManagerServlet.java:367)
>         at org.apache.catalina.manager.host.HTMLHostManagerServlet.doGet(HTMLHostManagerServlet.java:104)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:616)
>         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:269)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAsPrivileged(Subject.java:537)
>         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:301)
>         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:283)
>         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:56)
>         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:185)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
>         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
>         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
>         at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
>         at java.lang.Thread.run(Thread.java:636)

Try disabling your security manager to see if everything works. If that
fixes your problem, you'll need to review your security manager
configuration and update it appropriately.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkqVQp8ACgkQ9CaO5/Lv0PAl8ACfbou/5O3NMajznyOvyFkMe37N
D0YAnjoljayhfZaiH2IKEojtq5DBPhdE
=088i
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat-users.xml on Tomcat6

Posted by André Warnier <aw...@ice-sa.com>.
Zaki Akhmad wrote:
> On Tue, Aug 25, 2009 at 2:28 PM, André Warnier<aw...@ice-sa.com> wrote:
>> That does not look like a login error, it looks like a "server error".
>> What does the Tomcat log say ?
> 
> Here's the log:
> [1]/var/log/tomcat6/localhost.2009-08-***.....
> [2]/var/log/tomcat6/catalina.2009-08-****.....
> 
It looks very much like you have the security manager turned on, but 
have not given the appropriate file access permissions to your webapps.
I don't remember under which platform you are running this, but if it is 
Linux, have a look at /etc/default/tomcatxx, see if there is something like
TOMCAT_SECURITY="yes"
and set it to "no".
Restart Tomcat and try again.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat-users.xml on Tomcat6

Posted by Zaki Akhmad <za...@gmail.com>.
On Tue, Aug 25, 2009 at 2:28 PM, André Warnier<aw...@ice-sa.com> wrote:
>
> That does not look like a login error, it looks like a "server error".
> What does the Tomcat log say ?

Here's the log:
[1]/var/log/tomcat6/localhost.2009-08-***.....
[2]/var/log/tomcat6/catalina.2009-08-****.....

-- 
Zaki Akhmad

[1]
Aug 26, 2009 9:47:40 AM org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextDestroyed()
Aug 26, 2009 9:47:40 AM org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextDestroyed()
Aug 26, 2009 9:47:51 AM org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextInitialized()
Aug 26, 2009 9:47:51 AM org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextInitialized()
Aug 26, 2009 9:48:25 AM org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextDestroyed()
Aug 26, 2009 9:48:25 AM org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextDestroyed()
Aug 26, 2009 9:48:33 AM org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextInitialized()
Aug 26, 2009 9:48:33 AM org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextInitialized()
Aug 26, 2009 9:49:18 AM org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Servlet.service() for servlet HTMLHostManager threw exception
java.security.AccessControlException: access denied
(java.util.PropertyPermission java.runtime.version read)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
        at java.security.AccessController.checkPermission(AccessController.java:553)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1302)
        at java.lang.System.getProperty(System.java:669)
        at org.apache.catalina.manager.host.HTMLHostManagerServlet.list(HTMLHostManagerServlet.java:367)
        at org.apache.catalina.manager.host.HTMLHostManagerServlet.doGet(HTMLHostManagerServlet.java:104)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:616)
        at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:269)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAsPrivileged(Subject.java:537)
        at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:301)
        at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:283)
        at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:56)
        at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:189)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:185)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
        at java.lang.Thread.run(Thread.java:636)
Aug 26, 2009 9:49:26 AM org.apache.catalina.core.ApplicationContext log
SEVERE: StandardWrapper.Throwable
java.security.AccessControlException: access denied
(java.util.PropertyPermission catalina.base read)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
        at java.security.AccessController.checkPermission(AccessController.java:553)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1302)
        at java.lang.System.getProperty(System.java:669)
        at org.apache.catalina.manager.ManagerServlet.init(ManagerServlet.java:487)
        at org.apache.catalina.manager.HTMLManagerServlet.init(HTMLManagerServlet.java:646)
        at javax.servlet.GenericServlet.init(GenericServlet.java:212)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:616)
        at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:269)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAsPrivileged(Subject.java:537)
        at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:301)
        at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
        at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:115)
        at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1167)
        at org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:809)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:129)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
        at java.lang.Thread.run(Thread.java:636)

[2]
Aug 26, 2009 9:46:03 PM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Aug 26, 2009 9:46:03 PM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.20
Aug 26, 2009 9:46:05 PM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:46:05 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 1847 ms
Aug 26, 2009 9:47:38 AM org.apache.coyote.http11.Http11Protocol pause
INFO: Pausing Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:47:39 AM org.apache.catalina.core.StandardService stop
INFO: Stopping service Catalina
Aug 26, 2009 9:47:40 AM org.apache.coyote.http11.Http11Protocol destroy
INFO: Stopping Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:47:49 AM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:47:49 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 2456 ms
Aug 26, 2009 9:47:50 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Aug 26, 2009 9:47:50 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.20
Aug 26, 2009 9:47:52 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:47:52 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 2360 ms
Aug 26, 2009 9:48:24 AM org.apache.coyote.http11.Http11Protocol pause
INFO: Pausing Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:48:25 AM org.apache.catalina.core.StandardService stop
INFO: Stopping service Catalina
Aug 26, 2009 9:48:25 AM org.apache.coyote.http11.Http11Protocol destroy
INFO: Stopping Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:48:33 AM org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:48:33 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 822 ms
Aug 26, 2009 9:48:33 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Aug 26, 2009 9:48:33 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.20
Aug 26, 2009 9:48:34 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Aug 26, 2009 9:48:34 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 1227 ms

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: tomcat-users.xml on Tomcat6

Posted by André Warnier <aw...@ice-sa.com>.
Zaki Akhmad wrote:
> Hello,
> 
> I've failed login on manager webapp and host-manager webapp. I've add
> the manager and admin role on tomcat-users.xml
> [/etc/tomcat6/tomcat-users.xml]. The status is HTTP Status 500.

That does not look like a login error, it looks like a "server error".
What does the Tomcat log say ?



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org