Tomcat Console & Manager App Error - Two Items

[Lou Pelagalli]

Hi,

I have Apache Tomcat/7.0.5.

1) When I tried to access the Manager App in Tomcat I received the dreaded "403 Access Denied You are not authorized to view this page." message. I checked my conf/tomcat-users.xml, code is below my signature, according to the instructions making sure the users and roles were not commented out, but still I get the message even after restarting Tomcat and then the pc.

2) I'm trying to view the Tomcat console. Is the Manager App the correct place to do it once I get in there?

Your help with either or both of these issues would be greatly appreciated.

Thanks,

Lou

<?xml version='1.0' encoding='cp1252'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->
<tomcat-users>
<!--
  NOTE:  By default, no user is included in the "manager-gui" role required
  to operate the "/manager/html" web application.  If you wish to use this app,
  you must define such a user - the username and password are arbitrary.
-->
<!--
  NOTE:  The sample user and role entries below are wrapped in a comment
  and thus are ignored when reading this file. Do not forget to remove
  <!.. ..> that surrounds them.
-->

  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>

</tomcat-users>

[William Brogden]

Now try defining and turning on the roles that control access to the manager and admin apps

<role rolename="manager"/>
<role rolename="admin"/>

Bill

[Lou Pelagalli]

Hi Bill,

I tried your suggestion, still get the same result.

The red lines are what I added.

<role rolename="manager"/>
<role rolename="admin"/> <role rolename="tomcat"/>
<role rolename="role1"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
<user username="role1" password="tomcat" roles="role1"/>
<user username="manager" password="manager" roles="manager"/>
<user username="admin" password="admin" roles="admin"/>

I clicked on manger webapp and tried loggin in with user=mannager, password=manager. Still get 403 Access Denied
You are not authorized to view this page.


Also I noticed the first line is
<?xml version='1.0' encoding='cp1252'?>
but should it be
<?xml version='1.0' encoding='utf-8'?>

like other examples I've see to use utf-8 encoding?

Thanks,

Lou