Ok, this needs to be spelled out in the tutorial, it's unclear.  The word
"manager-script" makes it sounds like it is a script....  Thanks for the
information.

Added to tomcat-users.xml:
<user username="manager" password="manager" roles="manager-script"/>


$ ant install
Buildfile: build.xml
Trying to override old definition of datatype resources

prepare:

compile:

install:
   [deploy] OK - Deployed application at context path /tomcat-tutorial

BUILD SUCCESSFUL
Total time: 0 seconds
[david@david tomcat-tutorial]$



On Thu, Jan 23, 2014 at 2:53 PM, Konstantin Kolinko
<knst.koli...@gmail.com>wrote:

> 2014/1/24 Mark Thomas <ma...@apache.org>:
> > On 23/01/2014 22:39, David Williams wrote:
> >> Aside from simply stating that, can you provide a location of the
> script,
> >> some instructions etc?
> >>
> >>
> >> On Thu, Jan 23, 2014 at 2:38 PM, David Williams <da...@tongal.com>
> wrote:
> >>
> >>> That would be a nice add to the intro guide.  Its nowhere to be found
> in
> >>> the first three stages up to the install stage.
> >
> > Yes it is. Go and search this page:
> >
> http://tomcat.apache.org/tomcat-7.0-doc/appdev/processes.html#Test_Your_Web_Application
> >
> > for this text:
> > manager-script
> >
>
> Note: choose some random password.
>
> There exist worms that target the manager app and "manager" is one of
> well-known passwords.
>
> The manager application can be further secured by restricting IP
> addresses that have access to it with a RemoteAddrValve.
>
>
> http://tomcat.apache.org/tomcat-7.0-doc/manager-howto.html#Configuring_Manager_Application_Access
>
> http://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Remote_Address_Filter
>
> Best regards,
> Konstantin Kolinko
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>

Reply via email to