1. Mailing list rules: http://tomcat.apache.org/lists.html#tomcat-users -> 6. Top-posting is bad.
2. "192.168.44.1" in access log is client IP, not server IP. AccessLogValve can be configured to log "Local IP address", but that is not the default configuration. 3. The Manager web application is protected by BASIC authentication. When it asks for credentials it is HTTP response status code 401. Response status code 403 means that your request is rejected immediately, without asking for credentials. This is usually a doing of a RemoteAddrValve. See "Securing Management Applications" section in Security Guide http://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Securing_Management_Applications Since r1734267 a RemoteAddrValve.is configured by default. 2016-06-07 22:17 GMT+03:00 saved lion <savedl...@gmail.com>: > my host ip is 192.168.44.131, but it is 192.168.44.1 in the access log, is > it a problem? > > inet addr:192.168.44.131 Bcast:192.168.44.255 Mask:255.255.255.0 > > > On Tue, Jun 7, 2016 at 3:14 PM, saved lion <savedl...@gmail.com> wrote: > >> at the first, I added below entries, the problem is same. >> >> >> <!-- user manager can access only manager section --> >> <role rolename="manager-gui" /> >> <user username="manager" password="_SECRET_PASSWORD_" roles="manager-gui" /> >> >> <!-- user admin can access manager and admin section both --> >> <role rolename="admin-gui" /> >> <user username="admin" password="_SECRET_PASSWORD_" >> roles="manager-gui,admin-gui" /> >> >> >> On Tue, Jun 7, 2016 at 3:09 PM, Hardibo Pierre-Jean <cont...@hardibopj.com >> > wrote: >> >>> me i put : manager, manager-ui, admin and admin-ui roles >>> >>> >>> Le 07/06/2016 21:07, saved lion a écrit : >>> >>>> Hi, >>>> >>>> I installed an instance on /opt/tomcat9/apache-tomcat-9.0.0.M6/. No >>>> problems to browse http://host_ip:8080. >>>> >>>> There is one issue to access 'manager app," though I copied and pasted >>>> the >>>> two lines for role and user. >>>> >>>> <tomcat-users xmlns="http://tomcat.apache.org/xml"; >>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; >>>> xsi:schemaLocation="http://tomcat.apache.org/xml >>>> tomcat-users.xsd" >>>> version="1.0"> >>>> >>>> <role rolename="manager-gui"/> >>>> <user username="tomcat" password="s3cret" roles="manager-gui"/> >>>> >>>> </tomcat-users> >>>> >>>> $ cat >>>> >>>> /opt/tomcat9/apache-tomcat-9.0.0.M6/logs/localhost_access_log.2016-06-07.txt >>>> 192.168.44.1 - - [07/Jun/2016:11:08:37 -0700] "GET / HTTP/1.1" 200 11254 >>>> 192.168.44.1 - - [07/Jun/2016:11:08:40 -0700] "GET /manager/html >>>> HTTP/1.1" >>>> 403 3429 >>>> 192.168.44.1 - - [07/Jun/2016:11:11:02 -0700] "GET / HTTP/1.1" 200 11254 >>>> 192.168.44.1 - - [07/Jun/2016:11:12:26 -0700] "GET /manager/status >>>> HTTP/1.1" 403 3429 >>>> 192.168.44.1 - - [07/Jun/2016:11:15:50 -0700] "GET /manager/status >>>> HTTP/1.1" 403 3429 >>>> 192.168.44.1 - - [07/Jun/2016:11:15:55 -0700] "GET /manager/html >>>> HTTP/1.1" >>>> 403 3429 >>>> 192.168.44.1 - - [07/Jun/2016:11:55:58 -0700] "GET /manager/html >>>> HTTP/1.1" >>>> 403 3429 >>>> $ >>>> >>>> The problem looks simple, it did spend couple of days. >>>> >>>> Any quick help? >>>> Thanks, >>>> sl >>>> >>>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >>> >> --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
