Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-15 Thread Konstantin Kolinko 
2016-08-15 6:22 GMT+03:00 Andrew M :
> Thank you so much ! Issue resolved. So why it was not asking for username and 
> password before ?? Also the standard documentation doesn't talk about 
> removing that tag from context.xml. One last thing though, I can access 
> "Server Status" and "Manager app" but not "Host Manager" ? I do have 
> admin-gui role defined so not sure why I cannot access it.
> Cheers


Read carefully:

http://tomcat.apache.org/tomcat-8.5-doc/security-howto.html#Securing_Management_Applications

http://tomcat.apache.org/tomcat-8.5-doc/manager-howto.html#Configuring_Manager_Application_Access

http://tomcat.apache.org/migration-85.html#Web_applications

Also, mailing list rules

http://tomcat.apache.org/lists.html#tomcat-users
-> Important -> 6. Top-posting is bad.



Best regards,
Konstantin Kolinko

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Andrew M 
Thank you so much ! Issue resolved. So why it was not asking for username and 
password before ?? Also the standard documentation doesn't talk about removing 
that tag from context.xml. One last thing though, I can access "Server Status" 
and "Manager app" but not "Host Manager" ? I do have admin-gui role defined so 
not sure why I cannot access it.
Cheers 

On Monday, 15 August 2016, 3:50, Mark Olsson  wrote:
 

 Tried that but no charm as of yet.
If I add comments like the one I have bold, I am unable to access tomcat
manager.So I have to uncomment it.
After uncomment. It says access denied...


Take just this out of context.xml and restart Tomcat and your browser.

**

Actually I don't know if restarting is necessary on either, but it can't
hurt.

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Mark Olsson 
Tried that but no charm as of yet.
If I add comments like the one I have bold, I am unable to access tomcat
manager.So I have to uncomment it.
After uncomment. It says access denied...


Take just this out of context.xml and restart Tomcat and your browser.

**

Actually I don't know if restarting is necessary on either, but it can't
hurt.

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Andrew M 
Tried that but no charm as of yet.
[root@docker1 META-INF]# cat /opt/tomcat/webapps/manager/META-INF/context.xml 

If I add comments like the one I have bold, I am unable to access tomcat 
manager.So I have to uncomment it.

After uncomment. It says access denied...

 

On Sunday, 14 August 2016, 23:14, Mark Thomas  wrote:
 

 On 14 August 2016 12:37:37 BST, Andrew M  
wrote:
>I have clear the history, tried different browsers, restarted tomcat
>several times. I'm not sure what you want me to comment/uncomment. My
>context.xml file is below:

That is the global context.xml. Check the web application specific context.xml 
at $CATALINA_BASE/webapps/manager/META-INF/context.xml

Mark


>root@docker1 conf]# cat context.xml encoding="UTF-8"?>
>           
>WEB-INF/web.xml   
>${catalina.base}/conf/web.xml
>        [root@docker1 conf]#  
>Spent lot of investigating but I'm still not sure what is the
>problem.
>
>On Sunday, 14 August 2016, 19:55, Mark Olsson 
>wrote:
> 
>
>On Sun, Aug 14, 2016 at 1:43 AM, Andrew M
>
>wrote:
>
>> I tried disabling SE Linux but no charm :(
>> What is interesting is I have enabled finest level of debugging but I
>> cannot see anything in log files as ALL or finest level of logging.
>>
>
>Make sure if you have an address filter in
>webapps/manager/META-INF/context.xml that it's correct, and try
>removing or
>commenting it out temporarily even if it does look correct just in
>case.
>
>Since your first message was 18 hours ago, I'm assuming at some point
>you
>have closed and reopened your browser?  On my systems, if I enter the
>wrong
>user or password to get into the management console I get the 403 and I
>can't get back to the login prompt without completely closing and
>restarting the browser.  I don't know if that's intentional or just a
>side
>effect of Firefox and the various privacy extensions I use, never
>bothered
>to look for the cause.  So, depending on your browser, try
>closing/restarting, clearing caches and active logins, even try from a
>different browser.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Mark Thomas 
On 14 August 2016 12:37:37 BST, Andrew M  wrote:
>I have clear the history, tried different browsers, restarted tomcat
>several times. I'm not sure what you want me to comment/uncomment. My
>context.xml file is below:

That is the global context.xml. Check the web application specific context.xml 
at $CATALINA_BASE/webapps/manager/META-INF/context.xml

Mark


>root@docker1 conf]# cat context.xml encoding="UTF-8"?>
>           
>WEB-INF/web.xml   
>${catalina.base}/conf/web.xml
>        [root@docker1 conf]#  
>Spent lot of investigating but I'm still not sure what is the
>problem.
>
>On Sunday, 14 August 2016, 19:55, Mark Olsson 
>wrote:
> 
>
>On Sun, Aug 14, 2016 at 1:43 AM, Andrew M
>
>wrote:
>
>> I tried disabling SE Linux but no charm :(
>> What is interesting is I have enabled finest level of debugging but I
>> cannot see anything in log files as ALL or finest level of logging.
>>
>
>Make sure if you have an address filter in
>webapps/manager/META-INF/context.xml that it's correct, and try
>removing or
>commenting it out temporarily even if it does look correct just in
>case.
>
>Since your first message was 18 hours ago, I'm assuming at some point
>you
>have closed and reopened your browser?  On my systems, if I enter the
>wrong
>user or password to get into the management console I get the 403 and I
>can't get back to the login prompt without completely closing and
>restarting the browser.  I don't know if that's intentional or just a
>side
>effect of Firefox and the various privacy extensions I use, never
>bothered
>to look for the cause.  So, depending on your browser, try
>closing/restarting, clearing caches and active logins, even try from a
>different browser.



-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Andrew M 
I have clear the history, tried different browsers, restarted tomcat several 
times. I'm not sure what you want me to comment/uncomment. My context.xml file 
is below:
root@docker1 conf]# cat context.xml 
            WEB-INF/web.xml    
${catalina.base}/conf/web.xml
        [root@docker1 conf]#  
Spent lot of investigating but I'm still not sure what is the problem.

On Sunday, 14 August 2016, 19:55, Mark Olsson  
wrote:
 

 On Sun, Aug 14, 2016 at 1:43 AM, Andrew M 
wrote:

> I tried disabling SE Linux but no charm :(
> What is interesting is I have enabled finest level of debugging but I
> cannot see anything in log files as ALL or finest level of logging.
>

Make sure if you have an address filter in
webapps/manager/META-INF/context.xml that it's correct, and try removing or
commenting it out temporarily even if it does look correct just in case.

Since your first message was 18 hours ago, I'm assuming at some point you
have closed and reopened your browser?  On my systems, if I enter the wrong
user or password to get into the management console I get the 403 and I
can't get back to the login prompt without completely closing and
restarting the browser.  I don't know if that's intentional or just a side
effect of Firefox and the various privacy extensions I use, never bothered
to look for the cause.  So, depending on your browser, try
closing/restarting, clearing caches and active logins, even try from a
different browser.

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Mark Olsson 
On Sun, Aug 14, 2016 at 1:43 AM, Andrew M 
wrote:

> I tried disabling SE Linux but no charm :(
> What is interesting is I have enabled finest level of debugging but I
> cannot see anything in log files as ALL or finest level of logging.
>

Make sure if you have an address filter in
webapps/manager/META-INF/context.xml that it's correct, and try removing or
commenting it out temporarily even if it does look correct just in case.

Since your first message was 18 hours ago, I'm assuming at some point you
have closed and reopened your browser?  On my systems, if I enter the wrong
user or password to get into the management console I get the 403 and I
can't get back to the login prompt without completely closing and
restarting the browser.  I don't know if that's intentional or just a side
effect of Firefox and the various privacy extensions I use, never bothered
to look for the cause.  So, depending on your browser, try
closing/restarting, clearing caches and active logins, even try from a
different browser.

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-14 Thread Andrew M 
I tried disabling SE Linux but no charm :(
What is interesting is I have enabled finest level of debugging but I cannot 
see anything in log files as ALL or finest level of logging.
logging.properties file.[CODE][root@docker1 logs]# cat 
../conf/logging.properties # Licensed to the Apache Software Foundation (ASF) 
under one or more# contributor license agreements.  See the NOTICE file 
distributed with# this work for additional information regarding copyright 
ownership.# The ASF licenses this file to You under the Apache License, Version 
2.0# (the "License"); you may not use this file except in compliance with# the 
License.  You may obtain a copy of the License at##     
http://www.apache.org/licenses/LICENSE-2.0## Unless required by applicable law 
or agreed to in writing, software# distributed under the License is distributed 
on an "AS IS" BASIS,# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either 
express or implied.# See the License for the specific language governing 
permissions and# limitations under the License.
handlers = 1catalina.org.apache.juli.AsyncFileHandler, 
2localhost.org.apache.juli.AsyncFileHandler, 
3manager.org.apache.juli.AsyncFileHandler, 
4host-manager.org.apache.juli.AsyncFileHandler, java.util.logging.ConsoleHandler
.handlers = 1catalina.org.apache.juli.AsyncFileHandler, 
java.util.logging.ConsoleHandler
# Handler specific 
properties.# Describes specific configuration info for 
Handlers.
1catalina.org.apache.juli.AsyncFileHandler.level = 
ALL1catalina.org.apache.juli.AsyncFileHandler.directory = 
${catalina.base}/logs1catalina.org.apache.juli.AsyncFileHandler.prefix = 
catalina.
2localhost.org.apache.juli.AsyncFileHandler.level = 
ALL2localhost.org.apache.juli.AsyncFileHandler.directory = 
${catalina.base}/logs2localhost.org.apache.juli.AsyncFileHandler.prefix = 
localhost.
3manager.org.apache.juli.AsyncFileHandler.level = 
ALL3manager.org.apache.juli.AsyncFileHandler.directory = 
${catalina.base}/logs3manager.org.apache.juli.AsyncFileHandler.prefix = manager.
4host-manager.org.apache.juli.AsyncFileHandler.level = 
ALL4host-manager.org.apache.juli.AsyncFileHandler.directory = 
${catalina.base}/logs4host-manager.org.apache.juli.AsyncFileHandler.prefix = 
host-manager.
java.util.logging.ConsoleHandler.level = 
ALLjava.util.logging.ConsoleHandler.formatter = org.apache.juli.OneLineFormatter

# Facility specific 
properties.# Provides extra control for each 
logger.
org.apache.catalina.core.ContainerBase.[Catalina].[localhost].level = 
ALLorg.apache.catalina.core.ContainerBase.[Catalina].[localhost].handlers = 
2localhost.org.apache.juli.AsyncFileHandler
org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/manager].level 
= 
ALLorg.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/manager].handlers
 = 3manager.org.apache.juli.AsyncFileHandler
org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/host-manager].level
 = 
ALLorg.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/host-manager].handlers
 = 4host-manager.org.apache.juli.AsyncFileHandler
# For example, set the org.apache.catalina.util.LifecycleBase logger to log# 
each component that extends LifecycleBase changing 
state:org.apache.catalina.util.LifecycleBase.level = ALL
# To see debug messages in TldLocationsCache, uncomment the following 
line:org.apache.jasper.compiler.TldLocationsCache.level = ALL
# To see debug messages for HTTP/2 handling, uncomment the following 
line:org.apache.coyote.http2.level = ALL
# To see debug messages for WebSocket handling, uncomment the following 
line:org.apache.tomcat.websocket.level = 
ALLorg.apache.catalina.session.level=ALLjava.util.logging.ConsoleHandler.level=ALL[root@docker1
 logs]# [/CODE]
output of catalina.out
[CODE]13-Aug-2016 23:14:26.763 INFO [localhost-startStop-1] 
org.apache.catalina.startup.HostConfig.deployDirectory Deploying web 
application directory /opt/apache-tomcat-8.5.4/webapps/ROOT13-Aug-2016 
23:16:20.064 INFO [localhost-startStop-1] 
org.apache.catalina.util.SessionIdGeneratorBase.createSecureRandom Creation of 
SecureRan...skipping...14-Aug-2016 18:38:29.084 FINE 
[ContainerBackgroundProcessor[StandardEngine[Catalina]]] 
org.apache.catalina.session.ManagerBase.processExpires Start expire sessions 
StandardManager at 1471163909084 sessioncount 0[/CODE]
output of manager.log file[CODE]14-Aug-2016 18:34:35.878 FINE 
[http-nio-8080-exec-10] 
org.apache.catalina.core.ApplicationDispatcher.doForward  Disabling the 
response for further output[/CODE] 

On Sunday, 14 August 2016, 10:26, Andrew M  
wrote:
 

 I'm not sure if this is related in any way but I just exported variable 
JAVA_HOME in setclasspath.sh

export JAVA_HOME=/usr/java/default

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-13 Thread Andrew M 
I'm not sure if this is related in any way but I just exported variable 
JAVA_HOME in setclasspath.sh

export JAVA_HOME=/usr/java/default

Still not challenge to input the credentials 

On Sunday, 14 August 2016, 8:35, Andrew M  wrote:
 

 Yes, absolutely. I restarted after adding snippet several times but still not 
charm. What I observed is it doesn't even ask me for username and password but 
just says directly Access denied (403). 

On Sunday, 14 August 2016, 2:57, "Caldarale, Charles R" 
 wrote:
 

 > From: Andrew M [mailto:bluemind2...@yahoo.com.INVALID] 
> Subject: Unable to access Manager App, Host Manager and Server Status urls

> I have added these three lines in my tomcat-users.xml file:
> 
> 

And did you remove the comment markers that bracket that area of the file?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Re: Unable to access Manager App, Host Manager and Server Status urls

2016-08-13 Thread Andrew M 
Yes, absolutely. I restarted after adding snippet several times but still not 
charm. What I observed is it doesn't even ask me for username and password but 
just says directly Access denied (403). 

On Sunday, 14 August 2016, 2:57, "Caldarale, Charles R" 
 wrote:
 

 > From: Andrew M [mailto:bluemind2...@yahoo.com.INVALID] 
> Subject: Unable to access Manager App, Host Manager and Server Status urls

> I have added these three lines in my tomcat-users.xml file:
> 
> 

And did you remove the comment markers that bracket that area of the file?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

RE: Unable to access Manager App, Host Manager and Server Status urls

2016-08-13 Thread Caldarale, Charles R 
> From: Andrew M [mailto:bluemind2...@yahoo.com.INVALID] 
> Subject: Unable to access Manager App, Host Manager and Server Status urls

> I have added these three lines in my tomcat-users.xml file:
> 
> 

And did you remove the comment markers that bracket that area of the file?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org