Not sure about 4.0.4. It has to be getting the roles from somewhere, otherwise how does your existing tomcat-users.xml file know what "tomcat" or "role1" is? I only have access to 4.1.x versions of tomcat-users.xml, and they look like this:
<tomcat-users> <role rolename="tomcat"/> <role rolename="role1"/> <role rolename="manager"/> <role rolename="admin"/> <user username="tomcat" password="tomcat" roles="tomcat"/> <user username="both" password="tomcat" roles="tomcat,role1"/> <user username="role1" password="tomcat" roles="role1,manager"/> <user username="admin" password="admin" roles="admin,manager"/> </tomcat-users> Yes, if you wish to deploy a manager app per virtual host, you must do so. Not sure how it works in 4.0.4 (it might be broken). In 4.1.x, all you do is make a copy of manager.xml and drop it into the appropriate appBase ($CATALINA_HOME/appBase) for that host. John > -----Original Message----- > From: Andoni [mailto:[EMAIL PROTECTED]] > Sent: Thursday, February 20, 2003 11:35 AM > To: Tomcat Users List > Subject: Re: Error 500 when trying to run /manager app. > > > Sorry, let me clarify: > > In the documents you have linked below I see reference to the > tomcat-users.xml file and in it the tags: > > <!-- > NOTE: By default, no user is included in the "manager" > role required > to operate the "/manager" web application. If you wish to > use this app, > you must define such a user - the username and password are > arbitrary. > --> > <tomcat-users> > <user name="tomcat" password="tomcat" roles="tomcat" /> > <user name="administrator" password="password" roles="manager" /> > <user name="role1" password="tomcat" roles="role1" /> > <user name="both" password="tomcat" roles="tomcat,role1" /> > </tomcat-users> > > > But nowhere to I see mention of the <role rolename="manager" > /> tag. In > fact when I go to add this tag to my tomcat 4.0.4 > installation things start > to go wrong. > > I think my other problem was to do with multiple hosts. You > have to have a > manager application set up for each host I think? Do you not? > > Andoni. > > ----- Original Message ----- > From: "Turner, John" <[EMAIL PROTECTED]> > To: "'Tomcat Users List'" <[EMAIL PROTECTED]> > Sent: Thursday, February 20, 2003 4:24 PM > Subject: RE: Error 500 when trying to run /manager app. > > > > > > Yes, it applies to 4.0.x: > > http://jakarta.apache.org/tomcat/tomcat-4.0-doc/manager-howto.html > > http://jakarta.apache.org/tomcat/tomcat-4.0-doc/realm-howto.html > > > > Sorry, I'm really not clear what you are asking. The manager docs > > specifically state that you must manually add a role of > "manager" to any > > username that wishes to access the manager app (and > likewise, "admin" to > > access the admin app). Shipping Tomcat with a default > username with the > > role of "manager" already added for you is insecure. > > > > John > > > > > -----Original Message----- > > > From: Andoni [mailto:[EMAIL PROTECTED]] > > > Sent: Thursday, February 20, 2003 11:16 AM > > > To: Tomcat Users List > > > Subject: Re: Error 500 when trying to run /manager app. > > > > > > > > > I don't see the <role> tag documented anywhere. Sorry if > I missed it. > > > > > > It is included in the book I have but all the docs on the > > > site seem to have > > > tomcat-users.xml files without it. > > > > > > I have just included it in my tomcat 4.0.4 server and now it > > > won't start > > > java apps so I'm going to try removing it again. > > > > > > Please let me know if it applies to 4.0.x anyway. > > > > > > Andoni. > > > > > > > > > ----- Original Message ----- > > > From: "Turner, John" <[EMAIL PROTECTED]> > > > To: "'Tomcat Users List'" <[EMAIL PROTECTED]> > > > Sent: Thursday, February 20, 2003 3:57 PM > > > Subject: RE: Error 500 when trying to run /manager app. > > > > > > > > > > > > > > See "MemoryRealm": > > > > > > > > http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html > > > > > > > > John > > > > > > > > > > > > > -----Original Message----- > > > > > From: Andoni [mailto:[EMAIL PROTECTED]] > > > > > Sent: Thursday, February 20, 2003 10:57 AM > > > > > To: Tomcat Users List > > > > > Subject: Re: Error 500 when trying to run /manager app. > > > > > > > > > > > > > > > Where is this "role" tag documented? > > > > > > > > > > I don't see it anywhere in the docs. I have the app. > > > appearing on the > > > > > screen now and I am about to start testing it but I have not > > > > > installed any > > > > > "role" tags and there are none in the file. Are they > > > > > necessary? What do > > > > > they do? > > > > > > > > > > Andoni. > > > > > ----- Original Message ----- > > > > > From: "Roberts, Eric" <[EMAIL PROTECTED]> > > > > > To: "Tomcat Users List" <[EMAIL PROTECTED]> > > > > > Sent: Thursday, February 20, 2003 3:39 PM > > > > > Subject: RE: Error 500 when trying to run /manager app. > > > > > > > > > > > > > > > Add the role as well > > > > > > > > > > <?xml version='1.0' encoding='utf-8'?> > > > > > <tomcat-users> > > > > > <role rolename="tomcat"/> > > > > > <role rolename="role1"/> > > > > > <role rolename="manager"/> > > > > > <role rolename="admin"/> > > > > > <user username="tomcat" password="tomcat" roles="tomcat"/> > > > > > <user username="both" password="tomcat" > roles="tomcat,role1"/> > > > > > <user username="role1" password="tomcat" roles="role1"/> > > > > > <user username="admin" password="admin" > > > > > roles="admin,manager,role1,tomcat"/> > > > > > </tomcat-users> > > > > > > > > > > > > > > > -----Original Message----- > > > > > From: Andoni [mailto:[EMAIL PROTECTED]] > > > > > Sent: Donnerstag, 20. Februar 2003 13:15 > > > > > To: Tomcat Users List > > > > > Subject: Error 500 when trying to run /manager app. > > > > > > > > > > > > > > > Hello, > > > > > > > > > > I am getting an error 500 > > > > > ServletException > > > > > Root Cause: > > > > > java.lang.SecurityException: Servlet of class > > > > > org.apache.catalina.servlets.ManagerServlet is privileged and > > > > > cannot be > > > > > loaded by this web application > > > > > > > > > > Is this because I am using the wrong username / password? > > > > > > > > > > I have gone to tomcat-users.xml and it looks like: > > > > > <tomcat-users> > > > > > <user name="tomcat" password="tomcat" roles="tomcat" /> > > > > > <user name="administrator" password="password" > > > roles="manager" /> > > > > > <user name="role1" password="tomcat" roles="role1" /> > > > > > <user name="both" password="tomcat" > roles="tomcat,role1" /> > > > > > </tomcat-users> > > > > > > > > > > > > > > > I am trying to log in as the "administrator" user > that I added. > > > > > > > > > > What else do I have to do? > > > > > > > > > > Andoni. > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > > > For additional commands, e-mail: > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > > > For additional commands, e-mail: > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > > > For additional commands, e-mail: > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: > [EMAIL PROTECTED] > > > > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: > [EMAIL PROTECTED] > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
