Home / server / Questions / 982207
Accepted
hell_storm2004
Asked: 2019-09-07 05:00:50 +0800 CST

Changing from Localhost to Computer Name Throws 403 Error (Tomcat 9)

  • 772

I am trying to run Tomcat 9. I have configured it to run with SSL. So when I am accessing the tomcat URL with:

https://localhost:8443/manager/html

It works fine. But when I try to run it with my computer name I get the 403 error saying I should rectify my tomcat-users.xml. I have the XML fine setup just fine. But not sure what to do in this case. I have setup the hosts file with my computer name entry.

Is there any more setting that i need to do in order get it to work?

My users file has these entries:

<role rolename="admin-gui"/>
<role rolename="manager-gui"/>
<role rolename="manager-jmx"/>
<role rolename="manager-script"/>
<role rolename="manager-status"/>

<user password="admin" roles="manager-gui,admin-gui" username="admin"/>

I have attached the error screen as well.

Tomcat error

tomcat

1 Answers

  1. Best Answer

    You need to allow access to the manager GUI explicitly for hosts other than localhost by changing the Valve in ../webapps/manager/META-INF/context.xml:

    Original:

    <Context antiResourceLocking="false" privileged="true" >
  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
         allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />
  <Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/> 
</Context>

    Either comment it out like this:

    <Context antiResourceLocking="false" privileged="true" >
  <!-- <Valve className="org.apache.catalina.valves.RemoteAddrValve" -->
         <!-- allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> -->
  <!-- <Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/> -->
</Context>

    Or change the IP inside the Valve to the IP you need, or add it to the list.

    • 2