topic Re: Unable to access tomcat manager in Alfresco Archive

Unable to access tomcat manager

soumyakarmakar — Thu, 29 Mar 2012 13:45:33 GMT

Hi, I am able to access the tomcat at http://10.129.151.171:8080but not able login to Tomcat Manager with username tomcat and passwd tomcat.The tomcat configuration file is as below:-[root@dms ]# cat /opt/alfresco-4.0.d/tomcat/conf/tomcat-users.xml<?xml version='1.0' encoding='utf-8'?><

Re: Unable to access tomcat manager

jpotts — Thu, 29 Mar 2012 23:34:59 GMT

This is unlikely to be caused by something Alfresco-specific. Perhaps try an Apache Tomcat forum?

Also, in case it helps, I added the role and user to my tomcat-users.xml exactly as you've specified and it worked fine for me.

Good luck!

Jeff

Re: Unable to access tomcat manager

mitpatoliya — Fri, 30 Mar 2012 03:55:45 GMT

your configuration is showing the password is root123.
Try with that.This is the only configuration you require for the tomcat manger.
You should be able to access that.

Re: Unable to access tomcat manager

munro43 — Wed, 04 Apr 2012 21:26:53 GMT

Hi,

Please have a look at:
https://forums.alfresco.com/en/viewtopic.php?f=8&t=42597

Regards and thanks
Ronald Munjoma

Re: Unable to access tomcat manager

muralidharand — Mon, 03 Sep 2012 08:24:11 GMT

Hi all,
I'm also facing the same issue with tomcat with alfresco 4.0.2 enterprise edition trial.

Here is my tomcat-user.xml


 <role rolename="manager"/>
  <role rolename="manager-gui"/>
  <user username="admin" password="admin" roles="manager,manager-gui"/>
  
  <user username="tomcat" password="root123" roles="manager"/>
  <user username="CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB" roles="repoclient" password="null"/>
  <user username="CN=Alfresco Repository, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB" roles="repository" password="null"/>

‍‍‍‍‍‍‍‍‍‍

I tried with both admin and tocmat users and nothing worked out.
Please help me.

Re: Unable to access tomcat manager

muralidharand — Thu, 04 Oct 2012 04:40:55 GMT

I found a workaround for this (ie) skipping the authentication part.
Don't try this in your production environment.
Go to alfresco/tomcat/webapps/manager/web-inf/web.xml file.

Comment out the <security-constraint> as mentioned below.

Restart your tomcat.

Now you should be able to access tomcat manager application without any authentication.


<!– Define a Security Constraint on this Application –>
  <!– <security-constraint>
    <web-resource-collection>
      <web-resource-name>Manager commands</web-resource-name>
      <url-pattern>/list</url-pattern>
      <url-pattern>/expire</url-pattern>
      <url-pattern>/sessions</url-pattern>
      <url-pattern>/start</url-pattern>
      <url-pattern>/stop</url-pattern>
      <url-pattern>/install</url-pattern>
      <url-pattern>/remove</url-pattern>
      <url-pattern>/deploy</url-pattern>
      <url-pattern>/undeploy</url-pattern>
      <url-pattern>/reload</url-pattern>
      <url-pattern>/save</url-pattern>
      <url-pattern>/serverinfo</url-pattern>
      <url-pattern>/roles</url-pattern>
      <url-pattern>/resources</url-pattern>
      <url-pattern>/findleaks</url-pattern>
    </web-resource-collection>
    <auth-constraint>
        
       <role-name>manager-script</role-name>
       <role-name>manager</role-name>
    </auth-constraint>
  </security-constraint>

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>HTML Manager commands</web-resource-name>
      <url-pattern>/html/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      
       <role-name>manager-gui</role-name>
       <role-name>manager</role-name>
    </auth-constraint>
  </security-constraint>

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>JMX proxy</web-resource-name>
      <url-pattern>/jmxproxy/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       
       <role-name>manager-jmx</role-name>
       <role-name>manager</role-name>
    </auth-constraint>
  </security-constraint>

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>Status</web-resource-name>
      <url-pattern>/status/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       
       <role-name>manager-status</role-name>
       <role-name>manager-gui</role-name>
       <role-name>manager-script</role-name>
       <role-name>manager-jmx</role-name>
       <role-name>manager</role-name>
    </auth-constraint>
  </security-constraint>–>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope this helps someone.

Re: Unable to access tomcat manager

mike69d — Mon, 26 Nov 2012 20:58:00 GMT

I've got a better(IMHO) solution:

in alfresco/tomcat/conf/Catalina/localhost/manager.xml change the default <Context> element to the following:


<Context antiResourceLocking="false" privileged="true" useHttpOnly="true" override="true">
  <Valve className="org.apache.catalina.authenticator.BasicAuthenticator" securePagesWithPragma="false" />
</Context>
‍‍‍‍‍

This would replace SSLAuthenticator with BasicAuthenticator just for the manager application while keeping it for the rest of the site, which should still keep the IE7&8 SSL download bug fixed.

Do the same for host-manager.xml if needed.

Re: Unable to access tomcat manager

maeschenbrenner — Wed, 16 Jan 2013 13:56:11 GMT

HI

I'm using Alfresco Enterprise 4.1 vith Tomcat 6.0.35 and apply the folowing tomcat-user.xml content to make it work.

<tomcat-users>
<role rolename="manager-gui"/>
<role rolename="manager-status"/>
<role rolename="manager-jmx"/>
<role rolename="manager-script"/>

  <user username="CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB" roles="repoclient" password="null"/>
  <user username="CN=Alfresco Repository, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB" roles="repository" password="null"/>
  <user username="admin" roles="admin" password="admin"/>
  <user username="manager" roles="manager,manager-gui,manager-status" password="manager"/>
  <user username="manager2" roles="manager-jmx,manager-script" password="manager"/>

</tomcat-users>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope it can help…

Re: Unable to access tomcat manager

muralidharand — Wed, 16 Jan 2013 14:01:00 GMT

I tried the same thing before coming to alfresco forum in alfresco 4.0.2.
Let me check once again with 4.1.

Re: Unable to access tomcat manager

maeschenbrenner — Wed, 30 Jan 2013 10:43:50 GMT

The previous indications makes "admin" and "manager"s accounts work fine but Alfresco accounts do not work anymore…

Seams that syntaxe used for alfresco users (CN=…, OU=… etc) does not accept role definitions.

My workaround : I have 2 config files. One is used for admin needs while users cannot access alfresco.

This is Ok only for Test, demos etc.

Does anyone get a solution allowing both profiles?

Thanks,

Re: Unable to access tomcat manager

karrahahu1 — Thu, 11 Feb 2016 09:47:05 GMT

Seams that syntaxe used for alfresco users (CN=…, OU=… etc) does not accept role definitions.????