When I first go to the manager application http://localhost:8080/manager/html, a window appears in the browser window asking you to enter a username and password. By entering the wrong username and password, the page returned 403 (access denied).
So, I worked a little with Google and installed the following:
<role rolename="manager-gui" />
<user username="admin" password="tomcat" roles="manager-gui"/>
<user password="tom" roles="manager-script,admin" username="tom"/>
<user password="tomcat" roles="manager-script,admin" username="tomcat"/>
After rebooting tomcat, the manager application this time displays 403 pages directly without asking for a username and password. So I'm a little confused. What authentication does this manager application use? And how can I enter the manager application?
source
share