Details | Last modification | View Log | RSS feed
| Rev | Author | Line No. | Line |
|---|---|---|---|
| 771 | blopes | 1 | <%-- |
| 2 | Licensed to the Apache Software Foundation (ASF) under one or more |
||
| 3 | contributor license agreements. See the NOTICE file distributed with |
||
| 4 | this work for additional information regarding copyright ownership. |
||
| 5 | The ASF licenses this file to You under the Apache License, Version 2.0 |
||
| 6 | (the "License"); you may not use this file except in compliance with |
||
| 7 | the License. You may obtain a copy of the License at |
||
| 8 | |||
| 9 | http://www.apache.org/licenses/LICENSE-2.0 |
||
| 10 | |||
| 11 | Unless required by applicable law or agreed to in writing, software |
||
| 12 | distributed under the License is distributed on an "AS IS" BASIS, |
||
| 13 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||
| 14 | See the License for the specific language governing permissions and |
||
| 15 | limitations under the License. |
||
| 16 | --%> |
||
| 17 | <%@ page session="false" trimDirectiveWhitespaces="true" %> |
||
| 18 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> |
||
| 19 | <html> |
||
| 20 | <head> |
||
| 21 | <title>401 Unauthorized</title> |
||
| 22 | <style type="text/css"> |
||
| 23 | <!-- |
||
| 24 | BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;font-size:12px;} |
||
| 25 | H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} |
||
| 26 | PRE, TT {border: 1px dotted #525D76} |
||
| 27 | A {color : black;}A.name {color : black;} |
||
| 28 | --> |
||
| 29 | </style> |
||
| 30 | <link href="<%=request.getContextPath()%>/images/favicon.ico" rel="icon" type="image/x-icon" /> |
||
| 31 | </head> |
||
| 32 | <body> |
||
| 33 | <h1>401 Unauthorized</h1> |
||
| 34 | <p> |
||
| 35 | You are not authorized to view this page. If you have not changed |
||
| 36 | any configuration files, please examine the file |
||
| 37 | <tt>conf/tomcat-users.xml</tt> in your installation. That |
||
| 38 | file must contain the credentials to let you use this webapp. |
||
| 39 | </p> |
||
| 40 | <p> |
||
| 41 | For example, to add the <tt>admin-gui</tt> role to a user named |
||
| 42 | <tt>tomcat</tt> with a password of <tt>s3cret</tt>, add the following to the |
||
| 43 | config file listed above. |
||
| 44 | </p> |
||
| 45 | <pre> |
||
| 46 | <role rolename="admin-gui"/> |
||
| 47 | <user username="tomcat" password="s3cret" roles="admin-gui"/> |
||
| 48 | </pre> |
||
| 49 | <p> |
||
| 50 | Note that for Tomcat 7 onwards, the roles required to use the host manager |
||
| 51 | application were changed from the single <tt>admin</tt> role to the |
||
| 52 | following two roles. You will need to assign the role(s) required for |
||
| 53 | the functionality you wish to access. |
||
| 54 | </p> |
||
| 55 | <ul> |
||
| 56 | <li><tt>admin-gui</tt> - allows access to the HTML GUI</li> |
||
| 57 | <li><tt>admin-script</tt> - allows access to the text interface</li> |
||
| 58 | </ul> |
||
| 59 | <p> |
||
| 60 | The HTML interface is protected against CSRF but the text interface is not. |
||
| 61 | To maintain the CSRF protection: |
||
| 62 | </p> |
||
| 63 | <ul> |
||
| 64 | <li>Users with the <tt>admin-gui</tt> role should not be granted the |
||
| 65 | <tt>admin-script</tt> role.</li> |
||
| 66 | <li>If the text interface is accessed through a browser (e.g. for testing |
||
| 67 | since this interface is intended for tools not humans) then the browser |
||
| 68 | must be closed afterwards to terminate the session.</li> |
||
| 69 | </ul> |
||
| 70 | </body> |
||
| 71 | |||
| 72 | </html> |