tomcat8.0 manager403报错

修改conf/tomcat-users.xml

<role rolename="manager"/>

<role rolename="manager-gui"/>
<role rolename="admin"/>

<user username="user" password="password" roles="admin,manager,manager-gui"/>

如果这个配置文件不行就修改成这个：
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager-gui"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>
  <user username="tomcat" password="tomcat" roles="tomcat,manager-gui"/>
</tomcat-users>

同时还需要修改，如果没有文件就新建conf/Catalina/localhost/manager.xml 内容如下：

<Context privileged="true" antiResourceLocking="false"
         docBase="${catalina.home}/webapps/manager">     <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="^.*$" />
</Context>

无须重启tomcat即可生效。

引用原文：

Each deployed webapp has a context.xml file that lives in $CATALINA_BASE/conf/[enginename]/[hostname] (conf/Catalina/localhost by default) and has the same name as the webapp (manager.xml in this case). If no file is present, default values are used.
So, you need to create a file conf/Catalina/localhost/manager.xml and specify the rule you want to allow remote access.