Tomcat用户名问题

在tomcat 7 免安装版本中，用户名和密码默认都是没有启用的，需要我们手动在tomcat-users.xml文件里指定（在conf文件夹下），这个文件里面已经写好了一些账号的信息，只是默认的是注释了而已，取消注释之后，用这个文件提供的用户名和密码去访问的时候，会出现403错误，这是因为我们没有指定用户所拥有的权限的原因、如我们现在想访问tomcat中的图形化管理应用的功能，也就是Manager App，我们就需要指定manager-gui的权限，想访问host manager 就必须指定admin-gui权限等。下面是一个可用的tomcat-users.xml文件。

<?xml version='1.0' encoding='utf-8'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->  
<tomcat-users>
<!--
  NOTE:  By default, no user is included in the "manager-gui" role required
  to operate the "/manager/html" web application.  If you wish to use this app,
  you must define such a user - the username and password are arbitrary.
-->
<!--
  NOTE:  The sample user and role entries below are wrapped in a comment
  and thus are ignored when reading this file. Do not forget to remove
  <!.. ..> that surrounds them.   
-->

  <role rolename="admin-gui"/>    
  <role rolename="manager-gui"/>
  <user username="tomcat" password="tomcat" roles="manager-gui,admin-gui"/>

</tomcat-users>