TOMCAT 7配置问题 403 Access Denied

TOMCAT 7配置问题 403 Access Denied

<tomcat-users>
<!--
  NOTE:  By default, no user is included in the "manager-gui" role required
  to operate the "/manager/html" web application.  If you wish to use this app,
  you must define such a user - the username and password are arbitrary.
-->
<!--
  NOTE:  The sample user and role entries below are wrapped in a comment
  and thus are ignored when reading this file. Do not forget to remove
  <!.. ..> that surrounds them.
-->

  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager-gui"/>
  <user username="admin" password="secret" roles="manager-gui"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>

</tomcat-users>


这是错误页面的信息：
You are not authorized to view this page. 

If you have already configured the Host Manager application to allow access and you have used your browsers back button, used a saved book-mark or similar then you may have triggered the cross-site request forgery (CSRF) protection that has been enabled for the HTML interface of the Host Manager application. You will need to reset this protection by returning to the main Host Manager page. Once you return to this page, you will be able to continue using the Host Manager appliction's HTML interface normally. If you continue to see this access denied message, check that you have the necessary permissions to access this application. 

If you have not changed any configuration files, please examine the file conf/tomcat-users.xml in your installation. That file must contain the credentials to let you use this webapp. 

我感觉没有错啊， 请高手指导

我来帮他解答

2011-1-4 13:49

满意回答

403无访问权限，不知你访问的哪个页面报的错。
1.
先把 <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager-gui"/>
  <user username="admin" password="secret" roles="manager-gui"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>

全注掉，看正常不。
如果还不正常，访问页面有什么提示？那可能是上面这个有错，找个正常的配置文件copy进来就好了。
看了其他人只改一个地方
我只这样改的：
<user username="admin" password="" roles="manager-gui"/>
主要是roles里的值不是以前的manager了，现在改成manager-gui就行了


我安下面的方法成功了，并且改密码也什么正常启动。
原文http://zhidao.baidu.com/question/212207709.html