tomcat7.0

有两个办法可以在系统中部署web服务。

1.为你的web服务建立一个只包括context内容的XML片断文件，并把该文件放到$CATALINA_BASE/conf/Catalina/localhost目录下。这个web应用本身可以存储在硬盘上的任何地方。

2.拷贝你的WAR文件或者你的web应用文件夹（包括该web的所有内容，即该文件夹的第一级子目录中必定有个WEB-INF目录，其中有web.xml配置文件）到$CATALINA_BASE/webapps目录下。

如果你自己去做，需要重新启动Tomcat才能生效。

也可不重启Tomcat来部署web应用，下面的两种方法本质上就是上面的两种方法，只是通过Tomcat的管理界面来做，并且无须重启Tomcat。

通过链接http://localhost:8080/manager/html打开tomcat管理界面，可用的用户名和密码在$CATALINA_BASE/conf/tomcat-users.xml文件中。

tomcat-users.xml有如下定义

<tomcat-users>
<!--
  NOTE:  By default, no user is included in the "manager-gui" role required
  to operate the "/manager/html" web application.  If you wish to use this app,
  you must define such a user - the username and password are arbitrary.
-->
<!--
  NOTE:  The sample user and role entries below are wrapped in a comment
  and thus are ignored when reading this file. Do not forget to remove
  <!.. ..> that surrounds them.
-->
<!--
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="role1" password="tomcat" roles="role1"/>
-->

但是将以上取消注释以后出现如下403访问错误

403 Access Denied

You are not authorized to view this page.

If you have already configured the Manager application to allow access and you have used your browsers back button, used a saved book-mark or similar then you may have triggered the cross-site request forgery (CSRF) protection that has been enabled for the HTML interface of the Manager application. You will need to reset this protection by returning to the main Manager page. Once you return to this page, you will be able to continue using the Manager appliction's HTML interface normally. If you continue to see this access denied message, check that you have the necessary permissions to access this application.

If you have not changed any configuration files, please examine the file conf/tomcat-users.xml in your installation. That file must contain the credentials to let you use this webapp.

For example, to add the manager-gui role to a user named tomcat with a password of s3cret, add the following to the config file listed above.

<role rolename="manager-gui"/>
<user username="tomcat" password="s3cret" roles="manager-gui"/>

Note that for Tomcat 7 onwards, the roles required to use the manager application were changed from the single manager role to the following four roles. You will need to assign the role(s) required for the functionality you wish to access.

• manager-gui - allows access to the HTML GUI and the status pages
• manager-script - allows access to the text interface and the status pages
• manager-jmx - allows access to the JMX proxy and the status pages
• manager-status - allows access to the status pages only

The HTML interface is protected against CSRF but the text and JMX interfaces are not. To maintain the CSRF protection:

• Users with the manager-gui role should not be granted either the manager-script or manager-jmx roles.
• If the text or jmx interfaces are accessed through a browser (e.g. for testing since these interfaces are intended for tools not humans) then the browser must be closed afterwards to terminate the session.

仔细读上面的提示就是讲在tomcat7中如果要访问这个页面，需要添加 manager-gui role，而在原来的文件中即使解除注释也是没有这个role的，所以添加后即可访问该页面