Tomcat-6.0.20 and user authentication

Question

The problem

A tomcat manager page can not be accessed by a user granted a manager role.

The things I tryed to do

I added a user with a manager role into tomcat-users.xml:

<role rolename="manager"/>
<user username="emanemos" password="password" roles="manager"/>

I also looked up the $CATALINA_HOME/webapps/manager/WEB-INF/web.xml to be sure that manager role is really used to access the application:

<auth-constraint>
  <!-- NOTE:  This role is not present in the default users file -->
  <role-name>manager</role-name>
</auth-constraint>

<!-- Define the Login Configuration for this Application -->
<login-config>
  <auth-method>BASIC</auth-method>
  <realm-name>Tomcat Manager Application</realm-name>
</login-config>

<!-- Security roles referenced by this web application -->
<security-role>
  <description>
    The role that is required to log in to the Manager Application
  </description>
  <role-name>manager</role-name>
</security-role>

However, the manager application still asks for a login-password pair in an endless loop ignoring my input.

Does anybody have any ideas?

Answer 1

Did you restart Tomcat after making the changes to tomcat-users.xml?