Hello
Setup: Alfresco application using tomcat 7.0.82 installed on Windows 2016 Server.
Problem: Error 401 Unauthorized - When typing http://localhost:8080/manager/html after entering manager
login credentials.
http://localhost:8080 works fine and returns the alfresco main page.
* \tomcat\conf\tomcat-users.xml file edited as follows:
<?xml version="1.0" encoding="UTF-8"?>
<tomcat-users>
<role rolename="manager-gui"/>
<role rolename="manager-status"/>
<role rolename="manager-jmx"/>
<role rolename="manager-script"/>
<user username="manager" roles="manager-gui, manager-status, manager-jmx, manager-script" password="whatever"/>
</tomcat-users>
* \tomcat\conf\Catalina\localhost\manager.xml file was created as follows:
<?xml version="1.0" encoding="UTF-8"?>
<Context antiResourceLocking="false" privileged="true" useHttpOnly="true" override="true">
<Valve className="org.apache.catalina.authenticator.BasicAuthenticator" securePagesWithPragma="false" />
</Context >
* \tomcat\webapps\manager\META-INF\context.xml file edited as follows:
<?xml version="1.0" encoding="UTF-8"?>
<Context antiResourceLocking="false" privileged="true" >
<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />
<Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/>
</Context>
* Restarted the Tomcat7 Windows Service after the above changes.
Question-1: What other files are involved in this manager login process ?
Question-2: Shall I consider/look at the Folders/files permissions of the tomcat production server running the Alfresco application which may have tweaked file permissions for security reasons ?
Note-1: I have installed the same tomcat version on a Lab VM (Win 2016) and made the above changes/additions and it just worked fine (all the rest is kept by default)
Note-2: The difference I noticed between Alfresco Tomcat implementation and a plain default tomcat Server installation is that Alfresco Tomcat grants only Read and Execute on the above files for All Users while the plain installation of tomcat grants Full control on these files by default.
Note-3: Even when Changing the above file permissions to "Full Control" for "All Users" on Alfresco Server, did not help.
Please advise
Thanks
Ask for and offer help to other Alfresco Content Services Users and members of the Alfresco team.
Related links:
By using this site, you are agreeing to allow us to collect and use cookies as outlined in Alfresco’s Cookie Statement and Terms of Use (and you have a legitimate interest in Alfresco and our products, authorizing us to contact you in such methods). If you are not ok with these terms, please do not use this website.