| Hongqing Liu | fd5ee81 | 2014-05-10 16:32:51 +0800 | [diff] [blame^] | 1 | <%--
|
| 2 | Licensed to the Apache Software Foundation (ASF) under one or more
|
| 3 | contributor license agreements. See the NOTICE file distributed with
|
| 4 | this work for additional information regarding copyright ownership.
|
| 5 | The ASF licenses this file to You under the Apache License, Version 2.0
|
| 6 | (the "License"); you may not use this file except in compliance with
|
| 7 | the License. You may obtain a copy of the License at
|
| 8 |
|
| 9 | http://www.apache.org/licenses/LICENSE-2.0
|
| 10 |
|
| 11 | Unless required by applicable law or agreed to in writing, software
|
| 12 | distributed under the License is distributed on an "AS IS" BASIS,
|
| 13 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
| 14 | See the License for the specific language governing permissions and
|
| 15 | limitations under the License.
|
| 16 | --%>
|
| 17 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|
| 18 | <html>
|
| 19 | <head>
|
| 20 | <title>403 Access Denied</title>
|
| 21 | <style type="text/css">
|
| 22 | <!--
|
| 23 | BODY {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;font-size:12px;}
|
| 24 | H1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;}
|
| 25 | PRE, TT {border: 1px dotted #525D76}
|
| 26 | A {color : black;}A.name {color : black;}
|
| 27 | -->
|
| 28 | </style>
|
| 29 | </head>
|
| 30 | <body>
|
| 31 | <h1>403 Access Denied</h1>
|
| 32 | <p>
|
| 33 | You are not authorized to view this page.
|
| 34 | </p>
|
| 35 | <p>
|
| 36 | If you have already configured the Host Manager application to allow access
|
| 37 | and you have used your browser's back button, used a saved book-mark or
|
| 38 | similar then you may have triggered the cross-site request forgery (CSRF)
|
| 39 | protection that has been enabled for the HTML interface of the Host Manager
|
| 40 | application. You will need to reset this protection by returning to the
|
| 41 | <a href="<%=request.getContextPath()%>/html">main Host Manager page</a>.
|
| 42 | Once you return to this page, you will be able to continue using the Host
|
| 43 | Manager appliction's HTML interface normally. If you continue to see this
|
| 44 | access denied message, check that you have the necessary permissions to
|
| 45 | access this application.
|
| 46 | </p>
|
| 47 | <p> If you have not changed
|
| 48 | any configuration files, please examine the file
|
| 49 | <tt>conf/tomcat-users.xml</tt> in your installation. That
|
| 50 | file must contain the credentials to let you use this webapp.
|
| 51 | </p>
|
| 52 | <p>
|
| 53 | For example, to add the <tt>admin-gui</tt> role to a user named
|
| 54 | <tt>tomcat</tt> with a password of <tt>s3cret</tt>, add the following to the
|
| 55 | config file listed above.
|
| 56 | </p>
|
| 57 | <pre>
|
| 58 | <role rolename="admin-gui"/>
|
| 59 | <user username="tomcat" password="s3cret" roles="admin-gui"/>
|
| 60 | </pre>
|
| 61 | <p>
|
| 62 | Note that for Tomcat 6.0.30 onwards, the roles required to use the host
|
| 63 | manager application were changed from the single <tt>admin</tt> role to the
|
| 64 | following two roles. You will need to assign the role(s) required for
|
| 65 | the functionality you wish to access. Note the <tt>admin</tt> role is still
|
| 66 | valid but by-passes the CSRF protection.
|
| 67 | </p>
|
| 68 | <ul>
|
| 69 | <li><tt>admin-gui</tt> - allows access to the HTML GUI</li>
|
| 70 | <li><tt>admin-script</tt> - allows access to the text interface</li>
|
| 71 | </ul>
|
| 72 | <p>
|
| 73 | The HTML interface is protected against CSRF but the text interface is not.
|
| 74 | To maintain the CSRF protection:
|
| 75 | </p>
|
| 76 | <ul>
|
| 77 | <li>The deprecated <tt>admin</tt> role should not be assigned to any
|
| 78 | user.</li>
|
| 79 | <li>Users with the <tt>admin-gui</tt> role should not be granted the
|
| 80 | <tt>admin-script</tt> role.</li>
|
| 81 | <li>If the text interface is accessed through a browser (e.g. for testing
|
| 82 | since this interface is intended for tools not humans) then the browser
|
| 83 | must be closed afterwards to terminate the session.</li>
|
| 84 | </ul>
|
| 85 | </body>
|
| 86 |
|
| 87 | </html>
|