How to access Tomcat 8 manager from different host

Products

• Endevor

Issue/Introduction

Tried to access Tomcat 8 manager from the remote system and got this error message in the browser:

You are not authorized to view this page.

By default the Manager is only accessible from a browser running on the same machine as Tomcat. What should I do to allow the access to Tomcat 8 manager from different host ?  

Environment

Release : 18.0

Component : CA Endevor Software Change Manager

Resolution

There are 2 ways to enable manager app access from the remote machine:

1) Wtih separated CATALINA_BASE and CATALINA_HOME directories, deploy the manager app from the CATALINA_HOME with the modified remote addresses list: 

Create a file $CATALINA_BASE/conf/Catalina/localhost/manager.xml and and specify the rule you want to allow remote access. For example, the following content of manager.xml will allow access from all machines:

<Context privileged="true" antiResourceLocking="false"

         docBase="${catalina.home}/webapps/manager">

    <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="^.*$" />

</Context>

Note that the allow attribute of the Valve element is a regular expression that matches the IP address of the connecting host. 

Also make sure that there is no CATALINA_BASE/webapps/manager.

 

2) When CATALINA_BASE is the same as CATALINA_HOME, following approach is recommended:

- Modify CATALINA_BASE/webapps/manager/META-INF/context.xml and update RemoteAddrValve to have allow="^.*$".