/
Tomcat Administrative Login

Tomcat Administrative Login

Owned by Former user (Deleted)
Last updated: Feb 02, 2021

The Tomcat administrative login is a separate login from the XperienCentral login. The username and password are for the Tomcat login is not stored in XperienCentral but rather in Tomcat. The login and password are typically defined in the file <tomcat dir>/conf/tomcat-users.xml". The exact location can be determined from the main Tomcat configuration file server.xml, which contains lines similar to the following:


  <GlobalNamingResources>
      <Resource name="UserDatabase" auth="Container" type="org.apache.catalina.UserDatabase" factory="org.apache.catalina.users.MemoryUserDatabaseFactory" pathname="conf/tomcat-users.xml"/>
 </GlobalNamingResources>


The contents of the user database file look similar to the following:


<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="wmadmin"/>
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="role1" password="tomcat" roles="role1"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="wmadmin" password="05eb2d8c258f463e268e0d2b1aa1682e" roles="wmadmin"/>
  <user username="wmadmin2" password="$h@ke1+!!" roles="wmadmin"/>
</tomcat-users>

For details on Tomcat's container managed security system, see Tomcat Realm Configuration.



With the latest Tomcat versions you may have some difficulty using the tool. To be able to use the ssidebug or xmldebug tools, follow these steps:

  1. Open the URL http://<backend server name>/web/admin/status.
  2. Log in with the proper credentials
  3. Verify that you see the status page.
  4. Open the URL http://<backend server name>/web/show/id=...?xmldebug=true.



Related content