首页 > 解决方案 > Tomcat 9 - manager-gui 使用非明文密码无法正常工作

问题描述

我尝试设置一个新的 Tomcat 9.0.11,启用 manager-gui 并在 tomcat-user.xml 中使用哈希密码进行管理员登录。我关注 http://www.peter-eichenauer.de/safari/blog/entry/tomcat_9_understanding_credentialhandler

我可以登录到 manager-gui,但不是使用真实密码,而是仅使用散列密码字符串。所以很可能Tomcat使用散列密码作为真实密码,但我设置了

<CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256">

在 server.xml 中。所以我不知道该怎么办。请帮忙!

提前致谢

标签: tomcat

解决方案


好的,我找到了解决方案。我在 server.xml 中犯了一个错误:而不是:

     <Realm className="org.apache.catalina.realm.LockOutRealm">
    <!-- This Realm uses the UserDatabase configured in the global JNDI
         resources under the key "UserDatabase".  Any edits
         that are performed against this UserDatabase are immediately
         available for use by the Realm.  -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase" >
            <CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256" />
  </Realm></Realm>

我写:

      <Realm className="org.apache.catalina.realm.LockOutRealm">
    <!-- This Realm uses the UserDatabase configured in the global JNDI
         resources under the key "UserDatabase".  Any edits
         that are performed against this UserDatabase are immediately
         available for use by the Realm.  -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase" />
            <CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256" />
  </Realm>

一个愚蠢的关闭领域错误。谢谢大家!!!!


推荐阅读