Enabling Tomcat Manager

By default, the Tomcat Manager is disabled in Tomcat 7. It is a very powerful tool, but if it goes to the wrong hands, then it can create a problem for the system administrator or the application administrator. So it's very important that you enable Tomcat Manager with proper security.

How to enable the Tomcat Manager

For enabling the Manager, we have to edit tomcat-users.xml, which is present in TOMCAT_HOME/conf. You will see that Tomcat users are commented out, as shown in the following screenshot:

Uncomment the user and save the file, followed by reloading Apache Tomcat 7, as shown in the following screenshot:

Note

If you enable Tomcat Manager in a production environment, make sure it can be accessed only from the internal environment and not the DMZ.