All geek questions in one place

Tomcat7 shows the number of inactive users in the tomcat manager

Hi, I have an amazon ec2 server and I use this server for my Java applications, but over the last couple of days I have one very unusual problem and am worried that someone might play on my server.

When I logged into my tomcat manager using ipaddress: 8080 / manager . He asked me to enter the username and password that I have in the tomcat-user.xml file. When I logged in, it shows only one active instance in a few minutes, it shows me that there is more than one user using the tomcat manager, but the question is that I did not transfer my credentials to anyone. Check out this screenshot.

enter image description here

, tomcat 94 , , . , , admin.

, , , root-tomcat-manager. .

Sep 28, 2015 4:54:02 PM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "root"
Sep 28, 2015 4:55:07 PM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "admin"
Sep 28, 2015 4:56:44 PM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "manager"
Sep 29, 2015 7:08:16 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "root"
Sep 29, 2015 7:08:16 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "tomcat"
Sep 29, 2015 7:08:16 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "manager"
Sep 29, 2015 7:08:16 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "manager"
Sep 29, 2015 7:08:19 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "tomcat"
Sep 29, 2015 7:08:19 AM org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "tomcat"

google, tomcat 755 750, , . .

, , - . , , tomcat ( ).

. .

+4
2

@aldebober, , .

Tomcat 8080, -, Java-, 8080. , , , Server.xml tomcat/conf.

<Connector port="8585" protocol="HTTP/1.1" connectionTimeout="20000" URIEncoding="UTF-8" redirectPort="8443" />

, tomcat .

+6

, manager.xml:

manager.xml
<Context path="/manager" debug="0" privileged="true">

      <Valve className="org.apache.catalina.valves.RemoteAddrValve"  allow="127.0.0.1,192.168.1.107"/>

</Context>

192.168.1.107 - IP. 127.0.0.1 ssh tunnel:

ssh -L 8080:localhost:8080 ipaddress_of_tomcat

http://localhost:8080/manager

+4

Source: https://habr.com/ru/post/1609609/

More articles:


All Articles