Manager role in Tomcat demo setup

[sebastian.s]

Hello !

In the supplied Tomcat demo setup a JDBCRealm is used to authenticate users. Is there an example user supplied within the identities who owns the role manager thus can be used to login to the Tomcat Manager application?

Thanks!

Sebastian

[kukeltje]

no, not afaik (though I did not try it myself). Sorry

[sebastian.s]

Good morning, Ronald and hello everyone else.

Thank you for your answer. Till now I have been using jBPM on top of JBoss AS. But I switched to Tomcat since the Tomcat support is one of the most interesting features for me in the new 4.1 release.

For user authentication the demo setup is set to a JDBCRealm (the users table of jBPM). I tried adding a new user with the role manager in tomcat-users.xml but the file seemed to be ignored. If I understood the Tomcat doc the right way I should add an user with the manager role in the database but this does not seem to be possible (database schema).

Can anyone give me a hint how to deal with this? Building up on the demo setup I would like to deploy some applications on the Tomcat among other things by using the manager application to deploy applications and to check.

Thank you for any hints about the Tomcat demo setup.

Sebastian

[kukeltje]

I think you (and eventually maybe 'we' to) should try to separate the realms like in JBoss. So a realm per context

http://tomcat.apache.org/tomcat-5.5-doc/config/realm.html
http://neosmart.net/forums/showthread.php?t=515

[sebastian.s]

Ok, the person responsible for the Tomcat integration seems to have struggled with this when he tried to seperate them.

The supplied configuration in conf/server.xml is commented in this way.

 <!--
 Current workaround for using the JBPM identity tables on Tomcat.
 Setting the Realm on the context with path /jbpm-console did not seem
 to work. Note that this workaround means that the cmplete localhost
 domain will use this realm !
 -->

[kukeltje]

"the European guy" wrote:
Ok, the person responsible for the Tomcat integration seems to have struggled with this when he tried to seperate them.

From the jBPM team you mean?

Then file a jira issue (and if you can get it to work by providing a 'patch' then that would be even better.

[jbarrez]

The 'struggling' guy would be me ;-)

The Realm configuration was a last minute addition just before the 4.1 release. I followed the Tomcat doc to get a separate Realm for the jbpm-console (by adding a config in /conf/catalina/localhost/jbpm-console), but that didn't work. I also tried to narrow the realm to the /jbpm-console path obnly in the config, but that didn't work either.

So I picked the easy path... The realm configuration certainly needs a revision and I would appreciate any pointers in the right direction, since like I said I'm hitting a wall with the official tomcat doc. But I do want us to have a separate realm.


To answer your initial question: what about adding a manager role + user with that role to JBPM4_ID_GROUP, USER, etc?

[sebastian.s]

Hi Joram,

yes, that would be a workaround I think. I noticed this after I had posted. I am going to try this but I would prefer a separate realm since this manager user has nothing to do with jBPM but with the server administration.

If I get it working I will of course provide the information here.

Thanks for your help.

Bye
Sebastian