When I first go to the manager app
http://localhost:8080/manager/html, there was a browser prompt login window asking for username and password. By entering the wrong username and password, the page returned 403(access denied).
So I googled a bit and setup as follows:
<role rolename="manager-gui" /> <user username="admin" password="tomcat" roles="manager-gui"/> <!-- these 2 lines was there before my editing --> <user password="tom" roles="manager-script,admin" username="tom"/> <user password="tomcat" roles="manager-script,admin" username="tomcat"/>
After restarting tomcat, the manager app this time shows 403 page directly without asking for username and password. So I'm a bit confused. What kind of authentication is this manager app using? And how can I login to the manager app?