tomcat 8.* manager 403

修改conf/tomcat-users.xml

<role rolename="manager"/>

<role rolename="manager-gui"/>

<role rolename="admin"/>

<user username="user" password="password" roles="admin,manager,manager-gui"/>

同时还需要修改（如无则新建一个）conf/Catalina/localhost/manager.xml 内容如下：

<Context privileged="true" antiResourceLocking="false" docBase="${catalina.home}/webapps/manager">

    <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="^.*$" />

</Context>

无须重启tomcat即可生效。

引用原文：

Each deployed webapp has a context.xml file that lives in $CATALINA_BASE/conf/[enginename]/[hostname] (conf/Catalina/localhost by default) and has the same name as the webapp (manager.xml in this case). If no file is present, default values are used.
So, you need to create a file conf/Catalina/localhost/manager.xml and specify the rule you want to allow remote access.