Allowing an OpenSSO Enterprise User to Access the Manager Web Application

In this task, you edit the Tomcat 6.0 version 3.0 Manager web.xml file to allow an OpenSSO Enterprise user to access the Manager web application.

To Allow an OpenSSO Enterprise User to Access the Manager Web Application

1. Change to the following directory for the Tomcat 6.0 version 3.0 instance:

   $CATALINA_HOME/server/webapps/manager/WEB-INF

2. In the web.xml file, find the user and role information for the Manager role.

   This role is defined in the <role-name> element under the <security-role> element.

3. Delete the Manager security role.

4. Create a new Manager security role using the user and group that you created in the OpenSSO Enterprise Console, as described in Creating OpenSSO Enterprise Users and Groups.

   For example:

   <security-role>
   id=manager,ou=group,dc=realm-name,dc=example,dc=com
   </security-role>

5. Replace the Manager role defined in the <role-name> element under the <auth-constraint> element with the contents of the <role-name> element as described in the previous step.

   For example:

   <auth-constraint>
   <role-name>id=manager,ou=group,dc=realm-name,dc=example,dc=com</role-name>
   </auth-constraint>

6. Save the web.xml file.