HTTP Status 403 - Access to the requested resource has been denied

本文解决了一个关于Tomcat5.0登录时出现的403禁止访问错误的问题。通过修改tomcat-users.xml文件，添加了管理员角色及对应的用户凭证，成功解决了登录失败的问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

刚刚解压版的Tomcat5.0.12，启动setup.bat后，通过浏览器访问：http://127.0.0.1:8080/admin

在登录界面输入用户名 both 和密码 tomcat 后出现下面的错误提示：

HTTP Status 403 - Access to the requested resource has been denied

type Status report

message Access to the requested resource has been denied

description Access to the specified resource (Access to the requested resource has been denied) has been forbidden.

Apache Tomcat/5.0.12

。

问题原因：

D:/Tomcat5.0/conf 目录下的

tomcat-users.xml 文件内容如下：

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
<role rolename="tomcat"/>
<role rolename="role1"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="role1" password="tomcat" roles="role1"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
</tomcat-users>

问题修改：将tomcat-users.xml 文件内容改为

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
<role rolename="tomcat"/>
<role rolename="role1"/>
<role rolename="manager"/>
<role rolename="admin"/>
<user username="admin" password="admin" roles="admin,manager"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="role1" password="tomcat" roles="role1"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
</tomcat-users>

重新启动Tomcat ，在登录时使用用户名admin 密码 admin 登录即可。