https://issues.apache.org/bugzilla/show_bug.cgi?id=56370
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |INVALID
OS| |All
--- Comment #1 from Mark Thomas <ma...@apache.org> ---
The commented out roles in tomcat-users.xml are not legacy. They are there to
support the examples web application.
The roles for the manager application are explicitly not assigned ot any users
in tomcat-users.xml, even in commented out form, to avoid any possibility of a
known user with a default password being used for an administrative interface.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
