Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Henri Gomez
It will be problematic on RPM installations where user shouldn' t usually use its keyboard. Better document it 2006/4/28, Yoav Shapira <[EMAIL PROTECTED]>: Hola, Letting the user pick a password is a decent idea, already done by the Windows installer, no? Yoav On 4/28/06, Costin Manolache <[E

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Yoav Shapira
Hola, Letting the user pick a password is a decent idea, already done by the Windows installer, no? Yoav On 4/28/06, Costin Manolache <[EMAIL PROTECTED]> wrote: What about: when installing or on first startup generate a random password or let the user pick a password ? Not sure if the shutdown

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Costin Manolache
What about: when installing or on first startup generate a random password or let the user pick a password ? Not sure if the shutdown problem was fixed, but the password could be used there as well. Costin On 4/28/06, Henri Gomez <[EMAIL PROTECTED]> wrote: Documentation will be a good place fo

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Henri Gomez
Documentation will be a good place for that :) 2006/4/28, Mladen Turk <[EMAIL PROTECTED]>: Remy Maucherat wrote: > Are you posting this proposal because some people find it too difficult ? > I'm posting that because I find it difficult. I always forget the usernames and roles :) Anyhow, It's

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Mladen Turk
Remy Maucherat wrote: Are you posting this proposal because some people find it too difficult ? I'm posting that because I find it difficult. I always forget the usernames and roles :) Anyhow, It's not a big deal. Sorry for the noise :) Regards, Mladen. ---

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Yoav Shapira
Hola, I too am unhappy even with a commented-out default username/password, because I think too many will just comment it in. I think the current tomcat-users.xml is fine. But if you want to make a difference on this matter, make a custom 401 page for the admin and manager webapps that says (in a

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Remy Maucherat
Mladen Turk wrote: Peter Rossbach wrote: Yes, defaults are very fine, but secret parameter need active user interaction. I didn't say it will be enabled by default. If commented out like in tc6, it would need an user intervention anyhow, so the user uncommenting the credentials should be awa

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Peter Rossbach
Example are good, but people comment it out at there production server. Kismet... This problem is documented at tomcat docs main page! I hope every "user" can read and paste it to there installation :-) OK, I have no problem with a comment line. Peter Am 28.04.2006 um 12:07 schrieb M

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Mladen Turk
Peter Rossbach wrote: Yes, defaults are very fine, but secret parameter need active user interaction. I didn't say it will be enabled by default. If commented out like in tc6, it would need an user intervention anyhow, so the user uncommenting the credentials should be aware of the consequenc

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Rainer Jung
What about commented out entries for the admin and manager roles and resp. users and password set to "changeme"? Peter Rossbach wrote: Yes, defaults are very fine, but secret parameter need active user interaction. also -1 Peter Am 28.04.2006 um 11:54 schrieb Remy Maucherat: Mladen Tu

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Vicenç
What about adding a tomcat-users.xml.sample with admin and manage allowed? - Vicenç Peter Rossbach wrote: Yes, defaults are very fine, but secret parameter need active user interaction. also -1 Peter Am 28.04.2006 um 11:54 schrieb Remy Maucherat: Mladen Turk wrote: Hi, The provided to

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Peter Rossbach
Yes, defaults are very fine, but secret parameter need active user interaction. also -1 Peter Am 28.04.2006 um 11:54 schrieb Remy Maucherat: Mladen Turk wrote: Hi, The provided tomcat-users.xml is obviously used as an example. Can we tweak that so that it actually allows the admin and ma

Re: The purpose of provided tomcat-users.xml

2006-04-28 Thread Remy Maucherat
Mladen Turk wrote: Hi, The provided tomcat-users.xml is obviously used as an example. Can we tweak that so that it actually allows the admin and manager users? Sorry, but it's a bad idea. The purpose would be the same (example), but it will allow to run the provided web apps without addition