Tomcat 9 - 为 manager-gui 使用非明文密码无法正常工作

Question

我尝试设置一个新的 Tomcat 9.0.11，启用了 manager-gui 并在 tomcat-user.xml 中使用散列密码进行管理员登录。我跟随 http://www.peter-eichenauer.de/safari/blog/entry/tomcat_9_understanding_credentialhandler

我可以登录到 manager-gui，但不是使用真实密码，而是仅使用散列密码字符串。所以 Tomcat 很可能使用散列密码作为真实密码，但我设置了

<CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256">

在 server.xml 中。所以我不知道该怎么办。请帮忙!

提前致谢

Answer 1

好的，我找到了解决方案。我在 server.xml 中犯了一个错误: 而不是:

     <Realm className="org.apache.catalina.realm.LockOutRealm">
    <!-- This Realm uses the UserDatabase configured in the global JNDI
         resources under the key "UserDatabase".  Any edits
         that are performed against this UserDatabase are immediately
         available for use by the Realm.  -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase" >
            <CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256" />
  </Realm></Realm>

我写道:

      <Realm className="org.apache.catalina.realm.LockOutRealm">
    <!-- This Realm uses the UserDatabase configured in the global JNDI
         resources under the key "UserDatabase".  Any edits
         that are performed against this UserDatabase are immediately
         available for use by the Realm.  -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase" />
            <CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="sha-256" />
  </Realm>

一个愚蠢的关闭 Realm 错误。感谢大家!!!!