配置tomcat-user.xml后仍无法访问Tomcat Manager，需额外配置哪些文件？

Alright, let's figure out why you're still locked out of the Tomcat Manager app even after setting up tomcat-users.xml correctly. There are two key configuration tweaks you need to make to fix this:

1. Adjust IP Access Restrictions in the Manager's context.xml #

The most common culprit here is the IP whitelist built into the Manager app's own configuration. Here's where to find it:
TOMCAT_HOME/webapps/manager/META-INF/context.xml

Open this file, and you'll see a RemoteAddrValve entry that looks like this by default:

<Valve className="org.apache.catalina.valves.RemoteAddrValve"
       allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />

This rule only lets local loopback addresses (localhost) access the Manager. To grant access from your machine:

• For a specific trusted IP: Add your public/private IP to the allow list (remember to escape dots with backslashes). Example:

  allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1|192\.168\.1\.50"
  

• For testing only (not safe for production): Allow all IPs with allow=".*"

2. Verify Tomcat Listens on All Network Interfaces (Optional) #

If you're accessing the Manager from a remote machine, make sure Tomcat isn't restricted to localhost only. Check TOMCAT_HOME/conf/server.xml:
Find the HTTP Connector tag (usually port 8080) and ensure there's no address attribute set to 127.0.0.1. The default setup (which listens on all addresses) looks like this:

<Connector port="8080" protocol="HTTP/1.1"
           connectionTimeout="20000"
           redirectPort="8443" />

If you see address="127.0.0.1", remove that attribute or change it to address="0.0.0.0".

3. Don't Forget to Restart Tomcat! #

Configuration changes won't take effect until you restart your Tomcat server—this step is easy to miss, so double-check it.

A quick production reminder: Always use strong, unique passwords in tomcat-users.xml and limit Manager access to only trusted IPs. Never allow all addresses in a live environment.

内容的提问来源于stack exchange，提问作者Mohd Saif Farooqui