Apache Tomcat 6.0 Realm Configuration HOW-TO wrote:If you wish to use the Manager Application to deploy and undeploy applications in a running Tomcat 6 installation, you MUST add the "manager" role to at least one username in your selected Realm implementation. This is because the manager web application itself uses a security constraint that requires role "manager" to access ANY request URI within that application.
Were you able to get this working? I am running into the same issue here since trying to use 6.0.30+ versions to tomcat.
I can access the manager application but if I try to deploy a warfile, we get the 403 page. I have tried many possible combinations of roles including the old "manager" role and all the new "manager-*" roles with no success. I did notice that if I deploy a warfile using the "WAR file to deploy" option it works fine. Unfortunately for our application we need to specify a context path and xml configuration file, so we need to use the "Deploy directory or WAR file located on server" deploy.