6.2. Default Users

By default, the SOA Console has one user registered. It's important to change this users' list as soon as possible to control the access on your engine. To do this, you'll find a "tomcat-users.xml" file in repository tomcat/conf/ and you'll have to modify these following lines to modify the access list :

                    <tomcat-users>
                    <!--
                      NOTE:  By default, no user is included in the "manager" role required
                      to operate the "/manager" web application.  If you wish to use this app,
                      you must define such a user - the username and password are arbitrary.
                    -->
                    <!--
                      NOTE:  The sample user and role entries below are wrapped in a comment
                      and thus are ignored when reading this file. Do not forget to remove
                      <!.. ..> that surrounds them.
                    -->
                    <!--
                      <role rolename="tomcat"/>
                      <role rolename="role1"/>
                      <user username="tomcat" password="tomcat" roles="tomcat"/>
                      <user username="both" password="tomcat" roles="tomcat,role1"/>
                      <user username="role1" password="tomcat" roles="role1"/>
                    -->
                      <user username="orchestra" password="orchestra" roles="user"/>
                    </tomcat-users>
                

The roles are defined in web.xml file. By default, you can log with user and admin as role but this version doesn't implement the role mechanism.

This is the standard authentication mechanism for servlet container, you can find more details on this URL : http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html