Could someone help me with this simple question? 1

[staraxan]

I'm starting a small home-based webhosting business, and trying to correctly setup Tomcat for a user on my WHM/Cpanel system.

I now have Tomcat correctly setup, and used the install servlets command for a user.

My problem and question is regarding Tomcat manager.

How do I correctly give tomcat manager access to a USER on my system? I read the tomcat documentation, but it seems like nobody who wrote the docs, actually thought anyone would be installing tomcat for use by users on a server.

So could someone please tell me how to give Tomcat Manager access to a user on my system?

 

[staraxan]

Let me clearify the question. I want to securely and correctly give a user Tomcat Manager access on my system.

The user is already correctly setup for the ability to run JSP applications, but I can't seem to figure out how to correctly give him access to Tomcat Manager, and the documentation is totally useless and of absolutely no help.

Could someone explain in "plain english" terms how to setup an example user on a webhosting server, so that he has access to Tomcat Manager for his OWN stuff, but doesn't have access to everything else on the system?

Or point me to a document on the internet that gives the information. I tryed searching for documents, and of the hundreds of documents I found, could not find a SINGLE freaking document anywhere on the internet that tells you how to correctly / securely setup a user for Tomcat Manager access? Seems like 99.99999999% of the documents are geared towards a single-user system.

 

[sedj]

I'm not sure you actually can, though could be wrong.

The best bet would be to set up a CATALINA_BASE for each user.

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[staraxan]

I'm a bit confused at a number things.

One thing I'm confused about, is if, do I even need Tomcat Manager for the users on my server?

I want to offer a webhosting package with JSP / servlets.

Will users be happy if they don't have access to Tomcat Manager? Do they really need it? Will they be happy without it?

What do other webhosting companies do when they use Tomcat? Do they setup a catalina_base for every user, or do they just not got give the users access to Tomcat Manager?

Anyone can clearify any of this? Please.

 

[sedj]

>>>> One thing I'm confused about, is if, do I even need Tomcat Manager for the users on my server?
No.

>>>>> Will users be happy if they don't have access to Tomcat Manager?
I've no idea - I'm not one of your users.

>>>>> Do they really need it?
No.

>>>>> Will they be happy without it?
I've no idea - I'm not one of your users.

>>>>>
What do other webhosting companies do when they use Tomcat?
No idea - do some research !

>>>>> Do they setup a catalina_base for every user, or do they just not got give the users access to Tomcat Manager?
Same as above.


Basically, ask your customers what they wish to have ...
Then, based on the answers, ask yourself :

1) Can you technically provide it ?
2) If you can, do you want to ?
3) Will your users be happy with the solution you provide, whatever it is ? If not, then do you care ? If you do, then what can you do about it ?

Instead of asking vague, generalised and repeated questions, ask your users the obvious questions you need answered, and then ask the technical questions here (because this is a technical forum - not a "how do I run a business" forum .



--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[staraxan]

Not asking how to run a business. I was asking a technical question, since I wasn't sure if Tomcat Manager was needed or not if your trying to give users JSP / servlet support.

So I asked if Tomcat Manager was required for users who want to use JSP / servlets on the server.

You answered no?

So I will try that out, and see how it goes.

I don't see how that wasn't a technical question......

 

[sedj]

Because you were asking what other business's do, whether your users will be happy etc ...

Anyway, good luck

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[DanielSwan]

Sedj,

It's clear that star doesn't have a clear understanding of his requirements, aparrently due to a lack of familiarity with the technology. It's not helpful at all to sarcastically berate him about "asking how to run a business". More helpful would be to make a recommendation based upon what typical requirements would be, and deliver it with a the appropriate caveat.

 

[johnbionhand]

In my experience there are two types of Tomcat hosting; shared and dedicated.

With a shared hosting the website owner gets very little control over Tomcat and certainly doesn't get access to the manager. For example, to get servlets updated you need to put in a support request and there are generally limitations as to which tomcat facilities the website can access.

I have just had to move my website from a shared environment because the hosting company insisted on having the default Tomcat security settings on. I can understand why they felt that hey needed this in a shared environment but, unfortunately, one of the standard settings was interfering with my application. I had also had problems getting access to JNDI resources and needed to re-code my app to cope with this.

My new, dedicated Tomcat environment gives me complete access to Tomcat and I can stop and start my instance at will. I can also have the security settings as I please.

So, to answer your question, it's horses for courses really. If you offer a shared environment then users expect less control over Tomcat but, obviously, they would expect to pay less for their hosting.

Hope that helps.


John
----------------------------------------
Business Intelligence at your fingertips

http://www.bionhand.com

 

[staraxan]

Thank you John

Your answer makes a lot of sense, and makes it much clearer for me.

I appreciate you taking the time to respond.