<user username="admin" password="intravue" roles="admin,manager" />If security is any concern, please edit this file and change the password from the default of "intravue". Security is provided by limiting access to the IntraVUE host. With IntraVUE 2's remote administration capabilities, there is no need to have physical access to the host computer. The directories where security information is configured are not accessible from the web interface.
The Apache Tomcat web server that provides the user interface for IntraVUE can be configured to require a username and password before a user can see the IntraVUE web page.
The first step is to add security data to the file ...\intravue\AutoIP\tomcat5\webapps\iv2\WEB-INF\web.xml. Copy the lines below and insert them at the end of the file, just before the closing </web-app> line.
<!-- Define a Security Constraint on this Application --> <security-constraint> <web-resource-collection> <web-resource-name>Intravue Application</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <auth-constraint> <!-- NOTE: This role is not present in the defaugt users file --> <role-name>intravue</role-name> </auth-constraint> </security-constraint> <!-- Define the Login Configuration for this Application --> <login-config> <auth-method>BASIC</auth-method> <realm-name>Intravue Application</realm-name> </login-config> <!-- Security roles referenced by this web application --> <security-role> <description> The role that is required to log in to the intravue Application </description> <role-name>intravue</role-name> </security-role> </web-app> NOTE: do not copy this line. Insert just before this line in the file
The above will require the user to login as the 'role-name' intravue. Role-names are defined in the file tomcat-users.xml, described above. The role 'intravue' is already defined in that file and has a username of intravue and a password of intravue.
If you are going through this process then you really want security that anyone reading this help file will not be able to break.
Therefore, you should edit the tomcat-users.xml file and add a new role. The two line below can be added to this file and will create a new role named 'remote' and this role will have a username of remoteUser and a password of intravue2
<role rolename="remote"/> <user username="remoteUser" password="intravue2" roles="remote"/>
To complete the process edit the data in the lines in the sample above and change the lines starting with
Anyone logging in will now be required to use a username and password to login.
Note: You may create as many username and password combinations for the role remote as you like by adding additional <user.. lines to the tomcat-users.xml file.