[OWASP-WEBGOAT]Webgoat application username/password does not work

[Bruce Mayhew]

Sameer,

A few things you may want to look at:


1) Check the tomcat/conf/tomcat-users.xml file to see if the following lines are contained within:

  <role rolename="webgoat_admin"/>
  <role rolename="webgoat_user"/>
  <user username="webgoat" password="webgoat" roles="webgoat_admin"/>
  <user username="guest" password="guest" roles="webgoat_user"/>

2) The default port number is now port 80 not 8080. Specified in tomcat/conf/server.xml

3) WebGoat 3.0 is not needed for 3.5


Let me know if your still stuck....

Bruce.


  ----- Original Message ----- 
  From: Ahirrao, Sameer 
  To: owasp-webgoat at lists.sourceforge.net 
  Sent: Wednesday, December 22, 2004 5:03 AM
  Subject: [OWASP-WEBGOAT]Webgoat application username/password does not work


  Dear Friends,

   

  I installed webgoat 3.5 standalone and 3.0  as per readme (Apache tomcat,JDk5.0 etc., java path etc.)

   

  Tomcat start page is ok.

   

  When I start http://localhost:8080/WebGoat/attack it asks for username n password, I entered guest/guest which is not working.

   

  Can somebody help me on this? I am using it 1st time.

   

  Thanks in Advance..

  Sameer 



   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.owasp.org/pipermail/owasp-webgoat/attachments/20041222/aa87843c/attachment.html