修改conf/tomcat-users.xml
<role rolename="manager"/>
<role rolename="manager-gui"/>
<role rolename="admin"/>
<user username="user" password="password" roles="admin,manager,manager-gui"/>
同时还需要修改，如无新建conf/Catalina/localhost/manager.xml 内容如下：
<Context privileged="true" antiResourceLocking="false"
docBase="${catalina.home}/webapps/manager">
<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="^.*$" />
</Context>
无须重启tomcat即可生效。
引用原文：
Each deployed webapp has a context.xml file that lives in
$CATALINA_BASE/conf/[enginename]/[hostname] (conf/Catalina/localhost by
default) and has the same name as the webapp (manager.xml in this case).
If no file is present, default values are used.
So, you need to create a file conf/Catalina/localhost/manager.xml and specify the rule you want to allow remote access.
引用地址：http://blog.csdn.net/supersyd/article/details/52075254