有好多这样的警报怪怪的，一分钟抛一次，大概抛了10分钟，停止
有
Anattempt was made to authenticate the locked user "root"Anattempt was made to authenticate the locked user "root"
有
An attempt was made to authenticate the lockeduser "theshadow007"
真的就是007！！
唉，无语了，
也不知解没解决，反正用以下办法就不再报警了
在apache-tomcat-8.0.21\conf\tomcat-users.xml\server.xml里面会用到 tomcat-users.xml
而原来的apache-tomcat-8.0.21\conf\tomcat-users.xml是这样的
没错都是注释，把注释放开还不够，还是会抛警告，再顺便把tomcat的8080网络的host manager app配置了吧（我的tomcat是8.0.21版的）
<role rolename="tomcat"/>
<role rolename="role1"/>
<user username="tomcat" password="tomcat" roles="tomcat"/>
<user username="both" password="tomcat" roles="tomcat,role1"/>
<user username="role1" password="tomcat" roles="role1"/>
<role rolename="admin-gui"/>
<role rolename="admin-script"/>
<role rolename="manager-gui"/>
<role rolename="manager-script"/>
<role rolename="manager-jmx"/>
<role rolename="manager-status"/>
<user username="user" password="user" roles="manager-gui,manager-script,manager-jmx,manager-status,admin-script,admin-gui"/>
保存重启服务器，就没有再抛警告
而且配置完后，在localhost/8080的host manager可以用user和user登录管理app
tomcat报警告 An attempt was made to authenticate the locked user
原文：http://blog.csdn.net/unflynaomi/article/details/45424209
