Thanks a lot for help. I added realm definition to be inside context container, which again is inside Host container:
<Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true"> *<Context path="/myApp" debug="0" privileged="true" docBase="myApp"> <Realm className="org.apache.catalina.realm.JDBCRealm" connectionName="root" connectionPassword="secret" connectionURL="jdbc:mysql://localhost:3306/myAppDB" driverName="com.mysql.jdbc.Driver" roleNameCol="type" userCredCol="password" userNameCol="username" userRoleTable="role" userTable="user"/> </Context>* <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" pattern="%h %l %u %t "%r" %s %b" prefix="localhost_access_log." suffix=".txt"/> </Host> TomEE GUI credentials are retrieved from tomcat-users.xml, and myApp credentials are read from database. -- View this message in context: http://openejb.979440.n4.nabble.com/Apache-TomEE-unable-to-access-TomEE-GUI-Server-Status-Manager-App-and-Host-Manager-services-tp4667582p4667630.html Sent from the OpenEJB User mailing list archive at Nabble.com.