ok i now i have 2 virtual hosts: host1, host2 with 1 app on each: app1 and app2. I have registered in tomcat-users.xml 2 users with same names as the virtual hosts and the same role: "manager". I can get to the manager on particular virtual host but i have to log in first. The problem is that the user is not connected with virtual host, so i can log in to host1 using both users ... What should i do to connect user1 with host1 and to predetermine that only user1 can log in to manager for host1 ?