Tomcat 6 does not come with ready-made security configuration (as Oracle AS and others do). In order you to be able to view online status of the server, you should go to this file:
${CATALINA_HOME}/conf/tomcat-users.xml
And put this XML snippet in its root context:
<role rolename=”manager”/>
<user username=”USER” password=”PASSWORD” roles=”manager”/>
Of course, you should replace USER / PASSWORD with your desired login details.