By renaming debug.conf.disable into debug.conf, Tomcat starts with jpda support and can be debugged on port 5005. In order to debug remotely, an ssh tunnel is necessary.