How to restrict access to tomcat manager to specific hosts?

2008-07-31 Thread Nar Karapetyan 
Hi,

I need to allow access to tomcat manager 
(http://:/manager/html)
only to the localhost using Tomcat's means.

Inspecting the request for the IP, and blocking a non-localhost ip is not 
accepted as per the requirement I have.

How can I do that?

I have tried to add the following to the catalina.policy file, but it didn't 
work:

grant codeBase "http://:8080/manager/html" {
   permission java.net.SocketPermission "127.0.0.1", "connect";
};

Thank you,
Regards,
Nareg Garabedian

Re: How to restrict access to tomcat manager to specific hosts?

2008-07-31 Thread Alex Mestiashvili 

Nar Karapetyan wrote:

Hi,

I need to allow access to tomcat manager 
(http://:/manager/html)
only to the localhost using Tomcat's means.

Inspecting the request for the IP, and blocking a non-localhost ip is not 
accepted as per the requirement I have.


How can I do that?

I have tried to add the following to the catalina.policy file, but it didn't 
work:

grant codeBase "http://:8080/manager/html" {
   permission java.net.SocketPermission "127.0.0.1", "connect";
};

Thank you,
Regards,
Nareg Garabedian



  
  

Hi ,

$CATALINA_HOME/conf/Catalina/localhost/manager.xml

$cat manager.xml


 allow="127.0.0.1,192.168.1.107"/>


 





-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]