Securing only a single web application on Tomcat

2011-12-08 Thread Savitha Akella
Hi, I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to server.xml -connector element and defined roles in tomcat-users.xml. In the web services, we made changes in the web.xml to add the

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Daniel Mikusa
On Thu, 2011-12-08 at 08:49 -0800, Savitha Akella wrote: Hi, I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to server.xml -connector What specifically did you change in server.xml?

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 11:49 AM, Savitha Akella wrote: I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to server.xml -connector element and

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Savitha Akella
Hi, We are using tomcat version 7.0.11 Here are the changes we made in server.xml: Connector SSLEnabled=true clientAuth=true keyAlias=tomcat keyPass=xyz keystoreFile=C:/Users/keystorepath/key.keystore maxThreads=150 port=8443 protocol=org.apache.coyote.http11.Http11Protocol scheme=https

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 3:01 PM, Savitha Akella wrote: We are using tomcat version 7.0.11 You should upgrade if you have the chance. 7.0.23 is available and there have been many improvements including fixes for security-related bugs. Here are the

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 16:50, Savitha Amelia savitha.saraswa...@gmail.com wrote: Hi, I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to server.xml -connector element and defined roles in

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 23:41, Pid * p...@pidster.com wrote: On 8 Dec 2011, at 16:50, Savitha Amelia savitha.saraswa...@gmail.com wrote: Hi, I have multiple applications hosted on my tomcat server which includes web services, web applications etc. To secure the web services, we made changes to