You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by je...@bull.net on 2008/01/21 10:05:22 UTC
Réf. : RE: Filtering the apache clients
Hello,
thank you Chuck, Ben and all at this list for your responses
I think I'll try the apache "secret" feature but i don't know which
attribute it matches under tomcat ajp connector conf ?
Any idea ?
Regards
Jean-Louis Matéo
Bull, Architect of an Open World TM
Bull SA - 53 r de l'Etang BP39 - 69578 LIMONEST
tél - 08 20 08 20 00
fax - 04 72 52 51 24
______________________________________________________________________
BULL TELESERVICE : Support et conseil logiciels & progiciels multi-éditeurs
GCOS - AIX - Open Source - Microsoft
______________________________________________________________________
Ben Stringer
<ben@burbong.com Pour : Tomcat Users List <us...@tomcat.apache.org>
> cc :
Objet : RE: Filtering the apache clients
19/01/2008 08:31
Veuillez
répondre à
"Tomcat Users
List"
On Fri, 2008-01-18 at 10:53 -0600, Caldarale, Charles R wrote:
> > From: jean-louis.mateo@bull.net [mailto:jean-louis.mateo@bull.net]
> > Subject: Filtering the apache clients
> >
> > Is there any way of configuring the Tomcat <Connector> to
> > only accept AJP connections from a specific apache server?
>
> 1) Comment out the other <Connector> elements.
>
> 2) Configure the RemoteAddrValve for the desired IP address:
> http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Remote%20Addre
> ss%20Filter
>
> - Chuck
In addition to Chuck's suggestions, you may also be interested in the
"secret" setting that can be set in workers.properties on Apache HTTPD
and in the tomcat connector conf. This allows you to specify a shared
secret between Apache HTTPD and Tomcat, so connections will only be
accepted if the secret is provided in the connection attempt.
Search for "secret" in this page:
http://tomcat.apache.org/connectors-doc/reference/workers.html
Cheers, Ben
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Réf. : RE: Filtering the apache clients
Posted by Rainer Jung <ra...@kippdata.de>.
jean-louis.mateo@bull.net wrote:
> Hello,
>
> thank you Chuck, Ben and all at this list for your responses
>
> I think I'll try the apache "secret" feature but i don't know which
> attribute it matches under tomcat ajp connector conf ?
> Any idea ?
At least
http://tomcat.apache.org/connectors-doc/reference/workers.html
tells us:
Use request.useSecret="true" and request.secret="secret key word" in
your Tomcat AJP Connector configuration.
Unfortunately the information doesn't seem to be included in the Tomcat
docs. Let us know, if it works.
Regards,
Rainer
>
>
> Ben Stringer
> <ben@burbong.com Pour : Tomcat Users List <us...@tomcat.apache.org>
> > cc :
> Objet : RE: Filtering the apache clients
> 19/01/2008 08:31
> Veuillez
> répondre à
> "Tomcat Users
> List"
>
>
>
>
>
> On Fri, 2008-01-18 at 10:53 -0600, Caldarale, Charles R wrote:
>>> From: jean-louis.mateo@bull.net [mailto:jean-louis.mateo@bull.net]
>>> Subject: Filtering the apache clients
>>>
>>> Is there any way of configuring the Tomcat <Connector> to
>>> only accept AJP connections from a specific apache server?
>> 1) Comment out the other <Connector> elements.
>>
>> 2) Configure the RemoteAddrValve for the desired IP address:
>> http://tomcat.apache.org/tomcat-6.0-doc/config/valve.html#Remote%20Addre
>> ss%20Filter
>>
>> - Chuck
>
> In addition to Chuck's suggestions, you may also be interested in the
> "secret" setting that can be set in workers.properties on Apache HTTPD
> and in the tomcat connector conf. This allows you to specify a shared
> secret between Apache HTTPD and Tomcat, so connections will only be
> accepted if the secret is provided in the connection attempt.
>
> Search for "secret" in this page:
>
> http://tomcat.apache.org/connectors-doc/reference/workers.html
>
> Cheers, Ben
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org