You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Steven Garrett <St...@cometsystems.com> on 2002/09/19 21:23:09 UTC

tomcat security

Hi,

I'm relatively new to admining tomcat and have been looking for some ways to
secure tomcat.  I haven't found much of anything useful.  Are there any docs
on known security issues with tomcat, or any howto's when configuring
security?  We're running tomcat 4.0.3, apache 1.3.26 and mod_jk.

Thanks in advance,

steve

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: tomcat security

Posted by Nome real <we...@cienciapura.com.br>.
Take a look on Running Tomcat with SecurityManager. I'm sure you can find a lot of docs on the net.


On Thu, 19 Sep 2002 15:23:09 -0400, Steven Garrett <St...@cometsystems.com> escreveu :

> De: Steven Garrett <St...@cometsystems.com>
> Data: Thu, 19 Sep 2002 15:23:09 -0400
> Para: 'Tomcat Users List' <to...@jakarta.apache.org>
> Assunto: tomcat security
> 
> Hi,
> 
> I'm relatively new to admining tomcat and have been looking for some ways to
> secure tomcat.  I haven't found much of anything useful.  Are there any docs
> on known security issues with tomcat, or any howto's when configuring
> security?  We're running tomcat 4.0.3, apache 1.3.26 and mod_jk.
> 
> Thanks in advance,
> 
> steve
> 
> --
> To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
> For additional commands, e-mail: <ma...@jakarta.apache.org>
> 
> 
> 
> 

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: tomcat security

Posted by Jean-Francois Arcand <jf...@apache.org>.
The Tomcat site contains the following:

http://jakarta.apache.org/tomcat/tomcat-4.0-doc/security-manager-howto.html

and

http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ssl-howto.html

The security manager is probably the first place to start.

-- Jeanfrancois

Steven Garrett wrote:

>Hi,
>
>I'm relatively new to admining tomcat and have been looking for some ways to
>secure tomcat.  I haven't found much of anything useful.  Are there any docs
>on known security issues with tomcat, or any howto's when configuring
>security?  We're running tomcat 4.0.3, apache 1.3.26 and mod_jk.
>
>Thanks in advance,
>
>steve
>
>--
>To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
>For additional commands, e-mail: <ma...@jakarta.apache.org>
>
>  
>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>