Security

[David Engelbrecht <db...@transmed.co.za>]

Please have a look at this tomcat.conf file.
 I am using Apache + Tomcat together.

Tomcat only serves the .jsp files. Everything is working, but I can set up
security. If I am trying to access the directories like /web-inf through
apache then I get forbidden (I have set up Apache securuty), but through
Tomcat, I can access the directory even if I put in the code that I have
used below. Please help !!

tomcat.conf:

LoadModule jserv_module modules/ApacheModuleJServ.dll

<IfModule mod_jserv.c>

ApJServManual on

ApJServDefaultProtocol ajpv12

ApJServSecretKey DISABLED

ApJServMountCopy on

ApJServLogLevel notice

 ### Change if you run tomcat on a different host

ApJServDefaultHost localhost

ApJServDefaultPort 8007

 ############# Alias #####################################################

Alias /david C:\tomcat\webapps\david

 ############# Directory #################################################

<Directory "c:\tomcat\webapps\david">

 Options Indexes FollowSymLinks

AllowOverride None

</Directory>



 <Location /david/servlets/>

 AllowOverride None

 deny from all

 </Location>



 <Location /david/web-inf/>

 AllowOverride None

 deny from all

 </Location>

 #################### All jsp files will go to tomcat ####################

 AddType text/jsp .jsp

 AddHandler jserv-servlet .jsp

 ############################## Context mapping - all requests go to tomcat



 # Mounting the first context.

 ApJServMount /david ajpv12://localhost:8007/david



 </IfModule>