Stopping access to WEB-INF?

[Brian Burridge <ma...@burridge.net>]

I see in my mod_jk.conf-auto (which I can't edit of course) that I can put:
<Location "/test/WEB-INF/>
    AllowOverride None
    deny from all
</Location>

But where can I add that since I can't modify that conf-auto file? Can I put that in my Host tag?

 <Host name="www.site.com">
  <Context path="" 
   docBase="/www/htdocs/site" 
   debug="0"
   reloadable="true">
  </Context>
 </Host>

Also, what does debug mean, and what are the options to set it at?

Brian

Re: Stopping access to WEB-INF?

[Brian Burridge <ma...@burridge.net>]

Wouldn't you know it. Two minutes after I posted this, I figured it out.

Although, still not sure what the debug flag is for.

Brian
  ----- Original Message ----- 
  From: Brian Burridge 
  To: tomcat-user@jakarta.apache.org 
  Sent: Monday, April 16, 2001 3:41 PM
  Subject: Stopping access to WEB-INF?


  I see in my mod_jk.conf-auto (which I can't edit of course) that I can put:
  <Location "/test/WEB-INF/>
      AllowOverride None
      deny from all
  </Location>

  But where can I add that since I can't modify that conf-auto file? Can I put that in my Host tag?

   <Host name="www.site.com">
    <Context path="" 
     docBase="/www/htdocs/site" 
     debug="0"
     reloadable="true">
    </Context>
   </Host>

  Also, what does debug mean, and what are the options to set it at?

  Brian

Re: Stopping access to WEB-INF?

[Chad LaJoie <cl...@vt.edu>]

If you read the documentation with Tomcat you'll see that they suggest not 
using the auto-conf file directly, use it more as an example.  Therefore I 
would suggest making your own mod_jk.conf file and Include'ing that into 
your Apache httpd.conf.  Here is an example.

mod_jk.conf
#
# The following line instructs Apache to load the jk module
#
LoadModule jk_module libexec/mod_jk.so
AddModule mod_jk.c

JkWorkersFile /path/to/tomcat/conf/workers.properties
JkLogFile /path/to/tomcat/logs/mod_jk.log

#
# Log level to be used by mod_jk
#
JkLogLevel error

#
# Root context mounts for Tomcat
#
JkMount /*.jsp ajp13
JkMount /servlet/* ajp13

#
#Do not allow users to directly access these directories
#
<Location "/WEB-INF/">
     AllowOverride None
     deny from all
</Location>

<Location "/META-INF/">
     AllowOverride None
     deny from all
</Location>


Then all I had to do was add this line into apache's httpd.conf file (I put 
it right after the DocumentRoot directive)

Include /path/to/mod_jk.conf


Hope that helps.

At 03:41 PM 4/16/2001, you wrote:
>I see in my mod_jk.conf-auto (which I can't edit of course) that I can put:
><Location "/test/WEB-INF/>
>     AllowOverride None
>     deny from all
></Location>
>
>But where can I add that since I can't modify that conf-auto file? Can I 
>put that in my Host tag?
>
>  <Host name="<http://www.site.com>www.site.com">
>   <Context path=""
>    docBase="/www/htdocs/site"
>    debug="0"
>    reloadable="true">
>   </Context>
>  </Host>
>Also, what does debug mean, and what are the options to set it at?
>
>Brian

Chad La Joie                           "Only a man who can not conquer
IT Specialist                             his deficiencies feels the need to
IS&C - WARD                             convince the world he has none"

changing web app

[Chad Harrison <ch...@toshoklabs.com>]

This may be a basic question, but I havent seen the answer in any of the 
docs -

do I need to restart tomcat every time I change my web.xml config file 
for my web application? or is there someway to reload it?

thanks