Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 23:41, Pid * wrote: > On 8 Dec 2011, at 16:50, Savitha Amelia wrote: > >> Hi, >> >> I have multiple applications hosted on my tomcat server which includes web >> services, web applications etc. >> >> To secure the web services, we made changes to server.xml ->connector >> eleme

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Pid *
On 8 Dec 2011, at 16:50, Savitha Amelia wrote: > Hi, > > I have multiple applications hosted on my tomcat server which includes web > services, web applications etc. > > To secure the web services, we made changes to server.xml ->connector > element and defined roles in tomcat-users.xml. > In the

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 3:01 PM, Savitha Akella wrote: > We are using tomcat version 7.0.11 You should upgrade if you have the chance. 7.0.23 is available and there have been many improvements including fixes for security-related bugs. > Here are the ch

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Savitha Akella
Hi, We are using tomcat version 7.0.11 Here are the changes we made in server.xml: here is my tomcat-users.xml I have changed the web.xml of my web services to refer to the role configured in the tomcat-users.xml. Here is the web.xml: ClientCertificateRequired My

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 12/8/11 11:49 AM, Savitha Akella wrote: > I have multiple applications hosted on my tomcat server which > includes web services, web applications etc. > > To secure the web services, we made changes to server.xml > ->connector element and

Re: Securing only a single web application on Tomcat

2011-12-08 Thread Daniel Mikusa
On Thu, 2011-12-08 at 08:49 -0800, Savitha Akella wrote: > Hi, > > I have multiple applications hosted on my tomcat server which includes web > services, web applications etc. > > To secure the web services, we made changes to server.xml ->connector What specifically did you change in server.xml