-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Iain,
On 1/14/2010 6:16 AM, iainmac wrote: > Sorry, not sure what you want an example of, and not sure what you mean when > you ask what connectors I am using (not really an expert) I meant the <Connector> elements specified in conf/server.xml. Just post them all if you'd like. > Using Tomcat 5.0.16. As Pid says, that version is quite old. Tomcat 5.0 does advertise that "allowTrace" is a configuration option on both the HTTP and AJP connectors (had to look that one up on the Wayback Machine it's sooooo old!), but it may have been broken/unimplemented. > My workaround did pass the security scan. Good, although you shouldn't need it. > Strangely I had the same version > of Tomcat on a different box where the allowTrace="false" did what it was > supposed to. I was flummoxed when it didn't work n the new box. Perhaps you edited the wrong configuration file, or perhaps you changed a <Connector> you aren't using. If you post the whole conf/server.xml, we might be able to see what's going on. Other details about your environment might be helpful, too. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAktQkDYACgkQ9CaO5/Lv0PD5uACgqHn8tQzhu6sqP6XeHkGu7vvE k3gAnivwb+sqyZs/tIjT4q0Rg8kvC5bk =UJQX -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
