topic Re: Secure Tomcat in Operating System - HP-UX

Secure Tomcat

John Peace — Mon, 01 Mar 2004 07:53:48 GMT

Java 1.4.2
Jakarta Tomcat 4.1.30
HPUX 11.11
HP L3000

We are running an application that needs to use Tomcat. I have installed Java and Tomcat and they are working. What I am looking for is a way to configure Java and/or Tomcat to accept connections from a range of specific IP's. I have looked at inetd.sec, but it looks to me like it is only used for ports identified in /etc/services. Any help is appreciated.

I am new to Tomcat and Java.

Thanks

Re: Secure Tomcat

Steven E. Protter — Mon, 01 Mar 2004 08:13:27 GMT

You might find some success with the file
/var/adm/inetd.sec

This lets you limit logons of many types by ip address, and may be useful here.

Alternatively the httpd.conf file may be modified to do this too.

I don't think /etc/services which is kind of a reservation file for applications and is not universally used (oracle doesn't bother) is the way to go.

SEP

Re: Secure Tomcat

John Peace — Tue, 02 Mar 2004 07:17:19 GMT

Have not forgot about assigning points. I have not figured it out yet. I am also looking at using the server.xml file. Can't get it to work either :(

Re: Secure Tomcat

Naveej.K.A — Wed, 03 Mar 2004 22:37:23 GMT

Hi john,

Following link could be of some help. It talks about restricting usring the IP address with the help of apache.

http://unix.ittoolbox.com/browse.asp?c=UNIXPeerPublishing&r=http%3A%2F%2Fapache%2Dserver%2Ecom%2Ftutorials%2FLPauth1%2Ehtml

With best wishes
naveej

Re: Secure Tomcat

John Peace — Wed, 24 Mar 2004 06:57:59 GMT

I hassigned points. I have not got this working yet. If and when I get it to work I will repost here.