Secure Tomcat

[John Peace]

Java 1.4.2
Jakarta Tomcat 4.1.30
HPUX 11.11
HP L3000

We are running an application that needs to use Tomcat. I have installed Java and Tomcat and they are working. What I am looking for is a way to configure Java and/or Tomcat to accept connections from a range of specific IP's. I have looked at inetd.sec, but it looks to me like it is only used for ports identified in /etc/services. Any help is appreciated.

I am new to Tomcat and Java.

Thanks

[Steven E. Protter]

You might find some success with the file
/var/adm/inetd.sec

This lets you limit logons of many types by ip address, and may be useful here.

Alternatively the httpd.conf file may be modified to do this too.

I don't think /etc/services which is kind of a reservation file for applications and is not universally used (oracle doesn't bother) is the way to go.

SEP

[John Peace]

Have not forgot about assigning points. I have not figured it out yet. I am also looking at using the server.xml file. Can't get it to work either :(

[Naveej.K.A]

Hi john,

Following link could be of some help. It talks about restricting usring the IP address with the help of apache.


http://unix.ittoolbox.com/browse.asp?c=UNIXPeerPublishing&r=http%3A%2F%2Fapache%2Dserver%2Ecom%2Ftutorials%2FLPauth1%2Ehtml

With best wishes
naveej

[John Peace]

I hassigned points. I have not got this working yet. If and when I get it to work I will repost here.