Re: Securing an Axis deployment

2005-01-28 Thread Tim K. (Gmane)
Anyone out there who uses Axis on a production system and has disabled these features? Thanks. Tim Tim K. (Gmane) wrote: Hello, How can I turn off these features for an Axis production deployment: 1) Disable the generation of WSDL when one goes to http://server:port/app/ws/ServiceName?wsdl 2)

Re: Securing an Axis deployment

2005-01-28 Thread Mike Barton
Tim, Yes, we have done something very similar to that by using custom Axis handlers and web app filters. Mike Tim K. (Gmane) wrote: Anyone out there who uses Axis on a production system and has disabled these features? Thanks. Tim Tim K. (Gmane) wrote: Hello, How can I turn off these features

Re: Securing an Axis deployment

2005-01-28 Thread Tim K. (Gmane)
OK, so it's not possible via Axis' configuration. That's what I wanted to know so I can look at alternatives. I guess one alternative is to patch the code, maybe even add an option so I can flip it between dev and production envs. Tim Mike Barton wrote: Tim, Yes, we have done something very

Re: Securing an Axis deployment

2005-01-26 Thread Yves Erb
- Original Message - From: Tim K. (Gmane) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 1:46 AM Subject: Securing an Axis deployment Hello, How can I turn off these features for an Axis production deployment: 1) Disable the generation of WSDL when one goes to http

Re: Securing an Axis deployment

2005-01-26 Thread Eugene Shershnev
, not necessarily in AXIS_HOME/WEB-INF/classes. -- Eugene - Original Message - From: Yves Erb [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 11:41a Subject: Re: Securing an Axis deployment Hello, I think I can help you for the first point. In the service element

Securing an Axis deployment

2005-01-25 Thread Tim K. (Gmane)
Hello, How can I turn off these features for an Axis production deployment: 1) Disable the generation of WSDL when one goes to http://server:port/app/ws/ServiceName?wsdl 2) Turn off listing the available services and their methods by going to http://server:port/app/ws/ 3) Turn off all Admin