Hey! I had a question! Can you shutdown the machine by typing http://localhost:8005 in the browser? I thought this was disabled in the Tomcat version 4 onwards?
Regards Rajaneesh -----Original Message----- From: Ben Ricker [mailto:[EMAIL PROTECTED] Sent: Thursday, January 13, 2005 4:44 AM To: Tomcat Users List Subject: Re: Shutdown port For an extra bit of security,replace "SHUTDOWN" with some sort of long, random string and then lock down the server.xml to 640. Someone who gains, or already has access to the box can shut it down the other way. Ben Ricker On Jan 12, 2005, at 6:55 AM, Frank Parato wrote: > > Is there a way to remove the shutdown port on a server ? I tried > pulling the "port=8005" option out, but it still listens on that port > and I'm able to shut it down. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
