Hi,

RC1 means Release Candidate 1, which you can get at the Axis Homepage. In
the docs folder is a file called security.html.

greetz
Mark

-----Urspr�ngliche Nachricht-----
Von: Gianluca Del buono [mailto:[EMAIL PROTECTED]]
Gesendet: Mittwoch, 19. Februar 2003 19:35
An: [EMAIL PROTECTED]
Betreff: R: security - AdminService


Hi Steve ,
thanks for your answer...
sorry for the silly question, but 

>>RC1 has a document on security

what do you mean by RC1 and where can I find this document ?
thanks

-----Messaggio originale-----
Da: Steve Loughran [mailto:[EMAIL PROTECTED]] 
Inviato: mercoled� 19 febbraio 2003 18.36
A: [EMAIL PROTECTED]
Oggetto: Re: security - AdminService

RC1 has a document on security...it should answer your questions.
AdminService only accepts calls from the local host, and it already has
a
default password..you can change it if you want

----- Original Message -----
From: "Gianluca Del buono" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, February 19, 2003 01:13
Subject: security - AdminService


> Hi,
> How safe is to go into a production environment leaving the
AdminService
> enabled ? That would make my web services vulnerable to a malicious
> attack where -for example- someone could use the AdminService to
easily
> undeploy my services.
> What are the security precautions I should take before deploying my
axis
> server into a production environment ?
> Should I disable the AdminService ? But what are the drawback of this
> option ? Or would'nt be better to set a password for the AdminService?
> Is it possible , and how ?
>
> Many thanks in advance for your help.
>
> Gianluca
>
>
>



Reply via email to