We've recently upgraded from CAS3 to CAS6.0.3. I can see that it has an 
admin URL available at /adminlogin. For security, I would like to disable 
this admin login. I can't find much information about the admin login, but 
I believe it is the login for the management stats, as per:

https://apereo.github.io/cas/6.0.x/monitoring/Monitoring-Statistics.html

It looks like I can disable all of the management endpoints with:

management.endpoints.enabled-by-default=false

management.endpoints.web.exposure.include=
management.endpoints.jmx.exposure.exclude=*


However the login endpoint itself is accessible. Is there a property I can use 
to disable it? Or failing that, a change to the WAR overlay?


Thanks.


Hedley

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9c865fd5-7db7-406d-ba38-36de4562ceb8%40apereo.org.

Reply via email to