We've recently upgraded from CAS3 to CAS6.0.3. I can see that it has an 
admin URL available at /adminlogin. For security, I would like to disable 
this admin login. I can't find much information about the admin login, but 
I believe it is the login for the management stats, as per:

https://apereo.github.io/cas/6.0.x/monitoring/Monitoring-Statistics.html

It looks like I can disable all of the management endpoints with:

management.endpoints.enabled-by-default=false

management.endpoints.web.exposure.include=
management.endpoints.jmx.exposure.exclude=*


However the login endpoint itself is accessible. Is there a property I can use 
to disable it? Or failing that, a change to the WAR overlay?


Thanks.


Hedley

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9c865fd5-7db7-406d-ba38-36de4562ceb8%40apereo.org.

Reply via email to