[
https://issues.apache.org/jira/browse/TOMEE-423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13460407#comment-13460407
]
Alex the Rocker commented on TOMEE-423:
---------------------------------------
I feel confortable with the 1st option : EJB transport servlet should be
documented, so that it could be activated on per case basis (and security
aspect of it could be homogeneous with the one of the web app using this
servlet).
Is it possible?
> Move TomEE's transport out of the tomee's management UI web app
> ---------------------------------------------------------------
>
> Key: TOMEE-423
> URL: https://issues.apache.org/jira/browse/TOMEE-423
> Project: TomEE
> Issue Type: Improvement
> Affects Versions: 1.0.0, 1.5.0
> Reporter: Alex the Rocker
>
> As a measure of security hardening, people want to delete the application
> server's management UI to prevent remote access to it ; especially for app
> servers exposed to Internet access.
> Problem with removing tomee from webapps directory is that it contains EE
> features such an EJB transport.
> This JIRA is to request a separation of TomEE transport features from TomEE
> management web app ; so that this later web app can safely deleted without
> risking any regression for web applications run-time features.
> Apache Tomcat supports with process, so it can be a showstopper for
> organizations considering a move from Tomcat to TomEE.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
