Re: Directory listing

2005-04-18 Thread Darryl Wilburn
For Tomcat...

Change the listings parameter in the DefaultServlet
to false.  Don't know for Apache.

Darryl

--- Richard Reyes [EMAIL PROTECTED] wrote:
 What I do is put an access denied index.jsp on every
 subdirectories
 inside the specific webapp folder.
 
 heres my acc. deny index.jsp...
 
 html
 head
 titleAccess Denied/title
 /head
 bodyh1Access Denied/h1/body
 /html
 
 hth.
 richard
 
 On 4/15/05, dummy [EMAIL PROTECTED] wrote:
  
  How can I disable both the apache and tomcat 5.5
 from displaying the
  directory of my web application ?
  
 
 

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 



__ 
Do you Yahoo!? 
Plan great trips with Yahoo! Travel: Now over 17,000 guides!
http://travel.yahoo.com/p-travelguide

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Directory listing

2005-04-18 Thread t.n.a.
Darryl Wilburn wrote:
For Tomcat...
Change the listings parameter in the DefaultServlet
to false.  Don't know for Apache.
 

Just wrapped up both problems myself: the listings parameter takes care 
of tomcat, and a .htaccess file takes care of apache:
$ cat .htaccess
Options -Indexes
$
Just place .htaccess in your root dir and you're ok.

Tomislav
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Directory listing

2005-04-15 Thread Raghupathy,Gurumoorthy
For tomcat  :
http://www.jroller.com/page/coreteam/?anchor=disable_directory_listing_in_to
mcat 

For Apache  :   
Directory YourdocumentRoot
Options -Indexes
/Directory 

Hope this helps 

Guru 


-Original Message-
From: dummy [mailto:[EMAIL PROTECTED] 
Sent: 15 April 2005 05:00
To: Tomcat (E-mail)
Subject: Directory listing



How can I disable both the apache and tomcat 5.5 from displaying the
directory of my web application ?


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Directory listing

2005-04-14 Thread Richard Reyes
What I do is put an access denied index.jsp on every subdirectories
inside the specific webapp folder.

heres my acc. deny index.jsp...

html
head
titleAccess Denied/title
/head
bodyh1Access Denied/h1/body
/html

hth.
richard

On 4/15/05, dummy [EMAIL PROTECTED] wrote:
 
 How can I disable both the apache and tomcat 5.5 from displaying the
 directory of my web application ?
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Directory Listing

2003-09-26 Thread Shapira, Yoav

http://jakarta.apache.org/tomcat/faq/misc.html#listing

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Scott Purcell [mailto:[EMAIL PROTECTED]
Sent: Friday, September 26, 2003 12:24 PM
To: [EMAIL PROTECTED]
Subject: Directory Listing

Hello,

I am running Tomcat 4.0.6 on Win 2000, and I have three web apps
running.

I would like to turn off directory listing, but cannot figure out how.
I
have searched google, but have came up empty. Could someone please let
me
know how to turn 'directory listing' off.

[eg
http://site/webapp currently shows all files in that directory
]

Thanks
Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Directory Listing

2003-09-26 Thread Scott Purcell
Thank you very much,
That has a ton of information I can use down the road. 

Sincerely
Scott

-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Friday, September 26, 2003 11:25 AM
To: Tomcat Users List
Subject: RE: Directory Listing



http://jakarta.apache.org/tomcat/faq/misc.html#listing

Yoav Shapira
Millennium ChemInformatics


-Original Message-
From: Scott Purcell [mailto:[EMAIL PROTECTED]
Sent: Friday, September 26, 2003 12:24 PM
To: [EMAIL PROTECTED]
Subject: Directory Listing

Hello,

I am running Tomcat 4.0.6 on Win 2000, and I have three web apps
running.

I would like to turn off directory listing, but cannot figure out how.
I
have searched google, but have came up empty. Could someone please let
me
know how to turn 'directory listing' off.

[eg
http://site/webapp currently shows all files in that directory
]

Thanks
Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Directory Listing in Tomcat 4.1.24

2003-06-13 Thread John Turner
Yes.

John

On Thu, 12 Jun 2003 09:10:19 -0400, Angus Mezick [EMAIL PROTECTED] 
wrote:

Well, if he got REALLY ambitious he could go edit tomcat itself couldn't
he?
-Original Message-
From: Tim Funk [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2003 
7:23 AM
To: Tomcat Users List
Subject: Re: Directory Listing in Tomcat 4.1.24

There is no way to change directory listing layout.

-Tim

Philipp Gasser wrote:
 Hi all,   I use the tomcat 4.1.24.  Is there a way to change the 
directorylayout?
  _Instead of showing GMT based timestamps for files, I would like to
 display them in my own timestamp format?
  _I would like to change the directory and file order (the youngest 
on top
 of the list, etc)?
  thanks in advance
  Philipp
- 


 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
  
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Directory Listing in Tomcat 4.1.24

2003-06-13 Thread Bill Barker
My thoughts exactly ;-).  Patches are always welcome.

Angus Mezick [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
Well, if he got REALLY ambitious he could go edit tomcat itself couldn't
he?

 -Original Message-
 From: Tim Funk [mailto:[EMAIL PROTECTED]
 Sent: Thursday, June 12, 2003 7:23 AM
 To: Tomcat Users List
 Subject: Re: Directory Listing in Tomcat 4.1.24


 There is no way to change directory listing layout.

 -Tim

 Philipp Gasser wrote:
  Hi all,
 
  I use the tomcat 4.1.24.
  Is there a way to change the directorylayout?
 
  _Instead of showing GMT based timestamps for files, I would like to
  display them in my own timestamp format?
 
  _I would like to change the directory and file order (the
 youngest on top
  of the list, etc)?
 
  thanks in advance
 
  Philipp
 
 
 
 
 
 
 
 
 -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Directory Listing in Tomcat 4.1.24

2003-06-12 Thread Tim Funk
There is no way to change directory listing layout.

-Tim

Philipp Gasser wrote:
Hi all, 

I use the tomcat 4.1.24. 
Is there a way to change the directorylayout?

_Instead of showing GMT based timestamps for files, I would like to
display them in my own timestamp format?
_I would like to change the directory and file order (the youngest on top
of the list, etc)?
thanks in advance

Philipp







-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Directory Listing in Tomcat 4.1.24

2003-06-12 Thread Angus Mezick
Well, if he got REALLY ambitious he could go edit tomcat itself couldn't
he?

 -Original Message-
 From: Tim Funk [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, June 12, 2003 7:23 AM
 To: Tomcat Users List
 Subject: Re: Directory Listing in Tomcat 4.1.24
 
 
 There is no way to change directory listing layout.
 
 -Tim
 
 Philipp Gasser wrote:
  Hi all, 
  
  I use the tomcat 4.1.24. 
  Is there a way to change the directorylayout?
  
  _Instead of showing GMT based timestamps for files, I would like to
  display them in my own timestamp format?
  
  _I would like to change the directory and file order (the 
 youngest on top
  of the list, etc)?
  
  thanks in advance
  
  Philipp
  
  
  
  
  
  
  
  
 -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  
  
  
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Directory Listing in Tomcat 4.1.24

2003-06-12 Thread Phillip Qin
Edit render method in DefaultServlet class and rebuild Tomcat.

-Original Message-
From: Angus Mezick [mailto:[EMAIL PROTECTED] 
Sent: June 12, 2003 9:10 AM
To: Tomcat Users List
Subject: RE: Directory Listing in Tomcat 4.1.24

Well, if he got REALLY ambitious he could go edit tomcat itself couldn't
he?

 -Original Message-
 From: Tim Funk [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, June 12, 2003 7:23 AM
 To: Tomcat Users List
 Subject: Re: Directory Listing in Tomcat 4.1.24
 
 
 There is no way to change directory listing layout.
 
 -Tim
 
 Philipp Gasser wrote:
  Hi all, 
  
  I use the tomcat 4.1.24. 
  Is there a way to change the directorylayout?
  
  _Instead of showing GMT based timestamps for files, I would like to
  display them in my own timestamp format?
  
  _I would like to change the directory and file order (the 
 youngest on top
  of the list, etc)?
  
  thanks in advance
  
  Philipp
  
  
  
  
  
  
  
  
 -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  
  
  
 
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Directory Listing in Tomcat 4.1.24

2003-06-12 Thread Tim Funk
Exactly! I was actually thinking about extending the default servlet, 
overriding the render() method to product an XML document. Then the document 
can go through a client or server side XSLT transformation. (transformation 
method and document based on a config option)

-Tim

Phillip Qin wrote:
Edit render method in DefaultServlet class and rebuild Tomcat.

-Original Message-
From: Angus Mezick [mailto:[EMAIL PROTECTED] 
Sent: June 12, 2003 9:10 AM
To: Tomcat Users List
Subject: RE: Directory Listing in Tomcat 4.1.24

Well, if he got REALLY ambitious he could go edit tomcat itself couldn't
he?

-Original Message-
From: Tim Funk [mailto:[EMAIL PROTECTED] 
Sent: Thursday, June 12, 2003 7:23 AM
To: Tomcat Users List
Subject: Re: Directory Listing in Tomcat 4.1.24

There is no way to change directory listing layout.

-Tim

Philipp Gasser wrote:

Hi all, 

I use the tomcat 4.1.24. 
Is there a way to change the directorylayout?

_Instead of showing GMT based timestamps for files, I would like to
display them in my own timestamp format?
_I would like to change the directory and file order (the 
youngest on top

of the list, etc)?

thanks in advance

Philipp








-

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Directory Listing in Tomcat 4.1.12

2002-12-16 Thread Turner, John

Yes.  Symbolic linking is disabled by default in 4.1.12.  Check the release
notes, search the list archives for allowLinking.  I believe it's broken
in .12 and .13, you might need to go to .14 to get it working 100%, or down
to 4.0.5/6.

John


 -Original Message-
 From: Venkateshwar Bommineni [mailto:[EMAIL PROTECTED]]
 Sent: Friday, December 13, 2002 12:52 PM
 To: [EMAIL PROTECTED]
 Subject: Directory Listing in Tomcat 4.1.12
 
 
 Hello All,
  I would like to use default tomcat directory listing functionality in
 one of my application. And it works fine when I set the docBase to the
 directory which i would like to see as listing. But that directory
 consists of some symbolic links to the files which are outside of that
 directory. And those also have same OS permissions.
  But tomcat unable to show those symbolic links. Is there any
 attribute/flag needs to be set or thats the defined behaviour for
 tomcat. Anybody have workaround for this?
  Also is it possible to configure default directory listing 
 pagesm like
 instead of showing GMT based timestamps for files, I would like to
 display them in my own timestamp formats?
 
  thanks in advance..
 --Venkat
 
 --
 To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Directory Listing

2002-09-20 Thread Dan Lipofsky

In server.xml set suppress=true for StaticInterceptor like below

RequestInterceptor 
   className=org.apache.tomcat.request.StaticInterceptor 
   debug=0 suppress=true /

- Dan

 How do I avoid listing the directory files when users type the url in 
 tomcat 3.2.4?
 Thanks



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Directory Listing

2002-09-20 Thread Ravindra K. Bhat

Hi Dan,

Thanks.  How do I avoid lisitng the directories via apache. I am still
able to view the directory lisitng if I use apache access to get in..

thanks
Ravi

On Fri, 20 Sep 2002, Dan Lipofsky wrote:

 In server.xml set suppress=true for StaticInterceptor like below
 
 RequestInterceptor 
className=org.apache.tomcat.request.StaticInterceptor 
debug=0 suppress=true /
 
 - Dan
 
  How do I avoid listing the directory files when users type the url in 
  tomcat 3.2.4?
  Thanks
 
 
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]
 
 


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Directory Listing

2002-09-20 Thread Matt Raible

Can you use this on Tomcat 4.0.1+? If so, where do you put it in
server.xml?

Thanks,

Matt

 -Original Message-
 From: Dan Lipofsky [mailto:[EMAIL PROTECTED]] 
 Sent: Friday, September 20, 2002 10:16 AM
 To: Tomcat Users List
 Subject: Re: Directory Listing
 
 
 In server.xml set suppress=true for StaticInterceptor like below
 
 RequestInterceptor 
className=org.apache.tomcat.request.StaticInterceptor 
debug=0 suppress=true /
 
 - Dan
 
  How do I avoid listing the directory files when users type 
 the url in
  tomcat 3.2.4?
  Thanks
 
 
 



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Directory Listing for 4.0.1

2002-09-20 Thread Ravindra K. Bhat

In the web xml file under $CATALINA_HOME/conf change the default servlet
settings to: 


servlet
servlet-namedefault/servlet-name
servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class
init-param
param-namedebug/param-name
param-value0/param-value
/init-param
init-param
param-namelistings/param-name
param-valuefalse/param-value
/init-param
init-param
param-namereadonly/param-name
param-valuetrue/param-value
/init-param
load-on-startup1/load-on-startup
/servlet



On Fri, 20 Sep 2002, Matt Raible wrote:

 Can you use this on Tomcat 4.0.1+? If so, where do you put it in
 server.xml?
 
 Thanks,
 
 Matt
 
  -Original Message-
  From: Dan Lipofsky [mailto:[EMAIL PROTECTED]] 
  Sent: Friday, September 20, 2002 10:16 AM
  To: Tomcat Users List
  Subject: Re: Directory Listing
  
  
  In server.xml set suppress=true for StaticInterceptor like below
  
  RequestInterceptor 
 className=org.apache.tomcat.request.StaticInterceptor 
 debug=0 suppress=true /
  
  - Dan
  
   How do I avoid listing the directory files when users type 
  the url in
   tomcat 3.2.4?
   Thanks
  
  
  
 
 
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]
 
 


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Directory Listing

2002-09-20 Thread rsequeira


See the Directory element in httpd.conf. The Indexes option dictates
whether or not the directory is listed.
To suppress directory listings,
  Declare a Directory element for that folder in httpd.conf. Don't add
the Indexes option.

RS



   

  Ravindra K. 

  BhatTo:   Tomcat Users List 

  [EMAIL PROTECTED] [EMAIL PROTECTED]   

  .EDUcc: 

   Subject:  Re: Directory Listing 

  09/20/02 11:30 AM

  Please respond to

  Tomcat Users

  List

   

   





Hi Dan,

Thanks.  How do I avoid lisitng the directories via apache. I am still
able to view the directory lisitng if I use apache access to get in..

thanks
Ravi

On Fri, 20 Sep 2002, Dan Lipofsky wrote:

 In server.xml set suppress=true for StaticInterceptor like below

 RequestInterceptor
className=org.apache.tomcat.request.StaticInterceptor
debug=0 suppress=true /

 - Dan

  How do I avoid listing the directory files when users type the url in
  tomcat 3.2.4?
  Thanks



 --
 To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
For additional commands, e-mail: 
mailto:[EMAIL PROTECTED]







--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Directory Listing per web-app

2002-04-19 Thread Carlos Martins

through the native web server's configuration?
I have this done with IIS, that i use to serve static web pages.

-Original Message-
From: Chad Perry [mailto:[EMAIL PROTECTED]]
Sent: quinta-feira, 18 de Abril de 2002 18:53
Subject: Directory Listing per web-app


I know I can turn off directory listing for the entire tomcat 4.0.3 server via the 
conf/web.xml:


  servlet
.
.
.
  param-namelistings/param-name
  param-valuefalse/param-value
.
.
  /servlet


But how can one turn it off on a per web-app, per directory basis?


Thanks



--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




RE: Directory Listing per web-app

2002-04-19 Thread John Burgess

Adding a welcome file for the web-app should turn off directory listing

Best Wishes
John Burgess
[EMAIL PROTECTED]
Tel: 01865 718666 
Fax: 01865 718600


-Original Message-
From: Chad Perry [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 6:53 PM
Subject: Directory Listing per web-app


I know I can turn off directory listing for the entire tomcat 4.0.3 server
via the conf/web.xml:


  servlet
.
.
.
  param-namelistings/param-name
  param-valuefalse/param-value
.
.
  /servlet


But how can one turn it off on a per web-app, per directory basis?


Thanks



--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.350 / Virus Database: 196 - Release Date: 17/04/02
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.350 / Virus Database: 196 - Release Date: 17/04/02
 

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Directory Listing per web-app

2002-04-18 Thread August Detlefsen

Define the default servlet for each webapp in which you need a
different setting (in WEBAPP_DIR/WEB-INF/web.xml). 


--- Chad Perry [EMAIL PROTECTED] wrote:
 I know I can turn off directory listing for the entire tomcat 4.0.3
 server via the conf/web.xml:
 
 
   servlet
 .
 .
 .
   param-namelistings/param-name
   param-valuefalse/param-value
 .
 .
   /servlet
 
 
 But how can one turn it off on a per web-app, per directory basis?
 
 
 Thanks
 
 
 
 --
 To unsubscribe:   mailto:[EMAIL PROTECTED]
 For additional commands: mailto:[EMAIL PROTECTED]
 Troubles with the list: mailto:[EMAIL PROTECTED]
 


__
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Directory listing vulnerability in Tomcat 3.2

2001-12-03 Thread Renato

I just downloaded and installed Tomcat 3.2.4 and the problem in on this 
version too.

I think that if you a 404 error page defined, this problem doesn't happen.

Anyway, I think it's a vulnerability.

On Mon Dec  3 11:16:34 2001, Renato [EMAIL PROTECTED] 
escreveu :

 Hi all,
 
 Recently I saw in the vuln-dev list a directory
 listing vulnerability in Tomcat 3.2.3. It's simple,
 just call the URL:
 
 http://yousite/%3f.jsp
 
 Is it fixed in Tomcat 3.2.4 ?
 
 Thanks
 
 
 
 --
 To unsubscribe:   mailto:[EMAIL PROTECTED]
 For additional commands: mailto:[EMAIL PROTECTED]
 Troubles with the list: mailto:[EMAIL PROTECTED]
 
 
 
 

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Directory Listing

2001-07-19 Thread Denis

check your configuration file
what port are u using ? 8080 ajpv12 ajpv13
if 8080
try http://localhot:8080
can u see tomcat app ?



At 12:09 19/07/01 -0300, you wrote:
Hi,
I am configuring Tomcat and Apache. They seem to be integrated, but when I 
type for example:

http://localhost/cnpihttp://localhost/cnpi

I can see this:



Index of /cnpi




blank.gif 
http://daniel/cnpi/?N=DName 
http://daniel/cnpi/?M=ALast 
modified   http://daniel/cnpi/?S=ASize 
http://daniel/cnpi/?D=ADescription

--



folder.gif http://daniel/Parent Directory18-Jul-2001 17:51  -
folder.gif 
http://daniel/cnpi/META-INF/META-INF/   19-Jun-2001 
10:27  -
folder.gif 
http://daniel/cnpi/WEB-INF/WEB-INF/19-Jun-2001 10:27  -
folder.gif http://daniel/cnpi/bd/bd/ 16-Jul-2001 
16:52  -
folder.gif http://daniel/cnpi/images/images/ 28-Jun-2001 
17:48  -
folder.gif http://daniel/cnpi/jsp/jsp/16-Jul-2001 
15:42  -
folder.gif http://daniel/cnpi/old/old/19-Jun-2001 
10:27  -
folder.gif http://daniel/cnpi/temp/temp/   26-Jun-2001 
17:53  -

--
Apache/1.3.12 Server at daniel Port 80 How can I avoid directory 
listing ?   Regards   Daniel   ___
Daniel de Almeida Alvares
Santos - SP - Brasil
mailto:[EMAIL PROTECTED][EMAIL PROTECTED]













Re: Directory Listing

2001-07-19 Thread Daniel de Almeida Alvares

yes
i´m using 8080
but ´my app dir is mapped at Apache, and I don´t need to use :8080 but it´s
allowing directory listing !
is it possible to avoid that ?
regards
Daniel
___
Daniel de Almeida Alvares
Santos - SP - Brasil
[EMAIL PROTECTED]
- Original Message -
From: Denis [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, July 19, 2001 12:20 PM
Subject: Re: Directory Listing


 check your configuration file
 what port are u using ? 8080 ajpv12 ajpv13
 if 8080
 try http://localhot:8080
 can u see tomcat app ?



 At 12:09 19/07/01 -0300, you wrote:
 Hi,
 I am configuring Tomcat and Apache. They seem to be integrated, but when
I
 type for example:
 
 http://localhost/cnpihttp://localhost/cnpi
 
 I can see this:
 
 
 
 Index of /cnpi
 
 
 
 
 blank.gif
 http://daniel/cnpi/?N=DName
 http://daniel/cnpi/?M=ALast
 modified   http://daniel/cnpi/?S=ASize
 http://daniel/cnpi/?D=ADescription
 
 --
 
 
 
 folder.gif http://daniel/Parent Directory18-Jul-2001
  -
 folder.gif
 http://daniel/cnpi/META-INF/META-INF/   19-Jun-2001
 10:27  -
 folder.gif
 http://daniel/cnpi/WEB-INF/WEB-INF/19-Jun-2001
  -
 folder.gif http://daniel/cnpi/bd/bd/ 16-Jul-2001
 16:52  -
 folder.gif http://daniel/cnpi/images/images/
28-Jun-2001
 17:48  -
 folder.gif http://daniel/cnpi/jsp/jsp/16-Jul-2001
 15:42  -
 folder.gif http://daniel/cnpi/old/old/19-Jun-2001
 10:27  -
 folder.gif http://daniel/cnpi/temp/temp/   26-Jun-2001
 17:53  -
 
 --
 Apache/1.3.12 Server at daniel Port 80 How can I avoid directory
 listing ?   Regards   Daniel   ___
 Daniel de Almeida Alvares
 Santos - SP - Brasil
 mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
 





Re: Directory Listing

2001-07-19 Thread Denis

when you execute
http://localhost/cnpi
if cnpi is your app
you must have a index.html or a index.jsp

in conf files :
in tomcat.conf
add

Alias /cnpi/usr/website/webapps/cnpi
Directory /usr/website/webapps/cnpi 
/Directory
Location /myApp/WEB-INF/ 
AllowOverride None
deny from all
/Location

in server.xml
uncomment 8080
use ajpv12 for ex
add in server.xml
Context 
path=/cnpi  docBase=webapps/cnpi   crossContext=falsedebug=0 
  reloadable=true   /Context

stop tomcat
stop apache
start tomcat and start apache
see error.log access.log  tomcat.log

good luck

denis


At 12:20 19/07/01 -0300, you wrote:
yes
i´m using 8080
but ´my app dir is mapped at Apache, and I don´t need to use :8080 but it´s
allowing directory listing !
is it possible to avoid that ?
regards
Daniel
___
Daniel de Almeida Alvares
Santos - SP - Brasil
[EMAIL PROTECTED]
- Original Message -
From: Denis [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, July 19, 2001 12:20 PM
Subject: Re: Directory Listing


  check your configuration file
  what port are u using ? 8080 ajpv12 ajpv13
  if 8080
  try http://localhot:8080
  can u see tomcat app ?
 
 
 
  At 12:09 19/07/01 -0300, you wrote:
  Hi,
  I am configuring Tomcat and Apache. They seem to be integrated, but when
I
  type for example:
  
  http://localhost/cnpihttp://localhost/cnpi
  
  I can see this:
  
  
  
  Index of /cnpi
  
  
  
  
  blank.gif
  http://daniel/cnpi/?N=DName
  http://daniel/cnpi/?M=ALast
  modified   http://daniel/cnpi/?S=ASize
  http://daniel/cnpi/?D=ADescription
  
  --
  
  
  
  folder.gif http://daniel/Parent Directory18-Jul-2001
   -
  folder.gif
  http://daniel/cnpi/META-INF/META-INF/   19-Jun-2001
  10:27  -
  folder.gif
  http://daniel/cnpi/WEB-INF/WEB-INF/19-Jun-2001
   -
  folder.gif http://daniel/cnpi/bd/bd/ 16-Jul-2001
  16:52  -
  folder.gif http://daniel/cnpi/images/images/
28-Jun-2001
  17:48  -
  folder.gif http://daniel/cnpi/jsp/jsp/16-Jul-2001
  15:42  -
  folder.gif http://daniel/cnpi/old/old/19-Jun-2001
  10:27  -
  folder.gif http://daniel/cnpi/temp/temp/   26-Jun-2001
  17:53  -
  
  --
  Apache/1.3.12 Server at daniel Port 80 How can I avoid directory
  listing ?   Regards   Daniel   ___
  Daniel de Almeida Alvares
  Santos - SP - Brasil
  mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
  
 




RE: Directory Listing

2001-07-19 Thread Isaac Arias

Daniel,

The easiest and fastest way is to add and empty file called index.jsp
to your /cnpi directory. This will be read instead of showing the
directory listing.

Good luck,

Ike
__

 Isaac Arias
 Tokenzone w www.tokenzone.com /w
__
   Man will occasionally stumble over the truth, but most
 of the time he will pick himself up and continue.
  - Winston Churchill

 -Original Message-
 From: Daniel de Almeida Alvares [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, July 19, 2001 11:20 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Directory Listing


 yes
 i´m using 8080
 but ´my app dir is mapped at Apache, and I don´t need to
 use :8080 but it´s
 allowing directory listing !
 is it possible to avoid that ?
 regards
 Daniel
 ___
 Daniel de Almeida Alvares
 Santos - SP - Brasil
 [EMAIL PROTECTED]
 - Original Message -
 From: Denis [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, July 19, 2001 12:20 PM
 Subject: Re: Directory Listing


  check your configuration file
  what port are u using ? 8080 ajpv12 ajpv13
  if 8080
  try http://localhot:8080
  can u see tomcat app ?
 
 
 
  At 12:09 19/07/01 -0300, you wrote:
  Hi,
  I am configuring Tomcat and Apache. They seem to be
 integrated, but when
 I
  type for example:
  
  http://localhost/cnpihttp://localhost/cnpi
  
  I can see this:
  
  
  
  Index of /cnpi
  
  
  
  
  blank.gif
  http://daniel/cnpi/?N=DName
  http://daniel/cnpi/?M=ALast
  modified   http://daniel/cnpi/?S=ASize
  http://daniel/cnpi/?D=ADescription
  
  --
  
  
  
  folder.gif http://daniel/Parent Directory18-Jul-2001
   -
  folder.gif
  http://daniel/cnpi/META-INF/META-INF/   19-Jun-2001
  10:27  -
  folder.gif
  http://daniel/cnpi/WEB-INF/WEB-INF/19-Jun-2001
   -
  folder.gif http://daniel/cnpi/bd/bd/
   16-Jul-2001
  16:52  -
  folder.gif http://daniel/cnpi/images/images/
 28-Jun-2001
  17:48  -
  folder.gif http://daniel/cnpi/jsp/jsp/
16-Jul-2001
  15:42  -
  folder.gif http://daniel/cnpi/old/old/
19-Jun-2001
  10:27  -
  folder.gif http://daniel/cnpi/temp/temp/
 26-Jun-2001
  17:53  -
  
  --
  Apache/1.3.12 Server at daniel Port 80 How can I
 avoid directory
  listing ?   Regards   Daniel   ___
  Daniel de Almeida Alvares
  Santos - SP - Brasil
  mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
  
 





Re: directory listing

2000-12-06 Thread Jon Skeet

 Please help me..  I currently have Apache 1.3.12 passing any .jsp to
 Tomcat.  (I'm new at this).  How do I turn off the Directory listing in
 Tomcat?  I've tried editing every file I can think of.  This is getting VERY
 frustrating.  Thanks in advance, Greg

Give your StaticInterceptor in server.xml the parameter suppress="true".

Jon