Re: anonymising Tomcat

2005-08-14 Thread Paul Singleton
David Smith wrote: Essentially you're looking for this in web.xml: error-page error-code404/error-code location/some/error/page.jsp/location /error-page There's also a version for dealing with exceptions: error-page exception-typejava.io.IOException/exception-type

Re: anonymising Tomcat

2005-08-08 Thread Paul Singleton
Rainer Jung wrote: Take a look at ./org/apache/catalina/util/ServerInfo.properties in CATALINA_HOME/server/lib/catalina.jar. It contains: server.info=Apache Tomcat/5.5.10 server.number=5.5.10.0 You can put different values in there and deploy the new properties file in

Re: anonymising Tomcat

2005-08-08 Thread Rainer Jung
Yes, that's how it works. I Think taht possibility already existed at least back to 4.0... The order in which the different repositories are searched for classes (and property files) is defined in CATALINA_BASE/conf/catalina.properties. The file included in the usual distribution has classes

Re: anonymising Tomcat

2005-08-06 Thread Rainer Jung
Take a look at ./org/apache/catalina/util/ServerInfo.properties in CATALINA_HOME/server/lib/catalina.jar. It contains: server.info=Apache Tomcat/5.5.10 server.number=5.5.10.0 You can put different values in there and deploy the new properties file in

RE: anonymising Tomcat

2005-08-05 Thread Peter Crowther
From: Paul Singleton [mailto:[EMAIL PROTECTED] Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? It's possible to add the 'server' attribute to the connector definition for the HTTP connector; server=BogoMAX v0.1

Re: anonymising Tomcat

2005-08-05 Thread Paul Singleton
Peter Crowther wrote: From: Paul Singleton [mailto:[EMAIL PROTECTED] Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? It's possible to add the 'server' attribute to the connector definition for the HTTP

Re: anonymising Tomcat

2005-08-05 Thread David Smith
Servlet spec 2.4 describes what you're looking for in section SRV 9.9.2 with more info in SRV.13.4 on how to configure it. Essentially you're looking for this in web.xml: error-page error-code404/error-code location/some/error/page.jsp/location /error-page There's also a version for dealing

RE: anonymising Tomcat

2005-08-04 Thread MC Moisei
That a good question Paul. On top of that is there a way to threat/redirect requests to a different application while the requested application is being deployed ? From: Paul Singleton [EMAIL PROTECTED] Reply-To: Tomcat Users List tomcat-user@jakarta.apache.org To: Tomcat Users List

Re: anonymising Tomcat

2005-08-04 Thread Bill Barker
Paul Singleton [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Is it possible to configure Tomcat (5.5.9) so that a moderately able hacker couldn't figure out what is serving up our web apps? As documented at http://jakarta.apache.org/tomcat/tomcat-5.5-doc/config/http.html: