RE: Directory browsing
Is there any similar way for Tomcat 3.2.3/3.2.4 to disable directory browsing, while accessing via Apache 1.3.20? Thanks in advance for any idea. -Original Message- From: Julien OIX [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 2:06 PM To: Tomcat list Subject: Directory browsing hi everyone, I'm using Tomcat/Apache service; in my default web.xml, located in $TOMCAT_HOME/conf, I've these lines: servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param param-namelistings/param-name param-valuefalse/param-value !-- HERE it was true by default -- /init-param load-on-startup1/load-on-startup /servlet so, directory browsing is forbidden by default; Is this possible to specify in this file a directory under my webapp directory which could be browsed ? if not, in an other file ? but for the moment, I don't have any $WEBAPP_HOME/WEB_INF/web.xml ... thanks in advance -- Julien OIX Service Informatique de Gestion Tél: 02 40 99 83 65 mail: [EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
RE: Directory browsing
Also, see the listings attribute for the StaticInterceptor module: http://jakarta.apache.org/tomcat/tomcat-3.3-doc/serverxml.html#StaticInterceptor Cheers, Larry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, February 22, 2002 5:02 PM To: Tomcat Users List Subject: Re: Directory browsing The easiest would be to add an index.html. And add the index.html to the welcome-file in the web.xml for that webapp. (I don't know if you could do the below in Tomcat 3.3a. I know you can do this in Tomcat 4.0.x) Turn off directory browsing by adding this for the default servlet (see web.xml in TOMCAT_HOME/conf/web.xml) init-param param-namelistings/param-name param-valuefalse/param-value /init-param RS Erwin Ambrosch [EMAIL PROTECTED] on 02/22/2002 03:53:13 PM Please respond to Tomcat Users List [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] cc: Subject: Directory browsing Hi, can one say me how I can switch of directory browsing for TC 3.3a. If I send a request http://host/context I get the directory structure of the context (docBase) as the response. Thanks in advance Erwin -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Directory browsing
The easiest would be to add an index.html. And add the index.html to the welcome-file in the web.xml for that webapp. (I don't know if you could do the below in Tomcat 3.3a. I know you can do this in Tomcat 4.0.x) Turn off directory browsing by adding this for the default servlet (see web.xml in TOMCAT_HOME/conf/web.xml) init-param param-namelistings/param-name param-valuefalse/param-value /init-param RS Erwin Ambrosch [EMAIL PROTECTED] on 02/22/2002 03:53:13 PM Please respond to Tomcat Users List [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] cc: Subject: Directory browsing Hi, can one say me how I can switch of directory browsing for TC 3.3a. If I send a request http://host/context I get the directory structure of the context (docBase) as the response. Thanks in advance Erwin -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
RE: directory browsing
In web.xml look for this section, and make sure param-name listings is false: servlet servlet-namedefault/servlet-name servlet-classorg.apache.catalina.servlets.DefaultServlet/servlet-class init-param param-namedebug/param-name param-value0/param-value /init-param init-param param-namelistings/param-name param-valuefalse/param-value /init-param load-on-startup1/load-on-startup /servlet --- Anton Brazhnyk [EMAIL PROTECTED] wrote: Hi, -Original Message- From: Charles N. Harvey III [mailto:[EMAIL PROTECTED]] Sent: Friday, January 25, 2002 9:57 PM To: Tomcat Users List Subject: directory browsing I now that Ishould be able to find this out for myself but... I can't figure out how to turn off directory browsing. I a single app or in tomcat in general. I will keep searching the docs but if someone could help me out I would be greatful. A good place to start is CATALINA_HOME/conf/web.xml (assuming you use TC4). Look at default servlet params. Charlie Anton. -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] __ Do You Yahoo!? Great stuff seeking new owners in Yahoo! Auctions! http://auctions.yahoo.com -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
RE: directory browsing
Hi, -Original Message- From: Charles N. Harvey III [mailto:[EMAIL PROTECTED]] Sent: Friday, January 25, 2002 9:57 PM To: Tomcat Users List Subject: directory browsing I now that Ishould be able to find this out for myself but... I can't figure out how to turn off directory browsing. I a single app or in tomcat in general. I will keep searching the docs but if someone could help me out I would be greatful. A good place to start is CATALINA_HOME/conf/web.xml (assuming you use TC4). Look at default servlet params. Charlie Anton. -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Directory browsing
Directory listings are already a default feature of Tomcat, unless you've turned them off in your $CATALINA_HOME/conf/web.xml file -- see the servlet initialization parameter named listings on the default Carsten Karkola [EMAIL PROTECTED] on 01/11/2002 03:52:20 AM Please respond to Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc: Subject: Directory browsing Is there a possibility to avoid directory browsing in my webapp dirs beside defining wlecome-files. Edit the TOMCAT_HOME/conf/web.xml. The section on servlet initialization parameters: init-param param-namelistings/param-name param-valuefalse/param-value /init-param Thanks, Carsten == == ==Dipl.-Ing. Carsten Karkola == ==TU Dresden - Fak.Bauingenieurwesen - FRZ == == Tel.: +49 351 463 33659 == Fax: +49 351 463 37766 ==e-mail: [EMAIL PROTECTED] == == -- Hope this helps. Thanks. RS To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED] -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Directory browsing
I don't know how to make it in service or context ... but you can try to edit the tomcat_home\conf\web.xml, and change the servlet default configurations to : init-param param-namelistings/param-name param-valuefalse/param-value /init-param Rgds, Andy. At 14:51 13/12/2001 +, you wrote: Hi all. How does one disable directory browsing for a Context (or even a Service)? Many thanks Duncan -- To unsubscribe: mailto:[EMAIL PROTECTED] For additional commands: mailto:[EMAIL PROTECTED] Troubles with the list: mailto:[EMAIL PROTECTED]
Re: Directory Browsing in tomcat
hi , Can u please tell me how did you manage to stop directory listing in Apache !!! Thanks in advance Kind regards Harish Gundecha Systems Administrator Email: [EMAIL PROTECTED] Versaware Technologies (India) Pvt. Ltd. Phone : +91-20-6136028 Extn: 331 - Original Message - From: Carlos Lpez To: [EMAIL PROTECTED] Sent: Friday, January 19, 2001 8:43 PM Subject: Directory Browsing in tomcat Hi there Is there any way to deny acces to any directory in my webapp so that the user can't browse truw it. I have already done this in apache but if I type my url whith :8080 it shows me the directory listing thanks
Re: Directory Browsing in tomcat
You can simply add the Options -Indexes parameter in the VirtualHost node. To make you we site not only present some default "403 Forbidde" message, you can also define the ErrorDocument to provide - which could again point to your Root document. VirtualHost 192.168.100.100 ServerName www.server.com ServerAdmin [EMAIL PROTECTED] DocumentRoot D:/sites/xyz Options -Indexes ErrorDocument 403 http://www.server.com /VirtualHost cheers Andreas ICLIP AGwww.iclip.ch Andreas Leitel [EMAIL PROTECTED] Postfach 3001 Bern+41 (0)78 629 5883
Re: directory browsing....
mathew schrieb: can somebody tell me how do i prevent directory browsing when i am running tomcat as standalone web server eg. http://localhost:8080/examples/ The problem and the solution appears serveral times in the mailing list and in several mailing archives AND it is to be found in the server.xml file in the tomcat/conf directory. !-- "default" handler - static files and dirs. Set the "suppress" property to "true" to suppress directory listings when no welcome file is present. NOTE: This setting applies to *all* web applications that are running in this instance of Tomcat. -- RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" debug="0" suppress="true" / so long! simon - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, email: [EMAIL PROTECTED]
Re: Directory Browsing Option
I have not verified it yet but it appears that you can set the suppress property to true for the StaticInterceptor in server.xml !-- "default" handler - static files and dirs. Set the "suppress" property to "true" to suppress directory listings when no welcome file is present. NOTE: This setting applies to *all* web applications that are running in this instance of Tomcat. -- RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" debug="0" suppress="true" / --- Tim Kang [EMAIL PROTECTED] wrote: Do you guys know how to turn off the directory browsing option in Tomcat? Thanks Tim __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/
RE: Directory Browsing Option
I don't have StaticInterceptor in my server.xml -Original Message- From: David M. Holmes [mailto:[EMAIL PROTECTED]] Sent: December 16, 2000 3:42 PM To: [EMAIL PROTECTED] Subject: Re: Directory Browsing Option I have not verified it yet but it appears that you can set the suppress property to true for the StaticInterceptor in server.xml !-- "default" handler - static files and dirs. Set the "suppress" property to "true" to suppress directory listings when no welcome file is present. NOTE: This setting applies to *all* web applications that are running in this instance of Tomcat. -- RequestInterceptor className="org.apache.tomcat.request.StaticInterceptor" debug="0" suppress="true" / --- Tim Kang [EMAIL PROTECTED] wrote: Do you guys know how to turn off the directory browsing option in Tomcat? Thanks Tim __ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/
