AW: impact of setting autoDeploy="false" in server.xml

[Thomas Hoffmann (Speed4Trade GmbH)]

> -----Ursprüngliche Nachricht-----
> Von: Rathore, Rajendra <rarath...@ptc.com>
> Gesendet: Freitag, 22. April 2022 15:58
> An: users@tomcat.apache.org
> Betreff: impact of setting autoDeploy="false" in server.xml
> Priorität: Hoch
> 
> Hi Team,
> 
> Please let me know the impact of setting autoDeploy="false" in server.xml
> files. Some of them I might aware like autodeploy is not going to work,
> impact for day light.
> 
> I ready some blogs and they saying that for production server you need to
> set the property to false, please confirm the same as you are the expert of
> this area.
> 
> 
> 
> Thanks and Regards,
> Rajendra Rathore
> 9922701491

Hello,

autoDeploy=true will automatically deploy/run all war-files which are placed 
under /webapps.
Some ppl might consider it as a security risk, if someone is able to store a 
war-file there.
If someone has access to your /webapps folder, the server might be compromised 
anyway.

If you don't need this kind of autodeployment, you can set it to false.
You could use tomcat-manager to manually deploy your war-files or just restart 
Tomcat service if this is feasible.

Greetings,
Thomas



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org