>How can i block my admin client or add a passowrd to it?
>http://servername:8080/soap/admin
>
>As of now any body on the internet can go and
>*undeploy* my service. How can I make it read only
>atleast or best to block it with a password.

If you build from the source tree, or get one of the nightly builds as
of about 2 weeks ago, then you can disable the SOAP interface to the
Service Manager in the soap.xml file.  If you read the "Server
Configuration" section of the updated User's Guide in the nightly
build (or source tree), it will tell you how to do so.

You still need to remove/secure the admin JSPs, but this solves half
of the problem.

-Bill


Reply via email to