So are you telling me that the only way to have a secure Apache SOAP
installation is to rewrite the soap library itself?



                                                                                       
                            
                    armstpat@Wells                                                     
                            
                    Fargo.COM            To:     [EMAIL PROTECTED]              
                            
                                         cc:                                           
                            
                    14.05.2002           Subject:     RE: How to disable 
ServiceManagerClient                      
                    16:04                                                              
                            
                    Please respond                                                     
                            
                    to soap-user                                                       
                            
                                                                                       
                            
                                                                                       
                            




You can extend server/http/RPCRouterServlet, rpc/Call and
server/ServiceManagerClient to be password protected.  You can use basic
HTTP authorization, or pass information via the request headers and code
your own authorization.  As far as I can tell, all calls to the
ServiceManager still go through the RPCRouterServlet.

-----Original Message-----
From: Kristj�n Bjarni Gu�mundsson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 14, 2002 8:28 AM
To: [EMAIL PROTECTED]
Subject: RE: How to disable ServiceManagerClient



But I still want to be able to deploy using ServiceManager.

I only want to disable the client so that hackers cannot deploy
services on my server.

How do I only disable the ServiceManagerClient?





                    "RICARD Bertrand ext

                    DvSI/SICoR"                    To:
<[EMAIL PROTECTED]>
                    <externe.ricard@francete       cc:

                    lecom.com>                     Subject:     RE: How to
disable ServiceManagerClient


                    14.05.2002 14:02

                    Please respond to

                    soap-user









You can use soap.xml file to specifie a specific configManager in which you
can just allow list() and query() methods.

Bertrand

-----Message d'origine-----
De : Kristj�n Bjarni Gu�mundsson [mailto:[EMAIL PROTECTED]]
Envoy� : lundi 13 mai 2002 16:53
� : [EMAIL PROTECTED]
Objet : How to disable ServiceManagerClient


I am using the latest  Apache SOAP v2.2

How do I disable the ServiceManagerClient?
 --------------------------------------------------------------------------
 �byrg� ��n var�andi t�lvup�st:
 Your E-mail responsibilities:
 http://www.hugvit.is/tolvupostur
 --------------------------------------------------------------------------






 --------------------------------------------------------------------------

 �byrg� ��n var�andi t�lvup�st:

 Your E-mail responsibilities:

 http://www.hugvit.is/tolvupostur

 --------------------------------------------------------------------------






 -------------------------------------------------------------------------- 
 �byrg� ��n var�andi t�lvup�st:                                             
 Your E-mail responsibilities:                                              
 http://www.hugvit.is/tolvupostur                                           
 -------------------------------------------------------------------------- 




Reply via email to