Hi, There's no way to turn this off, it's a basic and essential Tomcat function. You can change the port and SHUTDOWN command itself to something your "users" wouldn't know.
Yoav Shapira Millennium Research Informatics >-----Original Message----- >From: Mats Henrikson [mailto:[EMAIL PROTECTED] >Sent: Thursday, August 19, 2004 7:26 AM >To: Tomcat User >Subject: server port and shutdown > >Hi, > >I have searched through the archives and the docs for this, but can't >find anything relevant. > >I am running Tomcat 4.1.30 on a multiuser system. Because there are >quite a few users on the system I would like to disable the server >shutdown port, as it is trivial for any of the other users to telnet >there and type SHUTDOWN. > >I tried just leaving the port and shutdown attributes out of the Server >definition element, but that didn't seem to have any effect, it seemed >to just listen on the default port 8005 for the default command SHUTDOWN >as usual. > >Surely there is some way to turn this off, or maybe some other to >protect it from malicious users? > >Regards, > >Mats > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
