> From: Theresa Whitney [mailto:[email protected]] > Subject: changing tomcat default password
> I am trying to address a security vulnerability notification for several > servers. We have tomcat6 installed. Right there is your biggest security problem - Tomcat 6 has reached end of life and may not receive any more fixes. To quote from the "Which version?" page: "Users of Tomcat 6 should be aware that Tomcat 6 has now reached end of life. Users of Tomcat 6.x should upgrade to Tomcat 7.x or later." http://tomcat.apache.org/whichversion.html > The notification indicates that I need to change the default passwords > in the admin-users.xml file. No such file is distributed with a standard Tomcat; are you sure you have the right file name? In which directory is it located? > Can I just change the password in the xml file? Difficult to say, since it's not part of an official Tomcat. > Sorry for my ignorance ... I am a total newbie. As we all were at some point. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. -----Original Message----- -- Theresa Whitney Systems Administrator - Server Support Northside ISD ph: (210) 397-7727 email: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
