In the Tomcat docs pertaining to security considerations, in the server.xml section, it talks about if the shutdown port is not disabled, a strong password should be configured for <b>shutdown</b> http://tomcat.apache.org/tomcat-7.0-doc/security-howto.html#Server
In the Tomcat docs for configuration, the serve.xml page talks about the shutdown attribute but uses the phrase "command string". Is the "command string" what is being called the password on the security-howto page? http://tomcat.apache.org/tomcat-7.0-doc/config/server.html#Common_Attributes Leo --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org