Hi, Thanks for the replies from both of you (Chris and Chuck). One final question, what attribute of the server element would I need to change if I wanted to stop the tomcat version being reported in the http header? Looking at the docs there are only 4 attributes, is it classname? Would I need to implement a custom class if so?
-----Original Message----- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 25 March 2009 13:38 To: Tomcat Users List Subject: Re: URL: /manager/html -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Paul, On 3/25/2009 9:24 AM, Ockleford Paul (NHS Connecting for Health) wrote: > Thanks again, we don't want to use it at all Then undeploy it: 1. Stop Tomcat 2. Remove the file $CATALINA_HOME/conf/[enginename]/[hostname]/manager.xml (I would recommend moving it somewhere, in case you want to bring it back at some point). You might want to look at any other applications that are deployed by default. Any .xml files in that directory will deploy other applications. You should remove anything you don't need. > browsing to the url reported a tomcat standard error page that > revealed the tomcat version we are using. That is something they will > pick up on during the test and is something we hadn't noticed before. Have you changed the "server" attribute of your <Connector>s? If not, your HTTP headers are likely revealing the Tomcat version you are using. Is that a big deal? > How would I undeploy the entire app so that browsing to the url > /manager/ would not result in a standard error page? Unless you have deployed your own webapp as the ROOT webapp, you will get 404 errors that might contain this information. If you *do* have your webapp deployed as ROOT, then your own <error-page> configuration from web.xml should be able to take care of 404 errors and show whatever page you'd rather see. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAknKM9IACgkQ9CaO5/Lv0PDs/gCgtUqAgtKhcr1Da6xYmICUrSuv qKMAnR4MSCfvowvjU4m0kHoxw/ApJN2J =Ynzv -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org ********************************************************************** This message may contain confidential and privileged information. If you are not the intended recipient please accept our apologies. Please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents: to do so is strictly prohibited and may be unlawful. Please inform us that this message has gone astray before deleting it. Thank you for your co-operation. NHSmail is used daily by over 100,000 staff in the NHS. Over a million messages are sent every day by the system. To find out why more and more NHS personnel are switching to this NHS Connecting for Health system please visit www.connectingforhealth.nhs.uk/nhsmail ********************************************************************** --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
