users@glassfish.java.net

Re: How to disable directory listing?

From: Jeanfrancois <Jeanfrancois.Arcand_at_Sun.COM>
Date: Tue, 19 Sep 2006 10:41:50 -0700

Edson Carlos Ericksson Richter wrote:
> Thanks for the fast response.
> Since the server is out of my office, there is any chance I can set this
> property using Admin GUI? I have access to 4848 port, but not to ssh
> port (it's a Windoze box).

Not now, but I know the admin team is exploring a way to make some
server beans available (hence the admin gui can implement the feature).

- Jeanfrancois

>
> Tkx,
>
> Richter
>
>
>
> Jeanfrancois escreveu:
>>
>>
>> Edson Carlos Ericksson Richter wrote:
>>> Sometimes this feature is a need. Sometimes it's just a security fault.
>>> AFAIK, directory listing is enabled by default. How could I disable
>>> this?
>>
>> I agree it should be disabled, but changing default value in GlassFish
>> out of the box configuration is not easy ;-) Just think about access
>> logging still enabled :-).
>>
>> Edit ${glassfish.home}/domains/domain1/config/default-web.xml and change:
>>
>> <servlet>
>> <servlet-name>default</servlet-name>
>>
>> <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
>>
>> <init-param>
>> <param-name>debug</param-name>
>> <param-value>0</param-value>
>> </init-param>
>> <init-param>
>> <param-name>listings</param-name>
>> <param-value>true</param-value>
>> </init-param>
>> <load-on-startup>1</load-on-startup>
>> </servlet>
>>
>> Set listing to false.
>>
>> -- Jeanfrancois
>>
>>
>>>
>>> Tkx,
>>>
>>> Edson Richter
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net