users@glassfish.java.net

Re: How to disable directory listing?

From: Kedar Mhaswade <Kedar.Mhaswade_at_Sun.COM>
Date: Tue, 19 Sep 2006 10:00:36 -0700

That's right. At least that's what's planned :)

See:
http://www.glassfishwiki.org/gfwiki/attach/GlassFishV2AdminRelatedOnePagers/admin-fs.html#dcm


Jeanfrancois wrote:
>
>
> Edson Carlos Ericksson Richter wrote:
>
>> Thanks for the fast response.
>> Since the server is out of my office, there is any chance I can set
>> this property using Admin GUI? I have access to 4848 port, but not to
>> ssh port (it's a Windoze box).
>
>
> Not now, but I know the admin team is exploring a way to make some
> server beans available (hence the admin gui can implement the feature).
>
> - Jeanfrancois
>
>>
>> Tkx,
>>
>> Richter
>>
>>
>>
>> Jeanfrancois escreveu:
>>
>>>
>>>
>>> Edson Carlos Ericksson Richter wrote:
>>>
>>>> Sometimes this feature is a need. Sometimes it's just a security fault.
>>>> AFAIK, directory listing is enabled by default. How could I disable
>>>> this?
>>>
>>>
>>> I agree it should be disabled, but changing default value in
>>> GlassFish out of the box configuration is not easy ;-) Just think
>>> about access logging still enabled :-).
>>>
>>> Edit ${glassfish.home}/domains/domain1/config/default-web.xml and
>>> change:
>>>
>>> <servlet>
>>> <servlet-name>default</servlet-name>
>>>
>>> <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
>>>
>>> <init-param>
>>> <param-name>debug</param-name>
>>> <param-value>0</param-value>
>>> </init-param>
>>> <init-param>
>>> <param-name>listings</param-name>
>>> <param-value>true</param-value>
>>> </init-param>
>>> <load-on-startup>1</load-on-startup>
>>> </servlet>
>>>
>>> Set listing to false.
>>>
>>> -- Jeanfrancois
>>>
>>>
>>>>
>>>> Tkx,
>>>>
>>>> Edson Richter
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>>>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>>>
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>