3 Replies Latest reply on Dec 23, 2009 6:11 AM by jaikiran pai

    How to forbid folder listings

    George Rusetsky Newbie

      Hello.

      Im newbie in this. We have one server which is using Jboss. And users can make a folder listing by requesting http://192.168.0.1:8080/ address. Is any way how to restrict this.

      After some searching I found in http://tomcat.apache.org/tomcat-6.0-doc/default-servlet.html#secure website how to forbid an access to folder listing.

      web.xml (under $CATALINA_BASE/conf/web.xml) should be modified like this

       

      <init-param>
                  <param-name>listings</param-name>
                  <param-value>false</param-value>
              </init-param>

       

      Question: is our folder /jboss/jboss-4.0.5.GA/server/all/deploy/jbossweb-tomcat55.sar/conf/ same with mentioned /conf/ ?

      And last one: after modifications of web.xml do I need to restart jboss\tomcat ?

       

      Thanks for your time.