Hello.

Im newbie in this. We have one server which is using Jboss. And users can make a folder listing by requesting http://192.168.0.1:8080/ address. Is any way how to restrict this.

After some searching I found in http://tomcat.apache.org/tomcat-6.0-doc/default-servlet.html#secure website how to forbid an access to folder listing.

web.xml (under $CATALINA_BASE/conf/web.xml) should be modified like this

<init-param>
            <param-name>listings</param-name>
            <param-value>false</param-value>
        </init-param>

Question: is our folder /jboss/jboss-4.0.5.GA/server/all/deploy/jbossweb-tomcat55.sar/conf/ same with mentioned /conf/ ?

And last one: after modifications of web.xml do I need to restart jboss\tomcat ?

Thanks for your time.