Ofer Schreiber has submitted this change and it was merged. Change subject: packaging: Disable HTTP and HTTPS when using Apache as proxy ......................................................................
packaging: Disable HTTP and HTTPS when using Apache as proxy This patch changes the setup application and the JBoss configuration file so that the HTTP and HTTPS connectors will be completely disabled and only the AJP connector will be enabled if Apache is used as a proxy. On the other hand, if Apache is not used as a proxy the HTTP and HTTPS connectors will be enabled but the AJP connector will be disabled. This reduces the use of resources in the application server (thread pools) and reduces also the attack surface. It is convenient to be able to enable/disable the connectors at will after the installation. This can be done changing the /etc/sysconfig/ovirt-engine file, without running the setup again. For example, in order to enable the HTTP connector it is enough to add (or just uncomment) the following lines: ENGINE_HTTP_ENABLED=true ENGINE_HTTP_PORT=8080 Then restart the engine and the connector will be available. Same for the HTTPS and AJP connectors. Change-Id: I0d9443d18f1eee928a2fe594527ac0d59c14a5df Signed-off-by: Juan Hernandez <juan.hernan...@redhat.com> --- M packaging/fedora/engine-service.py M packaging/fedora/engine-service.sysconfig M packaging/fedora/engine-service.xml.in M packaging/fedora/setup/engine-setup.py 4 files changed, 121 insertions(+), 69 deletions(-) Approvals: Ofer Schreiber: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/6439 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I0d9443d18f1eee928a2fe594527ac0d59c14a5df Gerrit-PatchSet: 7 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Juan Hernandez <juan.hernan...@redhat.com> Gerrit-Reviewer: Alex Lourie <alou...@redhat.com> Gerrit-Reviewer: Alon Bar-Lev <alo...@redhat.com> Gerrit-Reviewer: Juan Hernandez <juan.hernan...@redhat.com> Gerrit-Reviewer: Ofer Schreiber <oschr...@redhat.com> _______________________________________________ Engine-patches mailing list Engine-patches@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-patches
