Re: Securing Tomcat Manager auth-method

2011-09-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/26/2011 11:30 AM, André Warnier wrote: > Leo Donahue - PLANDEVX wrote: >> In light of the recent announcement, is securing Tomcat Manager >> with org.apache.catalina.valves.RemoteAddrValve enough if we are >> using 127.0.0.1 or should I co

Re: Securing Tomcat Manager auth-method

2011-09-26 Thread André Warnier
Leo Donahue - PLANDEVX wrote: In light of the recent announcement, is securing Tomcat Manager with org.apache.catalina.valves.RemoteAddrValve enough if we are using 127.0.0.1 or should I consider changing the manager auth-method from BASIC to FORM and enable HTTPS as well? Is running Tomcat a

Securing Tomcat Manager auth-method

2011-09-26 Thread Leo Donahue - PLANDEVX
In light of the recent announcement, is securing Tomcat Manager with org.apache.catalina.valves.RemoteAddrValve enough if we are using 127.0.0.1 or should I consider changing the manager auth-method from BASIC to FORM and enable HTTPS as well? Is running Tomcat as a Windows service considered