Hi folks.
Even having found AS2 web-based itf valuable in particular cases, since the protocol remains unsecured I would consider an access through web-interface as potential security gap. Can someone put me on the way to know how to disable or (better) manage access rules to this? Any sort of params?
Thx
pce
You are here
AS2 client Web interface - how to disable access or differ between accessors
Tue, 2010-05-11 13:19
#1
pce_logapp
AS2 client Web interface - how to disable access or differ between accessors
pce_logapp,
you could set the password in the file jetty/etc/realm.properties.
Regards
Heller
Hi Heller.
Thanks for comment. Even pwd change helps I would still rather prefer the way to restrict an access.
Thanks anyhow.
Petr
pce_logapp,
You could disable the web interface servlet:
Please unzip as2.war. You will find the file web.xml in it where the available servlets are defined.
After removing the servlet sections related to "as2webgui" you could zip the files back to as2.war and restart the as2 server.
Regards
Heller
Hi.
Thanks a lot for yout input. That's what I was looking for.
Thanks again.
pce