How to disable PUT/DELETE method in SMC tomcat

Hi,

SMC provides tomcat as the web server to allow logon the SMC console through IE.

For security consideration, we have to disable the http "PUT" and "DELETE" method of tomcat. Its config file seems to be /opt/SUNWsymon/web/conf/catalina.policy, but I have no knowledge of this file.

Do anyone know how to disable PUT/DELETE method in tomcat? Or provide me a reference book for this issue?

Thanks a lot.

[435 byte] By [PRCGavinLiu] at [2007-11-26 6:01:19]
# 1

> For security consideration, we have to disable the

> http "PUT" and "DELETE" method of tomcat. Its config

> file seems to be

> /opt/SUNWsymon/web/conf/catalina.policy, but I have

> no knowledge of this file.

I'm not sure how to disable that feature, but be aware if you disable the ability for Agents to send files to the SunMC web server you may break all Configuration Tasks. Agent config files are sent to the Server by HTTP to allow them to be stored as templates/snapshots.

I don't remember seeing instructions on how to make the changes you want: the quickest way to find out is probably to call SunMC support.

Regards,

Mike.Kirk@HalcyonInc.com

Aronek at 2007-7-6 13:23:26 > top of Java-index,Administration Tools,Sun Management Center...