Granny's Programming Pearls
"inside of every large program is a small program struggling to get out"
JavaRanch.com/granny.jsp
Win a copy of Think Java: How to Think Like a Computer Scientist this week in the Java in General forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

eliminate of jboss information in responce

 
fati mirian
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi friends
I want to change configuration of jboss so that application server information (Servlet 2.4; JBoss-4.2.1.GA (build: SVNTag=JBoss_4_2_1_GA date=200707131605)/Tomcat-5.5) becomes hide from any users.

I think my question lacks clarity.

When I enter http://localhost:8080 in a browser in my machine after running jboss,or when there is an error while calling the specific web service which is deployed on jboss, I can see the following information at response header:

Server: Apache-Coyote/1.1
X-Powered-By: Servlet 2.4; JBoss-4.2.1.GA (build: SVNTag=JBoss_4_2_1_GA date=200707131605)/Tomcat-5.5

I want to customize jboss configuration so that nobody can gain the information about kind of application server and it's version. this is important for security purpose.

I change "X-Powered-BY" in this file "$JBOSS/server/default/deploy/jboss-web.deployer/conf/web.xml" but it wasn't useful.

How to do this ?
Hope my question is clear now.
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic