From 7c105a64f41000737b85de832522738fd9af4200 Mon Sep 17 00:00:00 2001
From: Ade Lee <alee@redhat.com>
Date: Thu, 25 Oct 2012 10:58:40 -0400
Subject: Restrict AJP to localhost only by default

Ticket 369
---
 base/kra/shared/conf/server.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'base/kra/shared/conf/server.xml')

diff --git a/base/kra/shared/conf/server.xml b/base/kra/shared/conf/server.xml
index 54ba3272b..1cd6ef333 100644
--- a/base/kra/shared/conf/server.xml
+++ b/base/kra/shared/conf/server.xml
@@ -196,7 +196,7 @@ Tomcat Port         = [TOMCAT_SERVER_PORT] (for shutdown)
 
     <!-- Define an AJP 1.3 Connector on port [PKI_AJP_PORT] -->
 [PKI_OPEN_AJP_PORT_COMMENT]
-    <Connector port="[PKI_AJP_PORT]" protocol="AJP/1.3" redirectPort="[PKI_AJP_REDIRECT_PORT]" />
+    <Connector port="[PKI_AJP_PORT]" protocol="AJP/1.3" redirectPort="[PKI_AJP_REDIRECT_PORT]" address="127.0.0.1" />
 [PKI_CLOSE_AJP_PORT_COMMENT]
 
 
-- 
cgit