Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=SKFTchFJJbX94ZwbyLHYcOpBOBLOY89JFpYsZjBSNpF1Hdy+/Vk9h/aw6VFtyKTglf4RRh/UL8iKlhMZxqmiLW5tULh4afjpShvTsVs2AiraA++crFe80UwsIjhqDDxUqU0tmXBd1t2WoVXpgi5m1kJdP+QmZP6qS7LieT1lisc=;
References: <4E70A70D.5060106@douma.nu>
 <CAM4V2B7EiXWUo2=uQkMC4wpF6GrCZFYOsYLTJ_DFpmVe0VcVwQ@mail.gmail.com>
 <4E7B0F96.8020406@douma.nu>
 <CAM4V2B7eFunY4+R+1EZ86S4rmgUfS=_oYS2Q3+Tn5ZU2f3KBqQ@mail.gmail.com>
 <4E7BD452.3090601@douma.nu>
Message-ID: <1316748647.64652.YahooMailNeo@web112804.mail.gq1.yahoo.com>
Date: Thu, 22 Sep 2011 20:30:47 -0700 (PDT)
From: Woonsan Ko <woon_san@yahoo.com>
Reply-To: Woonsan Ko <woon_san@yahoo.com>
Subject: Re: [DISCUSS] Planning jetspeed-2.2.2, pluto-2.0.3,
 bridges-script-2.0 and several apa-*-1.2 releases
To: Jetspeed Developers List <jetspeed-dev@portals.apache.org>
In-Reply-To: <4E7BD452.3090601@douma.nu>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

=0A=0A=0A=0A----- Original Message -----=0A> From: Ate Douma <ate@douma.nu>=
=0A> To: Jetspeed Developers List <jetspeed-dev@portals.apache.org>=0A>=A0=
=0A=0A<SNIP/>=0A=0A> For the record, after I created this issue I gave it s=
ome more thought and =0A> I'm =0A> now included to just disable the Tomcat =
Manager usage and provide some =0A> instructions how a user can enable it t=
hemselves. Wiring this within the =0A> JetspeedInstaller isn't so trivial, =
especially not if also the admin =0A> password =0A> needs to be user seeded=
. The Installer also has the capability to (only) reset =0A> the database o=
r import/export/migrate it. That complicates this considerably.=0A> But I'l=
l come back on that later.=0A=0A=0A+1 on disabling the Tomcat Manager with =
the installer setup by default.=0AI think it is safer to disable the Tomcat=
 Manager by default by the installer and give instructions somewhere on how=
 to enable the feature.=0AI think most system administrators would prefer t=
heir intended configuration on the Tomcat Manager due to its security impac=
ts.=0AAlso, most demo testing users can simply copy their wars into deploy =
folder even though the Tomcat Manager is not available.=0A=0ARegards,=0A=0A=
Woonsan

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org