tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Chris Cheshire <cheshira...@gmail.com>
Subject processing precedence for mod_jk config?
Date Wed, 26 Aug 2009 01:37:36 GMT
Hi,

I have been working on a web-app that has been running under tomcat 6
alone for a while. I am now configuring Apache to do some rewrite
rules with domains and then forward on to tomcat, which is working.

However, even with a directory deny rule in apache conf to block the
web-inf and meta-inf directories, requests to it are still getting
passed to tomcat. I confirmed these were working by disabling mod_jk
and restarting, and got the apache forbidden error. When I have mod_jk
running, it passes requests to meta-inf/context.xml to tomcat which
then returns a 404 result. It's sort of the same thing but not what I
want. If I put in a JkUnMount to those directories, then apache is
returning a forbidden error.

My environment :
-------------------------
CentOS4
Tomcat 6.0.20
Apache 2.0.52 (this is what the packaging utils wanted to install,
2.2.x isn't available)
mod_jk-1.2.28

workers.properties :
----------------------------
worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=9009

mod_jk.conf :
--------------------
LoadModule    jk_module  modules/mod_jk.so
JkWorkersFile /etc/httpd/conf.d/workers.properties
JkShmFile     /var/log/httpd/mod_jk.shm
JkLogFile     /var/log/httpd/mod_jk.log
JkLogLevel    info
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
JkMount  /* worker1
JkUnMount /*.ico worker1
JkUnMount /*.jpg worker1
JkUnMount /*.gif worker1
JkUnMount /*.png worker1
JkUnMount /*.js worker1
JkUnMount /META-INF/* worker1     # without this, apache directory
directive to return a forbidden error doesn't happen
JkUnMount /WEB-INF/* worker1       # and this
JkMountCopy all

mod_jk.conf is included via the directive in httpd.conf :

Include conf.d/*.conf

which happens right after the LoadModule directives.

And in the virtual host directive to force a forbidden error :

  <Directory /home/www/web/ROOT/META-INF>
    AllowOverride none
    Order deny,allow
    Deny from all
    Satisfy all
  </Directory>

  <Directory /home/www/web/ROOT/WEB-INF>
    AllowOverride none
    Order deny,allow
    Deny from all
    Satisfy all
  </Directory>

Are the JkMount directives taking precedence over apache's Directory
directives? I have another web server running mod_jk-1.2.15, tomcat
5.5, apache 2.0.52 and I don't have this issue.

Chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message