tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Konstantin Kolinko <knst.koli...@gmail.com>
Subject Re: deny access to directory
Date Tue, 30 Aug 2011 14:01:15 GMT
2011/8/30 Robert Jacobson <robert.c.jacobson@nasa.gov>:
>
> I'm trying to deny access to the .svn directories for my Tomcat 6.0.32
> installation (on Windows Server 2003, if that matters), but what I'm
> doing isn't working and I need help, please.  I'm using the built-in web
> server (i.e. I have not integrated w/ Apache).
>
> My install directory structure looks like this:
>
> $TOMCAT_DIR:
> .svn/  LICENSE*  NOTICE*  Uninstall.exe*  bin/  conf/  lib/  logs/
> temp/  tomcat.ico*  webapps/  work/
>
> $TOMCAT_DIR/webapps:
>  .svn/  ROOT/  ROOT.war*  docs/  host-manager/  manager/  tomcat/
>
> $TOMCAT_DIR/webapps/ROOT:
> .svn/    META-INF/    WEB-INF/   index.jsp  [etc...]
>
> When I request:
>
> http://server/.svn/entries
>
> It returns the contents of $TOMCAT_DIR/webapps/.svn/entries.  I don't
> want Tomcat to return the content of any file in .svn/.

That is because any subdirectory inside webapps is a web application
per se, and ".svn" is no exception (and thus you should be editing
.svn/WEB-INF/web.xml).

The following solutions are available:
1. Upgrade to svn 1.7 so that it does not have .svn directories all
over the tree.
2. Use svn export instead of svn checkout.
3. Configure deployIgnore attribute on a host.
4. If you need a filter that affects all webapps you may add it either
to ${catalina.base}/conf/web.xml, or to each web application
individually.


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message