On Fri, 2011-12-02 at 09:10 -0800, jmpaul012 wrote:
> can anyone help??
>
>
> jmpaul012 wrote:
> >
> > So I am doing Tomcat STIGS and I am stuck on two of the STIGs.
> >
> > 1. How do I change what tomcat logs? I think it's something I need to do
> > in server.xml but I'm not sure. This is what I need to log:
> >
> > • Date, Time
> > • IP address of the host that initiated the request
> > • User ID supplied for HTTP authentication
> > • HTTP Method
> > • URL in the request
> > • The protocol and protocol version used to make the request
> > • Source and destination port numbers
> > • Status codes for the response
> > • Size of the response in bytes
> > • HTTP Status and Referrer for the following events:
> >
> > - Successful and unsuccessful attempts to access the web server software.
> > - Successful and unsuccessful attempts to access the web site.
> > - Successful and unsuccessful attempts to access the web application.
> >
I believe this one was already answered.
> In any case, your first stop should probably be the on-line
> documentation for the AccessLog Valve.
https://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Access_Log_Valve
> >
> > 2. How do I view/change the HTTP header information of an intranet site
> > that is using Tomcat? I have to make sure the HTTP header does not show
> > information about the web server which would include, web server product,
> > version, or host operating system
> >
I think you want the "server" attribute of the <Connector/> element.
https://tomcat.apache.org/tomcat-7.0-doc/config/http.html
Dan
|