Return-Path: 
 <users-return-246831-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
X-Original-To: apmail-tomcat-users-archive@www.apache.org
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 2B7411050E
	for <apmail-tomcat-users-archive@www.apache.org>;
 Mon,  3 Mar 2014 22:23:05 +0000 (UTC)
Received: (qmail 43605 invoked by uid 500); 3 Mar 2014 22:23:01 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 43506 invoked by uid 500); 3 Mar 2014 22:23:01 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 43497 invoked by uid 99); 3 Mar 2014 22:23:00 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Mar 2014 22:23:00 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=5.0
	tests=RCVD_IN_DNSWL_NONE,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
Received: from [76.96.59.212] (HELO qmta14.westchester.pa.mail.comcast.net)
 (76.96.59.212)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Mar 2014 22:22:54 +0000
Received: from omta01.westchester.pa.mail.comcast.net ([76.96.62.11])
	by qmta14.westchester.pa.mail.comcast.net with comcast
	id Z0Qp1n0050EZKEL5EANYVx; Mon, 03 Mar 2014 22:22:32 +0000
Received: from Christophers-MacBook-Pro.local ([68.55.8.89])
	by omta01.westchester.pa.mail.comcast.net with comcast
	id ZANY1n00c1vFKdg3MANYaA; Mon, 03 Mar 2014 22:22:32 +0000
Message-ID: <531500A8.8010309@christopherschultz.net>
Date: Mon, 03 Mar 2014 17:22:32 -0500
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9;
 rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: $CATALINA_HOME/conf/context.xml .. restrict a context?
References: 
 <CAFZ1Wo1zakuU-YaTWb9Fu4AN8i2_7c8BHhyiDVSmnULGjUvrZA@mail.gmail.com>
In-Reply-To: 
 <CAFZ1Wo1zakuU-YaTWb9Fu4AN8i2_7c8BHhyiDVSmnULGjUvrZA@mail.gmail.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net;
	s=q20121106; t=1393885352;
	bh=8tAmReA0BhrahSAICfIB0VkFG6Y87bMyaiyVoAwdxB4=;
	h=Received:Received:Message-ID:Date:From:MIME-Version:To:Subject:
	 Content-Type;
	b=idrk/P8vd1Sz+uIX03GwBITeKy/nyf75iBMh/EdCaFL5kNYmGctAR10WK6qUXBqHh
	 7JugbVMDvtd548OHQuPMy4GaB6Aa9fNwCkD0R7fVI7NXAPSDL5q7vtrB0tGRhRmB53
	 8To7tMDD1K80tepEpupw7oyECtU9uKV3wFBQWNfYNeo1mXZsJbOpFKmh4pKrM0D4se
	 pebkiFVFCuojBaUDrW8e+xEnj9uB9HP4NyD2wNUBaBN/pAyCMNeY69IggFVARVrMza
	 YdN96uoYgjngRZ4M3eWY7ZiuQO9L1kU7pK/2VrhVLMp/Lz0I/XNpPrhs5g91Ybbs2D
	 o0b+GI1E7nRCA==
X-Virus-Checked: Checked by ClamAV on apache.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ravi,

On 3/3/14, 5:10 PM, Ravi Gupta wrote:
> Tomcat 6.X RHEL
> 
> I tried adding the below in order to limit access to
> /admin-console
> 
> It worked, but it limits access to EVERY context, which is odd. I
> am sure I am doing something wrong or I misunderstand how this
> works
> 
> I want to put restrictions on the /admin-console context, but I do
> not want it inside the admin-console.war
> 
> Again, this works, but other contexts are denied as well!
> 
> <Context path="/admin-console"> <Valve
> className="org.apache.catalina.valves.RemoteAddrValve" deny="*" /> 
> </Context>

I'm guessing the file you edited was CATALINA_BASE/conf/context.xml?

That's not the right file to edit. Undo all the changes you made to
conf/context.xml.

Instead, you want to edit the META-INF/context.xml file in your own
webapp (or CATALINA_BASE/conf/[engine]/[host]/admin-console.xml if you
have manually-deployed your application using an XML descriptor).

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=YZJb
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org