Versions Compared

Old Version 7

changes.mady.by.user Xavier Haurie

Saved on

compared with

New Version 8

changes.mady.by.user Xavier Haurie

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Sets up the receiving end of AJP over NIO2 connection with Apache. 

For security reasons, Tomcat should open port 8009 only to localhost, and should reside on the same host as Apache.

This is the same Tomcat as the one installed when setting up Shrine, ideally version 9.0.52 as per SHRINE 4.0.0 Chapter 5 - Set up Apache Tomcat.

For security reasons, Tomcat should accept requests on port 8009, but only from localhost, and redirect to the SSL port 6443. Port 8009 and 6443 should not be reachable from outside the localhost, which is a change from the non-SSO Shrine installation where clients connect to port 6443.   The two connector directives below should be merged into the existing server.xml.

Configure a connector to listen to https requests on port 6443:

...