Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

ORDS and Tomcat Apache getting failed after hardening

User_KO0HGSep 26 2019 — edited Sep 29 2019

Hello ,

I am performing hardening on Tomcat Apache server. Its part of Apex and ORDS is installed on Apache.

While performing below hardening changes, application stops working. I need help to solve the problems and make it working.

Perform the following:

1. Add the following statement into the $CATALINA_BASE\webapps\ords\META-INF\context.xml file if it does not already exist.

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="$CATALINA_HOME/logs/" prefix="access_log" fileDateFormat="yyyy-MM-dd.HH" suffix=".log" pattern="%h %t %H cookie:%{SESSIONID}c request:%{SESSIONID}r %m %U %s %q %r" />

If i created file under ORDS application,Application stops working.

2. Starting Tomcat with Security Manager

$CATALINA_HOME/bin/catalina.sh start -security

3. Disabling auto deployment of applications

In the $CATALINA_HOME/conf/server.xml file, change autoDeploy="false" and deployOnStartup="false".

4. Enable strict servlet Compliance and Turn off session façade recycling

Ensure the below parameter is added to the startup script which by default is located at $CATALINA_HOME/bin/catalina.sh.

-Dorg.apache.catalina.STRICT_SERVLET_COMPLIANCE=true

-Dorg.apache.catalina.connector.RECYCLE_FACADES=true

Comments
Post Details
Added on Sep 26 2019
1 comment
455 views