Paths

Table of Contentst

Configure Tomcat server explicitly
ClosedPublic
Actions

Authored by dereckson on Oct 13 2025, 20:47.

Details

Reviewers

DorianWinty
dereckson

Maniphest Tasks

T2143: Hash Tomcat credentials

Commits

rOPSba7b0da5ed63: Configure Tomcat server explicitly

Summary

Use the default current Tomcat server.xml configuration from Orbeon container.

Credentials are stored in tomcat-users.xml with SHA-256 digest for hashing,
with a bruteforce protection.

Ref T2143

Test Plan

Redeploy Orbeon container and associated files

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

orbeon-tomcat-config

Build Status

Buildable 6020
Build 6304: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Oct 13 2025, 20:47

dereckson created this revision.

Harbormaster completed remote builds in B6019: Diff 9714.Oct 13 2025, 20:47

Update to use Tomcat 9 syntax in realm:
<CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="SHA-256" />

Harbormaster completed remote builds in B6020: Diff 9715.Oct 13 2025, 22:32

dereckson accepted this revision.Nov 27 2025, 11:08

This revision is now accepted and ready to land.Nov 27 2025, 11:08

Closed by commit rOPSba7b0da5ed63: Configure Tomcat server explicitly (authored by dereckson). · Explain WhyNov 27 2025, 11:08

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPSba7b0da5ed63: Configure Tomcat server explicitly.

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

containers/

files/

orbeon/

server.xml

61 lines

orbeon.sls

5 lines

Diff 9715

View Options

roles/paas-docker/containers/files/orbeon/server.xml