Paths

Table of Contentst

Configure Tomcat server explicitly
ClosedPublic
Actions

Authored by dereckson on Oct 13 2025, 20:47.

Details

Reviewers

DorianWinty
dereckson

Maniphest Tasks

T2143: Hash Tomcat credentials

Commits

rOPSba7b0da5ed63: Configure Tomcat server explicitly

Summary

Use the default current Tomcat server.xml configuration from Orbeon container.

Credentials are stored in tomcat-users.xml with SHA-256 digest for hashing,
with a bruteforce protection.

Ref T2143

Test Plan

Redeploy Orbeon container and associated files

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Oct 13 2025, 20:47

dereckson created this revision.

Harbormaster completed remote builds in B6019: Diff 9714.Oct 13 2025, 20:47

Update to use Tomcat 9 syntax in realm:
<CredentialHandler className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="SHA-256" />

Harbormaster completed remote builds in B6020: Diff 9715.Oct 13 2025, 22:32

dereckson accepted this revision.Nov 27 2025, 11:08

This revision is now accepted and ready to land.Nov 27 2025, 11:08

Closed by commit rOPSba7b0da5ed63: Configure Tomcat server explicitly (authored by dereckson). · Explain WhyNov 27 2025, 11:08

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPSba7b0da5ed63: Configure Tomcat server explicitly.

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

containers/

files/

orbeon/

server.xml

61 lines

orbeon.sls

5 lines

Diff 10082

View Options

roles/paas-docker/containers/files/orbeon/server.xml