IDEMPIERE-3940 Allow idempiereMonitor and others to work on load balancer / deactivate also the old restlet server intended to get DB info from swing client (potential security issue)

This commit is contained in:
Carlos Ruiz 2019-03-29 14:39:27 -03:00
parent 4e31368f17
commit 5c809d2e87
6 changed files with 16 additions and 16 deletions

View File

@ -189,7 +189,7 @@ public class WebDoc
m_topRight.addElement(new img("res:org/compiere/images/iD10030.png") m_topRight.addElement(new img("res:org/compiere/images/iD10030.png")
.setAlign(AlignType.RIGHT).setAlt("iDempiere")); .setAlign(AlignType.RIGHT).setAlt("iDempiere"));
} else { } else {
m_topRight.addElement(new img("images/header-logo.png") m_topRight.addElement(new img("webui/theme/default/images/header-logo.png")
.setAlign(AlignType.RIGHT).setAlt("iDempiere")); .setAlign(AlignType.RIGHT).setAlt("iDempiere"));
} }
m_topRow.addElement(m_topRight); m_topRow.addElement(m_topRight);

View File

@ -189,7 +189,7 @@ public class WebLogin
m_session.invalidate (); m_session.invalidate ();
} }
// Forward to unsecure / // Forward to unsecure /
WebUtil.createForwardPage(m_response, "Logout", "http://" + m_request.getServerName() + "/", 2); WebUtil.createForwardPage(m_response, "Logout", m_request.getScheme() + "://" + m_request.getServerName() + ":" + m_request.getServerPort() + "/", 2);
} }
// Send EMail *** Send Password EMail Request // Send EMail *** Send Password EMail Request
else if ("SendEMail".equals(m_mode)) else if ("SendEMail".equals(m_mode))

View File

@ -27,6 +27,7 @@ Import-Package: javax.jms;version="1.1.0",
org.restlet, org.restlet,
org.restlet.data, org.restlet.data,
org.restlet.ext.servlet, org.restlet.ext.servlet,
org.restlet.ext.servlet.internal,
org.restlet.representation, org.restlet.representation,
org.restlet.resource, org.restlet.resource,
org.restlet.routing, org.restlet.routing,

View File

@ -32,12 +32,12 @@
</init-param> </init-param>
<load-on-startup>1</load-on-startup> <load-on-startup>1</load-on-startup>
</servlet> </servlet>
<servlet> <!-- <servlet>
<description>iDempiere Server Status Info</description> <description>iDempiere Server Status Info</description>
<display-name>Server Status</display-name> <display-name>Server Status</display-name>
<servlet-name>StatusInfo</servlet-name> <servlet-name>StatusInfo</servlet-name>
<servlet-class>org.compiere.web.StatusInfo</servlet-class> <servlet-class>org.compiere.web.StatusInfo</servlet-class>
</servlet> </servlet> -->
<servlet> <servlet>
<description>iDempiere Server Monitor</description> <description>iDempiere Server Monitor</description>
<display-name>iDempiere Monitor</display-name> <display-name>iDempiere Monitor</display-name>
@ -46,31 +46,30 @@
<load-on-startup>1</load-on-startup> <load-on-startup>1</load-on-startup>
</servlet> </servlet>
<!-- Restlet adapter --> <!-- Restlet adapter -->
<servlet> <!-- <servlet>
<servlet-name>RestletServlet</servlet-name> <servlet-name>RestletServlet</servlet-name>
<servlet-class>org.restlet.ext.servlet.ServerServlet</servlet-class> <servlet-class>org.restlet.ext.servlet.ServerServlet</servlet-class>
<init-param> <init-param>
<!-- Application class name -->
<param-name>org.restlet.application</param-name> <param-name>org.restlet.application</param-name>
<param-value>org.adempiere.web.server.ServerApplication</param-value> <param-value>org.adempiere.web.server.ServerApplication</param-value>
</init-param> </init-param>
</servlet> </servlet> -->
<servlet-mapping> <servlet-mapping>
<servlet-name>JnlpDownloadServlet</servlet-name> <servlet-name>JnlpDownloadServlet</servlet-name>
<url-pattern>*.jnlp</url-pattern> <url-pattern>*.jnlp</url-pattern>
</servlet-mapping> </servlet-mapping>
<servlet-mapping> <!-- <servlet-mapping>
<servlet-name>StatusInfo</servlet-name> <servlet-name>StatusInfo</servlet-name>
<url-pattern>/statusInfo</url-pattern> <url-pattern>/statusInfo</url-pattern>
</servlet-mapping> </servlet-mapping> -->
<servlet-mapping> <servlet-mapping>
<servlet-name>idempiereMonitor</servlet-name> <servlet-name>idempiereMonitor</servlet-name>
<url-pattern>/idempiereMonitor/*</url-pattern> <url-pattern>/idempiereMonitor/*</url-pattern>
</servlet-mapping> </servlet-mapping>
<servlet-mapping> <!-- <servlet-mapping>
<servlet-name>RestletServlet</servlet-name> <servlet-name>RestletServlet</servlet-name>
<url-pattern>/server/*</url-pattern> <url-pattern>/server/*</url-pattern>
</servlet-mapping> </servlet-mapping> -->
<session-config> <session-config>
<session-timeout>15</session-timeout> <session-timeout>15</session-timeout>
</session-config> </session-config>
@ -95,9 +94,9 @@
<web-resource-name>service</web-resource-name> <web-resource-name>service</web-resource-name>
<url-pattern>/server/*</url-pattern> <url-pattern>/server/*</url-pattern>
</web-resource-collection> </web-resource-collection>
<user-data-constraint> <!-- <user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint> </user-data-constraint> -->
</security-constraint> </security-constraint>
<welcome-file-list> <welcome-file-list>
<welcome-file>idempiere.jsp</welcome-file> <welcome-file>idempiere.jsp</welcome-file>

View File

@ -7,7 +7,7 @@
--%> --%>
<div id="header"> <div id="header">
<div id="headerIcon"> <div id="headerIcon">
<a href="http://<c:out value='${pageContext.request.serverName}'/>/"> <a href="${pageContext.request.scheme}://<c:out value='${pageContext.request.serverName}:${pageContext.request.serverPort}'/>/">
<img src="<c:out value='${ctx.webParam1}' default='AdempiereERP.gif'/>" alt="Adempiere - 1999-2007" /></a> <img src="<c:out value='${ctx.webParam1}' default='AdempiereERP.gif'/>" alt="Adempiere - 1999-2007" /></a>
</div> </div>
<div id="headerMenu"> <div id="headerMenu">

View File

@ -31,9 +31,9 @@
<url-pattern>/orderServlet</url-pattern> <url-pattern>/orderServlet</url-pattern>
</web-resource-collection> </web-resource-collection>
<user-data-constraint> <!-- <user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint> </user-data-constraint> -->
</security-constraint> </security-constraint>
<session-config> <session-config>