Novell Home

My Favorites

Close

Please to see your favorites.

Default Servlet Gateway password can allow unauthorized users to disable WebAccess.

(Last modified: 06Feb2003)

This document (10067329) is provided subject to the disclaimer at the end of this document.

fact

Novell GroupWise WebAccess 5.5 EP

Novell Servlet Gateway

symptom

Default Servlet Gateway password can allow unauthorized users to disable WebAccess.

cause

Enhancement Pack WebAccess uses the Novell Servlet Gateway to processes requests. The install enables the Servlet Manager with a default user name and password.  The manager can be used to disable the various servlets running on the server.  An unauthorized user could log in to the Servlet Manager and disable WebAccess if the default user name and password is not changed.  

fix

Novell recommends that the password be changed according to the follow procedure:

Edit the SYS:\JAVA\SERVLETS\SERVLET.PROPERTIES file. There is a section for ServletManager like the following:

# ServletManager servlet
servlet.ServletManager.code=com.novell.application.ServletGateway.ServletManager
servlet.ServletManager.initArgs=datamethod=POST,user=servlet,password=manager,bgcolor=#c0c0c0
servlet.ServletManager.preload=true

In the initialization arguments there is a user=servlet, password=manager that can be edited to reflect the user and password that you wish to use. You will then have to do a java -exit on the server, NSWEBDN and then an NSWEB to reload the servlet gateway and the web server.
  

note

This has been fixed in GroupWise 6.  During installation you are now prompted for the username and password.

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

  • Document ID:
  • 10067329
  • Solution ID: NOVL68022
  • Creation Date: 07Jan2002
  • Modified Date: 06Feb2003
    • NovellGroupware

Did this document solve your problem? Provide Feedback