<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Chris,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">This worked great. Thanks!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Rick<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Rick Neal<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Library Applications and Systems Administrator<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Boatwright Memorial Library<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">University of Richmond, VA 23173<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">rneal@richmond.edu<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> archivesspace_users_group-bounces@lyralists.lyrasis.org [mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org]
<b>On Behalf Of </b>Chris Fitzpatrick<br>
<b>Sent:</b> Wednesday, June 03, 2015 10:40 AM<br>
<b>To:</b> Archivesspace Users Group<br>
<b>Subject:</b> Re: [Archivesspace_Users_Group] Security question - Better description<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div id="divtagdefaultwrapper">
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">Hey Rick,<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">Sure, I understand. But if the app is firewalled, this would probably not much of a threat, since only the ASpace webapps would be accessing Solr.<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">But, if you want to change this, you'll have to set the parameter in Jetty, if you're using the default jetty deployment ( and not something like Tomcat ).To do this, add
this line to your launcher/launcher.rb file at line 44:<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">context.setInitParameter("org.eclipse.jetty.servlet.Default.dirAllowed","false") if webapp[:war].include?("solr.war") <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">( That should all be one line, just in case it's getting wacked by the email formatting ).
<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">Then restart ASpace. This should cause a directory listing to respond with a 403.
<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">b,chris.
<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">BTW, Solr doesn't really come with an security protection built-in, which they do by design since it's assumed you'll have an application in front of the index. So, if
it's not firewalled, anyone can do stuff like delete your whole index...<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<div id="Signature">
<div name="divtagdefaultwrapper">
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Chris Fitzpatrick | Developer, ArchivesSpace<br>
Skype: chrisfitzpat | Phone: 918.236.6048<br>
<a href="http://archivesspace.org/">http://archivesspace.org/</a><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-family:"Calibri","sans-serif";color:black">
<hr size="2" width="98%" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">
<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">archivesspace_users_group-bounces@lyralists.lyrasis.org</a> <<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">archivesspace_users_group-bounces@lyralists.lyrasis.org</a>>
on behalf of Neal, Rick <<a href="mailto:rneal@richmond.edu">rneal@richmond.edu</a>><br>
<b>Sent:</b> Wednesday, June 3, 2015 3:21 PM<br>
<b>To:</b> Archivesspace Users Group<br>
<b>Subject:</b> [Archivesspace_Users_Group] Security question - Better description</span><span style="font-family:"Calibri","sans-serif";color:black">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Chris,</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">I’m sorry, I really didn’t explain the problem well enough.</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">It is true that if I go to:
<a href="http://servername:8090">http://servername:8090</a> I see the Solr dashboard with no problem.</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">However, if I add a subdirectory name at the end</span><span style="color:black"> (
</span><span style="font-family:"Calibri","sans-serif";color:#1F497D"><a href="http://servername:8090/css">http://servername:8090/css</a>/ ) or any of the other subdirectory names in the list below (except for WEB-INF or META-INF) I see the directory listing
in the browser. If I try to list the WEB-INF or META-INF subdirectories to the end of the url I get an: HTTP ERROR 404, Problem accessing /WEB-INF/. Reason: Not Found</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">[root@servername webapp]# pwd</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">/usr/local/as/data/tmp/jetty-0.0.0.0-8090-solr.war-_-any-/webapp</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">[root@servername webapp]# ls -altr</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">total 44</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">-rw-r--r-- 1 root root 1146 Sep 22 2012 favicon.ico</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">-rw-r--r-- 1 root root 4930 Sep 22 2012 admin.html</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 4 root root 4096 Jun 1 04:05 WEB-INF</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 3 root root 4096 Jun 1 04:05 css</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 8 root root 4096 Jun 1 04:05 .</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 4 root root 4096 Jun 1 04:05 img</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 4 root root 4096 Jun 1 04:05 js</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 2 root root 4096 Jun 1 04:05 tpl</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 2 root root 4096 Jun 1 04:05 META-INF</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">drwxr-xr-x 3 root root 4096 Jun 1 04:05 ..</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">My goal is to get the browser to stop listing the directory(s).
</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Thanks again for your help with this.</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Rick</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><b><span style="font-size:24.0pt;color:#FC390E">Directory: /img/</span></b><span style="color:black"><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">Parent Directory</span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in"></td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in"></td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/ZeroClipboard.swf"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">ZeroClipboard.swf </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1071 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/chosen-sprite.png"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">chosen-sprite.png </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>559 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/div.gif"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">div.gif </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1093 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/favicon.ico"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">favicon.ico </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1146 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/filetypes/"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">filetypes/ </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>4096 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Jun 1, 2015 3:05:15 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/ico/"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">ico/ </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>4096 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Jun 1, 2015 3:05:15 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/loader-light.gif"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">loader-light.gif </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1849 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/loader.gif"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">loader.gif </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1553 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/lucene-ico.png"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">lucene-ico.png </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1508 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/solr-ico.png"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">solr-ico.png </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1146 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/solr.png"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">solr.png </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>7926 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i><a href="http://metcalf.richmond.edu:8090/img/tree.png"><b><span style="color:#7036BE;font-style:normal;text-decoration:none">tree.png </span></b></a></i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p align="right" style="text-align:right"><i>1112 bytes </i><o:p></o:p></p>
</td>
<td style="padding:1.5pt 11.25pt 1.5pt 0in">
<p><i>Sep 22, 2012 8:36:50 AM</i><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p style="background:white"><span style="color:black"> <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<div>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Rick Neal</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Library Applications and Systems Administrator</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Boatwright Memorial Library</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">University of Richmond, VA 23173</span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="mailto:rneal@richmond.edu">rneal@richmond.edu</a></span><span style="color:black"><o:p></o:p></span></p>
</div>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="color:black"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p style="background:white"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black">
<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">archivesspace_users_group-bounces@lyralists.lyrasis.org</a> [<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org</a>]
<b>On Behalf Of </b>Chris Fitzpatrick<br>
<b>Sent:</b> Wednesday, June 03, 2015 6:41 AM<br>
<b>To:</b> Archivesspace Users Group<br>
<b>Subject:</b> Re: [Archivesspace_Users_Group] Security question</span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
<p style="background:white"><span style="color:black"> <o:p></o:p></span></p>
<div id="divtagdefaultwrapper">
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">Hi Rick,<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">I think this would be a false positive, since it's the Solr index that runs on port 8090.
<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">However, its strongly recommend that Solr be firewalled off so that the only clients accessing it are your own. That means only allowing access from whatever host your
backend, frontend, public, and indexer are running on. <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black">b,chris.
<o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:black"> <o:p></o:p></span></p>
<div id="Signature">
<div name="divtagdefaultwrapper">
<div>
<div>
<p style="background:white"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:black">Chris Fitzpatrick | Developer, ArchivesSpace<br>
Skype: chrisfitzpat | Phone: 918.236.6048<br>
<a href="http://archivesspace.org/" id="LPNoLP">http://archivesspace.org/</a></span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-family:"Calibri","sans-serif";color:black">
<hr size="2" width="98%" align="center">
</span></div>
<div id="divRplyFwdMsg">
<p style="background:white"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">
<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">archivesspace_users_group-bounces@lyralists.lyrasis.org</a> <<a href="mailto:archivesspace_users_group-bounces@lyralists.lyrasis.org">archivesspace_users_group-bounces@lyralists.lyrasis.org</a>>
on behalf of Neal, Rick <<a href="mailto:rneal@richmond.edu">rneal@richmond.edu</a>><br>
<b>Sent:</b> Tuesday, June 2, 2015 9:49 PM<br>
<b>To:</b> Archivesspace Users Group<br>
<b>Subject:</b> [Archivesspace_Users_Group] Security question</span><span style="font-family:"Calibri","sans-serif";color:black">
</span><span style="color:black"><o:p></o:p></span></p>
<div>
<p style="background:white;background-attachment:scroll;background-position-x:0%;background-position-y:0%">
<span style="font-family:"Calibri","sans-serif";color:black"> </span><span style="color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Hello All,</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">I am running a security scan on our Archivesspace test server and received a notice that I have a ‘Browsable web directory’.</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">I have removed ‘Indexes’ from the httpd.conf file but the directory is still browsable on
<a href="http://servername:8090">http://servername:8090</a>. </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Any thoughts on how to stop this from occurring would be appreciated.</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Thanks,</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Rick</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<div>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Rick Neal</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Library Applications and Systems Administrator</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Boatwright Memorial Library</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">University of Richmond, VA 23173</span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
<p style="background:white"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="mailto:rneal@richmond.edu">rneal@richmond.edu</a></span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
</div>
<div id="divtagdefaultwrapper">
<div>
<div>
<div>
<div>
<p style="background:white"><span style="font-size:10.0pt;font-family:"Georgia","serif";color:black"> </span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>