× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



Maybe this will help as well.

The main Apache Tomcat *configuration file* is at
/opt/bitnami/tomcat/conf/server. *xml*. Once Apache Tomcat starts, it will
create several log files in the /opt/bitnami/tomcat/logs directory.


On Tue, May 4, 2021 at 6:03 PM Jack Kingsley <iseriesflorida@xxxxxxxxx>
wrote:

Those seem like odd directories for the tomcat installation. If you edit
those version.sh files, does it show any tomcat versioning in them. Also,
is the tomcat server running. If it is, have you attempted to login to it.

On Tue, May 4, 2021 at 8:09 AM Rob Berendt <rob@xxxxxxxxx> wrote:

Which one of these numbers indicate which of the following ranges
(10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to
7.0.103) this server is in?

Server version: Apache/2.4.34 (IBM i)
Server built: Feb 18 2019 21:28:32
Server's Module Magic Number: 20120211:79
Server loaded: APR 1.6.3, APR-UTIL 1.6.1
Compiled using: APR 1.6.3, APR-UTIL 1.6.1
Architecture: 128-bit
Server MPM: worker
threaded: yes (fixed thread count)
Server compiled with....
-D APR_HAS_SENDFILE
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_FCNTL_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D APR_PROCESS_LOCK_IS_GLOBAL
-D APR_HAS_OTHER_CHILD
-D DYNAMIC_MODULE_LIMIT=256
-D HTTPD_ROOT="/QIBM/UserData/HTTPA"
-D AS400
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Jack Kingsley
Sent: Tuesday, May 4, 2021 6:34 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: How to see if a particular CVE has been addressed in IBM i?

CAUTION: This email originated from outside of the organization. Do not
click links or open attachments unless you recognize the sender and know
the content is safe.


Rob, here is a command to show the apache version.


https://www.ibm.com/support/pages/how-determine-version-apache-http-server-ibm-i

If you know where your tomcat server is installed in the IFS, look for the
version.sh file.
https://mkyong.com/tomcat/how-to-check-tomcat-version-installed/

Current apache tomcat versions:
http://tomcat.apache.org/whichversion.html




On Mon, May 3, 2021 at 11:16 AM Rob Berendt <rob@xxxxxxxxx> wrote:

We got dinged on a security scan.
Our IBM i 7.4 has been flagged as exposed to CVE-2020-9484.
History has taught me that whether or not the people at IBM i have put
out
PTF's which are supposed to address this particular CVE is irrelevant.
The
only way to pass the scan is to get on a higher level of Tomcat.
From the CVE the following seem to be affected:Apache Tomcat versions
10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to
7.0.103

How do you tell exactly:
1 - what version of Tomcat you are using?
2 - if a PTF is out which upgrades your version?
Also, is this like WAS where we have to do more steps other than just
put
on the PTF to upgrade?

All of our active "HTTP servers" say "Apache/2.4.34 (IBM i)".
All of our active "Application Servers" say "V8.5 (int app svr)".

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com



As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow-Ups:
Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.