NetWorker: Sådan aktiveres HSTS-konfiguration i NetWorker Apache Tomcat-serveren
Summary: Denne artikel indeholder instruktioner til aktivering af HTTP Strict Transport Security (HSTS) på NetWorker-webbaserede programmer.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Instructions
Som standard bruger alle NetWorker-webprogrammer HTTPS til al kommunikation. HSTS håndhæves dog ikke. Se RFC 6797
BEMÆRK: HSTS er en valgfri svarheader, der kan konfigureres på serveren til at instruere browseren i kun at kommunikere ved hjælp af HTTPS. Manglen på HSTS tillader nedgraderingsangreb, SSL-stripping man-in-the-middle-angreb og svækker cookie-kapringsbeskyttelse.
Følg disse trin for at aktivere HSTS i Tomcat:
- Åbn filen NetWorker-serverens web.xml i et tekstredigeringsprogram.
- Linux:
/opt/nsr/authc-server/tomcat/conf/web.xml - Windows (standard):
C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\conf\web.xml
- Fjern kommentarer
httpHeaderSecurityFilterdefinition og<filter-mapping>, og tilføj derefterhstsMaxAgeSecondsparameter, som vist nedenfor.
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<init-param>
<param-name>hstsMaxAgeSeconds</param-name>
<param-value>31536000</param-value>
</init-param>
<async-supported>true</async-supported>
</filter>
<filter-mapping>
<filter-name>httpHeaderSecurity</filter-name>
<url-pattern>/*</url-pattern>
<dispatcher>REQUEST</dispatcher>
</filter-mapping>
- Gem filen.
- Genstart NW-serveren fra en meddelelse med administratorrettigheder:
- Linux:
systemctl restart networker - Vinduer (kommandoprompt):
net stop nsrd && net start nsrd - Windows (PowerShell):
net stop nsrd ; net start nsrd
Affected Products
NetWorkerProducts
NetWorker FamilyArticle Properties
Article Number: 000456395
Article Type: How To
Last Modified: 23 أبريل 2026
Version: 1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.