Kbase 18887: How to disable/enable WSMAdmin in WebSpeed 2.x?
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
22/04/2003 |
|
Solution ID: 18887
GOAL:
How to disable WSMAdmin in WebSpeed 2.x?
GOAL:
How to enable WSMAdmin in WebSpeed 2.x?
FACT(s) (Environment):
Webspeed 2.x
FIX:
In WebSpeed 2.0, the WSMAdmin tool was enabled by default. This allowed users to quickly debug setup problems when first installing WebSpeed. However, most customers failed to disable the WSMAdmin tool after deploying their products to the web causing a security risk, since the tool could give information of a customer·s intranet infrastructure.
In order to secure your WebSpeed environment, Progress recommends that you turn OFF the WSMAdmin functionality provided with WebSpeed. WSMAdmin provides certain information about the deployment and configuration of WebSpeed. In a production environment, especially on an application accessible from the web, it is desirable to hide this information.
To access the WSMAdmin tool, enter "?WSMAdmin" at the end of the messenger on your WebSpeed URL.
Example
.http://hostname/scripts/cgiip.exe?WSMAdmin
On Unix, to turn OFF the WSMAdmin tool,
Edit the [Services] section within the WebSpeed.cnf file
Change the value of AllowMsngrCmds to 0. To enable this feature, simply change the value back to 1, thus the default value is 1.
On Windows, to turn off the WSMAdmin tool,
Bring up the WebSpeed Configuration Utility.
There is a button to the right of the "Stop" button, with the head of a wrench (spanner) on it (the tooltip is "Toggle Internal Commands"). Clicking this button will disable the WSMAdmin functionality. To enable this feature, simply click it again.
FIX:
References to Written Documentation:
WebSpeed Installation and Configuration Guide
Progress Solution:
18612, "WebSpeed 2.X Gives 6368 Running ?WSMAdmin"