18/07/2019 Apache Tomcat server configuration - Application modeling reference guide

Logout

Search

Apache Tomcat server configuration

Previous

Next

The behavior of the Apache Tomcat server is controlled by the files in the
BEINFORMED_BASE/conf directory. As a minimum this directory must contain a  server.xml

file. Documentation for the server.xml can be found at the Apache Tomcat documentation

which can be found at the Apache Tomcat 9 configuration reference. As mentioned,

BEINFORMED_BASE is a synonym for CATALINA_BASE.

Copy the 'conf' directory

As recommended by Apache Tomcat, copy the CATALINA_HOME/conf directory to

BEINFORMED_BASE/conf.

Adjust the server.xml

With respect to the original server.xml file a few sections are worth mentioning:

Optional: enable the SSL/TLS connector. This connector is default not enabled. If
connecting with HTTPS to Apache Tomcat is required, the SSL/TLS connector can be
enabled.
This can be done in two variants: With a JSSE / Java keystore using the configuration in
the original server.xml file; or using OpenSSL style with two separate files for the
certificate and the corresponding private key (see example below). 

https://plaza.beinformed.com/amdoc/runtime-environment/installing-the-runtime-on-apache-tomcat-9-x/apache-tomcat-server-configuration 1/3
18/07/2019 Apache Tomcat server configuration - Application modeling reference guide

SSL/TLS connector

<!­­ Define a SSL/TLS HTTP/1.1 Connector on port 8443
     This connector uses the NIO implementation. The default
     SSLImplementation will depend on the presence of the APR/native
     library and the useOpenSSL attribute of the
     AprLifecycleListener.
     Either JSSE or OpenSSL style configuration may be used regardless of
     the SSLImplementation selected. OpenSSL style configuration is used
below.
­­>
<Connector port="8443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
           maxThreads="150" SSLEnabled="true" scheme="https"
secure="true">
   <SSLHostConfig>
      <Certificate certificateKeyFile="conf/beinformed­server­key.pem"
                   certificateFile="conf/beinformed­server­cert.pem"
                   type="RSA" />
   </SSLHostConfig>
</Connector>

Disable auto deploy and unpacked WARs globally. Auto deploy and global support

for unpacked WARs can be disabled in all environments. How the Be Informed runtime is
deployed (location, packed or unpacked) is controlled by a specific context file (see

Deploy the Be Informed WAR in Tomcat). 

Deployment configuration

<!­­ changed: do not auto deploy and unpacked WARs ­­>
<Host name="localhost" appBase="webapps"
            unpackWARs="false" autoDeploy="false">
   ...
   ...
</Host>

Remove the default UserDatabase resource and the LockOutRealm. These

settings can be removed/commented as these are not used by the Be Informed runtime.

UserDatabase resource

<!­­ Editable user database that can also be used by
     UserDatabaseRealm to authenticate users
­­>
https://plaza.beinformed.com/amdoc/runtime-environment/installing-the-runtime-on-apache-tomcat-9-x/apache-tomcat-server-configuration 2/3
18/07/2019 Apache Tomcat server configuration - Application modeling reference guide

<!­­ NOT USED ­­>
<!­­
<Resource name="UserDatabase" auth="Container"
          type="org.apache.catalina.UserDatabase"
          description="User database that can be updated and saved"
          factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
          pathname="conf/tomcat­users.xml" />
­­>

LockOutRealm

<!­­ Use the LockOutRealm to prevent attempts to guess user passwords
     via a brute­force attack ­­>
<!­­ NOT USED ­­>
<!­­
<Realm className="org.apache.catalina.realm.LockOutRealm">
­­>
    <!­­ This Realm uses the UserDatabase configured in the global JNDI
         resources under the key "UserDatabase".  Any edits
         that are performed against this UserDatabase are immediately
         available for use by the Realm.  ­­>
<!­­
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
           resourceName="UserDatabase"/>
</Realm>
­­>

Previous

Next

Be Informed B.V. | Laan van Westenenk 150 | 7336 AV Apeldoorn | The Netherlands | T +31 (0)55 - 368 14 20 | E support@beinformed.com | Disclaimer

https://plaza.beinformed.com/amdoc/runtime-environment/installing-the-runtime-on-apache-tomcat-9-x/apache-tomcat-server-configuration 3/3