Hide the Tomcat version number

Problem

The Tomcat version in use is visible in error messages.

Solution

To hide the version number of Ubilogin SSO’s Tomcat, proceed as follows on each node in use.

  1. Create folder
    mkdir /usr/local/ubisecure/ubilogin-sso/tomcat/lib/org/apache/catalina/util/ -p
  2. Create a file that contains the version information
    vim /usr/local/ubisecure/ubilogin-sso/tomcat/lib/org/apache/catalina/util/ServerInfo.properties
    server.info=Server
    server.number=20.0.0
    server.build=Jan 01 2020 13:33:37
  3. Change the permissions and restart the Ubilogin SSO
    chown ubilogin:ubilogin /usr/local/ubisecure/ubilogin-sso/tomcat/lib/org/apache/catalina/util/ServerInfo.properties
    service ubilogin-server restart