Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

how can i update my httpd.conf file on aruba controller

This thread has been viewed 2 times
  • 1.  how can i update my httpd.conf file on aruba controller

    Posted Jul 22, 2013 03:12 PM

    how can i update my httpd.conf file on aruba controller

     

    httpd.conf



  • 2.  RE: how can i update my httpd.conf file on aruba controller

    EMPLOYEE
    Posted Jul 23, 2013 02:53 PM

    What would be the use case?



  • 3.  RE: how can i update my httpd.conf file on aruba controller

    Posted Oct 16, 2015 08:14 AM

    Scenario of use case for my situation is to resolve vulnerabilities detected by Rapid7 with regard to "Apache Server mod_info is Publicly Accessible".  Specific tip is provided to resolve this:

     

     

    The configuration file for apache (httpd.conf), reads:

          <Location /server-info>
          SetHandler server-info
          </Location>

    To remove the feature from Apache, rewrite this to:

          # comment everything out
          #<Location /server-info>
          #  SetHandler server-info
          #</Location>

    To keep the feature, adding access control, rewrite it to:

          # add access control
          <Location/server-info>
          SetHandler server-info
    
          Order deny,allow
          Deny from all
          Allow from 127.0.0.1
          </Location> 


  • 4.  RE: how can i update my httpd.conf file on aruba controller

    EMPLOYEE
    Posted Oct 16, 2015 09:37 AM

    The httpd.conf files is not configurable on the controller. Please open a TAC case with the details and copies of your findings so that our security team can review. Chances are it's not a true vulnerability, but they can read through the details from your scanner and fill you in on the details.



  • 5.  RE: how can i update my httpd.conf file on aruba controller

    EMPLOYEE
    Posted Oct 16, 2015 05:04 PM

    The mod_info module is not present in the Apache binary in ArubaOS.  I think your Rapid7 scanner is broken...

     

    Are you sure it's not being confused by a captive portal redirect?



  • 6.  RE: how can i update my httpd.conf file on aruba controller

    Posted Jul 24, 2013 01:52 AM

    i modify httpd.conf on a aruba controller

    why not save

     



  • 7.  RE: how can i update my httpd.conf file on aruba controller

    EMPLOYEE
    Posted Jul 30, 2013 02:24 AM

    it cannot be done as the httpd.conf is deliberately overwritten by the software to prevent modifications.