Question & Answer
Question
How can you suppress IBM HTTP Server (IHS) version information in IBM Rational ClearQuest Web pages?
Cause
The default settings in the IBM HTTP Server installed with IBM Rational ClearQuest 7.1.x are such that the response messages from the ClearQuest Web server include the HTTP server type and version in their headers.
Answer
Starting in version 7.1, Rational ClearQuest ships with IBM HTTP Server 6.1.x, whose default configuration includes version information when an error is displayed.
The server configuration parameter ServerTokens can be used to reduce the content to just "IBM_HTTP_Server".
For example, on Windows, you can add the following lines to the httpd.conf file located in the default directory C:\Program Files\IBM\RationalSDLC\common\IHS\conf\:
##
## added to hide server info
##
ServerTokens ProductOnly
For more information about the ServerTokens directive, see
http://publib.boulder.ibm.com/httpserv/manual60/mod/core.html#servertokens
To keep the server information from appearing in error responses, you can edit the web server error response file bottom.html and remove the reference to the SERVER_SOFTWARE environment variable.
You can use the following command to search all error response html files that contain SERVER_SOFTWARE on Windows:
findstr /s /i SERVER_SOFTWARE "C:\Program Files\IBM\RationalSDLC\common\IHS\error\*.html"
Server information in error response headers cannot be suppressed completely.
For more information about hiding what server is running, see
http://publib.boulder.ibm.com/httpserv/ihsdiag/questions.html#ihshideserver
Related Information
Was this topic helpful?
Document Information
Modified date:
01 August 2018
UID
swg21497838