Possible to disable baclient web page?

[illllm]

Hi All,

TSM client 8.1.7. Since the <servername>:1581/baclient webpage is no longer used, but still shows up in our security scans as active, how do we disable or remove it? Its commented out in dsm.sys but the page is stil lactive.

 

[illllm]

or get it to use CA certificates and TLS ?

 

[marclant]

Do you have MANAGEDSERVICE WEBCLIENT in your option file? If so, remove or comment it out.

 

[illllm]

nope not there. I commented out the webport and httpport and it defaults back to 1581.

 

[marclant]

If that option is not there, the web client can't run. Try accessing it and it won't work.

 

[illllm]

servername tsmserver
COMMMethod TCPip
TCPPort 1542
* HTTPPORT 1585
* WEBPORTS 1586
ssldisablelegacytls yes
TCPServeraddress X.X.X.X
* TCPServeraddress localhost
RESOURCEUTIL 2
PASSWORDACCESS generate
TCPBUFFSIZE 32
TCPWINDOWSIZE 64
TXNBYTELIMIT 2048
TCPNODELAY yes
COMPRESSION no
MANAGEDSERVICES schedule webclient
NODENAME tsmserver
ERRORLOGNAME "/opt/tivoli/tsm/client/ba/bin/dsmerror.log"
ERRORLOGRETENTION 30,D
SCHEDLOGNAME "/opt/tivoli/tsm/client/ba/bin/dsmsched.log"
SCHEDLOGRETENTION 30,D
SSL YES
SSLFIPSMODE NO
sslrequired yes
sslacceptcertfromserv yes

 

[illllm]

web server is running. For our entire environment and none have the option set.

 

[RecoveryOne]

Your line of:
MANAGEDSERVICES schedule webclient
Delete the word webclient then restart the service