[Freeipa-users] Can we disable HTTP TRACE / TRACK Method in IPA

[Zeal Vora]

Hi

In our Internal VA, Vulnerability Assessment tools generates the HTTP TRACE
/ TRACK method in IPA as a medium based vulnerability.

Is there a need to allow those two methods in IPA ?

If not, what is the optimal way to disable those methods ?


Thanks,
Zeal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160715/d7fdb1d0/attachment.htm>