...
If you use the AJP Connector
Step 1:
Upgrade to the versions 9.0.31, 8.5.51, or 7.0.100.
Step 2:
Configure the attribute “secret”:
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="YOUR_TOMCAT_IP_ADDRESS" secret="YOUR_TOMCAT_AJP_SECRET" />
Alternative (without Upgrading):
Step 1:
Configure the attribute “requiredSecret“:
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="YOUR_TOMCAT_IP_ADDRESS" requiredSecret="YOUR_TOMCAT_AJP_SECRET" />
Caution: You need to change the placeholder “YOUR_TOMCAT_AJP_SECRET” to an safer value, that cannot be easly cracked or guessed.