The application is using Single sign-on and previously we were using tomcat v7 AJP connector to connect Apache server with tomcat. After upgrading to Tomcat v9, the AJP connector is disabled by default in server.xml
<Connector protocol="AJP/1.3"
address="::1"
port="8009"
redirectPort="8443" />
Will uncommenting this property solve the issue? Also I have read that AJP is disabled due to vulnerabilities :
If that is the case then is there an alternative to connect Apache server with Tomcat? Does this impact single sign-on functionality? Also, is there any configuration that can be done to mitigate the vulnerability and still use AJP?