IPlanet 6.0 SP4 - NSAPI SAF

Hi,
I wrote a NSAPI SAF and is used to validate the client certificate. It is called from AuthTrans directive using:
<Object name="default">
AuthTrans "<SAF Name>"
</Object>
During Web Server startup and while loading the configuration file from Server Manager Console, web server calls this SAF (it was not so in previous releases of iPlanet). My SAF fails as there is no client certificate for validation during startup.
I noticed that during both instances, SAF is called as if the request is coming from client with 0.0.0.0 IP address. Since in real life there is no 0.0.0.0 IP adress, is it fair assumption to ignore the requests coming from 0.0.0.0 IP adress?
Thanks!!!

I tried to separate the authrization decision and enforcement using AuthTrans and PathCheck directives by adding following lines in default object of obj.conf
AuthTrans fn=basic-auth auth-type=basic userfn="mySAF"
PathCheck fn=require-auth auth-type=basic realm=test
Now, the web server asks for username/password after asking for client certificate.
The documentation talks about verifying/setting username & password in AuthTrans/PathCheck directives, whereas I want to deal with certificates.

Similar Messages

  • IPlanet 6.0 SP4 crashes for large file uploads

    Environment:
    iPlanet 6.0 SP4,iPlanet App Server 6.5, with maintenance update 3 installed running on the same machine on Solaris 8.0 (Sparc)
    When I try to upload large file( > 10 MB) using HTTP POST MULTIPART/FORM-DATA the web server crashes with the following errors.
    [18/Oct/2002:16:52:02] catastrophe ( 600): Server crash detected (signal SIGSEGV) [18/Oct/2002:16:52:02] info ( 600): Crash occurred in function memmove from module /export/home/iplanet/web60sp4/bin/https/lib/liblibdbm.so [18/Oct/2002:16:52:02] failure ( 376): Child process admin thread is shutting down [18/Oct/2002:16:52:05] warning ( 624): On group ls2_default, servername oberon does not match subject "192.168.0.35" of certificate Server-Cert. [18/Oct/2002:16:52:05] info ( 624): Installing a new configuration [18/Oct/2002:16:52:05] info ( 624): [LS ls1] http://oberon, port 80 ready to accept requests [18/Oct/2002:16:52:05] info ( 624): [LS ls2] https://oberon, port 443 ready to accept requests [18/Oct/2002:16:52:05] info ( 624): A new configuration was successfully installed [18/Oct/2002:16:52:05] info ( 624): log.cpp:openPluginLog() reports: Environment variable IAS_PLUGIN_LOG_FILE is not set. All plugin messages will be logged in the web server log file
    [21/Oct/2002:10:40:02] catastrophe ( 1210): Server crash detected (signal SIGSEGV) [21/Oct/2002:10:40:02] info ( 1210): Crash occurred in NSAPI SAF gxrequest [21/Oct/2002:10:40:02] info ( 1210): Crash occurred in function __1cIGXBufferLAllocMemMap6ML_L_ from module /export/home/iplanet/app65mu3/ias/gxlib/libgxnsapi6.so [21/Oct/2002:10:40:02] failure ( 715): Child process admin thread is shutting down [21/Oct/2002:10:40:05] warning ( 1230): On group ls2_default, servername oberon does not match subject "192.168.0.35" of certificate Server-Cert. [21/Oct/2002:10:40:05] info ( 1230): Installing a new configuration [21/Oct/2002:10:40:05] info ( 1230): [LS ls1] http://oberon, port 80 ready to accept requests [21/Oct/2002:10:40:05] info ( 1230): [LS ls2] https://oberon, port 443 ready to accept requests [21/Oct/2002:10:40:05] info ( 1230): A new configuration was successfully installed
    Do I need to set anything in the web server or app server? Any help is appreciated.

    Be sure to rollback to 16.0.1; the initial v16 update had serious security flaw.

  • Crash occurred in NSAPI SAF admin40_host_ip_check

    Hello Sun Forum,
    I just recently started problems with trying to startup the 'startconsole' facility of my 'iPlanet-WebServer-Enterprise/6.0SP1 B11/09/2001 15:18'. I can 'start-admin' ok and get the message:
    http://ux2.pcb, port 7583 ready to accept requests
    [23/Mar/2005:14:48:20] info (73928): A new configuration was successfully installed
    It seems to be ok and waiting for a connection. When I 'startconsole', I get the login pop-up message box ok, but when I enter the password I get the following messages (I included the start-admin messages too, beginning to failure):
    [23/Mar/2005:14:48:17] info (141826): successful server startup
    [23/Mar/2005:14:48:17] info (141826): iPlanet-WebServer-Enterprise/6.0SP1 B11/09/2001 15:18
    [23/Mar/2005:14:48:18] info (141826): Access Host filter is: *.pcb
    [23/Mar/2005:14:48:18] info (141826): Access Address filter is: *
    [23/Mar/2005:14:48:20] info (73928): Installing a new configuration
    [23/Mar/2005:14:48:20] info (73928): [LS ls1] http://ux2.pcb, port 7583 ready to accept requests
    [23/Mar/2005:14:48:20] info (73928): A new configuration was successfully installed
    [23/Mar/2005:14:48:20] warning (73928): Address directive ignored
    [23/Mar/2005:14:49:01] catastrophe (73928): Server crash detected (signal SIGSEGV)
    [23/Mar/2005:14:49:01] info (73928): Crash occurred in NSAPI SAF admin40_host_ip_check
    [23/Mar/2005:14:49:02] failure (141826): Child process admin thread is shutting down
    [23/Mar/2005:14:49:07] info (73930): Installing a new configuration
    [23/Mar/2005:14:49:07] info (73930): [LS ls1] http://ux2.pcb, port 7583 ready to accept requests
    [23/Mar/2005:14:49:07] info (73930): A new configuration was successfully installed
    [23/Mar/2005:14:49:07] warning (73930): Address directive ignored
    [23/Mar/2005:16:01:28] info (144414): successful server startup
    This results in a looping of the pop-up logon message box indicating :
    Cannot logon because of an incorrect User ID, Incorrect password or Directory problem.
    java.io.EOFException: Connection lost
    Originally we thought we simply forgot the password. We confirmed we had the right password by doing ldapsearch and additionally taking the effort to put the 'dse.ldif' file back with the same encrypted password (SSHA).
    Are there any patches to address this problem? Our VAR thought that we might be under attack but we ONLY see this message as a result of trying 'startconsole' and logon.
    Thanks for reading this!

    There is this warning:
    [23/Mar/2005:14:48:20] warning (73928): Address directive ignored
    Did you try fixing that first? Did it help? Are your hostname and/or IP address settings in your admin server config correct? Are you using DNS? Do they match your DNS settings?
    I'm glad I'm migrating off this product to IBM Directory Server.Did you attempt to contact an official Sun DS support person? The ones I know are very knowledgeable and helpful. AFAIK, this forum is not a venue for official support. In fact, I end up answering a fair number of questions, and I'm definitely not affiliated with Sun (although I did work on Netscape/iPlanet DS up until 5.1).

  • Crash occurred in NSAPI SAF send-cgi

    Hi,
    We are getting Crash every couple of days. But could not find why this should happen. Here is the error log and the pstack info. If anyone has idea, please let me know.
    We have recently upgraded to sun servers6.1sp6 and solaris 10.
    thanks,
    log;
    [20/Mar/2007:12:01:56] catastrophe (11443): CORE3260: Server crash detected (signal SIGSEGV)
    [20/Mar/2007:12:01:56] info (11443): CORE3261: Crash occurred in NSAPI SAF send-cgi
    [20/Mar/2007:12:01:56] info (11443): CORE3262: Crash occurred in function INTnetbuf_next from module /usr/iplanet/servers6.1s
    p6/bin/https/lib/libns-httpd40.so
    [20/Mar/2007:12:02:08] failure (11442): CORE3107: Child process closed admin channel
    [20/Mar/2007:12:02:08] info (11160): CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.4.2_05] from [Sun Microsystems In
    c.]
    pstack:
    core 'core.icorefep1.webservd.3205.1010.1171723612.2319' of 2319: webservd -r /usr/iplanet/servers6.1sp6 -d /usr/iplanet/servers6.1sp6/h
    pstack: warning: librtld_db failed to initialize; symbols from shared libraries will not be available
    ----------------- lwp# 1 --------------------------------
    fe0c0e70 ???????? (0, 0, ffbff6e8, 0, 0, 3e8)
    ----------------- lwp# 4 --------------------------------
    fe0c0e70 ???????? (fd9fadb8, 1, fd9fad38, 0, 0, 1388)
    ----------------- lwp# 5 --------------------------------
    fe0c0f84 ???????? (d, fcffaedd, feb, 0, 2c00, 0)
    ----------------- lwp# 6 --------------------------------
    fe0c0144 ???????? (27c90, 4a970, fcefbcc8, 1, 0, 0)
    ----------------- lwp# 7 --------------------------------
    fe0c0528 ???????? (fcdfbeb8, 0, 0, fd7e0800, 0, 1)
    ----------------- lwp# 8 --------------------------------
    fe0c0144 ???????? (28668, 66ebf0, 0, 0, 0, 0)
    ----------------- lwp# 9 --------------------------------
    fe0c0e70 ???????? (0, 0, fcbfbea8, 0, 0, 0)
    ----------------- lwp# 11 --------------------------------
    fe0c0144 ???????? (286b8, 66ee98, 0, 0, 0, 0)
    ----------------- lwp# 12 --------------------------------
    fe0c0144 ???????? (7c1390, 7af2e8, fc9fbc90, 1, 0, 0)
    ----------------- lwp# 13 --------------------------------
    fe0c1378 ???????? (88490, 88478, fa67fd30, 3b9ac800, 1d8dbc20, 16)
    ----------------- lwp# 14 --------------------------------
    fe0c1378 ???????? (8c150, 8c138, f1430, 0, 0, 0)
    ----------------- lwp# 15 --------------------------------
    fe0c1378 ???????? (8c2b8, 8c2a0, f1638, 0, 0, f9e7f8a4)
    ----------------- lwp# 16 --------------------------------
    fe0c1378 ???????? (87c20, 87c08, ff000000, ff000000, 0, 0)
    ----------------- lwp# 18 --------------------------------
    fe0c1378 ???????? (88a30, 88a18, f1a48, 0, 4b8110, f7a7fd50)
    ----------------- lwp# 19 --------------------------------
    fe0c1378 ???????? (88ac0, 88aa8, f1c50, 0, 4b8110, 0)
    fd194078 ???????? (88a60, 0, 8cd50, 4000, 4194, f1c50)
    fd2aac7c ???????? (fd5358a9, fd5c1238, f1c50, 12c1d0, 31a08c, fd267ed8)
    fd267f00 ???????? (f1c50, 13, 40, 0, 40, 1)
    fd2643e0 ???????? (f1c50, e3780000, 0, 0, fd2642ac, 1)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 20 --------------------------------
    fe0c1378 ???????? (88ac0, 88aa8, edb50, 0, 4b8110, 0)
    fd194078 ???????? (88a60, 0, 8d020, 4000, 4194, edb50)
    fd2aac7c ???????? (fd5358a9, fd5c1238, edb50, 12cde8, 31a08c, fd267ed8)
    fd267f00 ???????? (edb50, 14, 40, 0, 40, 1)
    fd2643e0 ???????? (edb50, e3500000, 0, 0, fd2642ac, 1)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 22 --------------------------------
    fe0c0e70 ???????? (e2d7f750, 0, e2d7f7b8, 0, 0, 0)
    fe061f24 ???????? (e2d7f750, fe0eba68, fe0eba68, 0, e2d7f7b8, 0)
    fe06229c ???????? (0, 0, 0, 0, e2d7f840, e2d7f840)
    fd10651c ???????? (0, ea60, 1, f7c160d0, c, 0)
    fd10633c ???????? (f2880, 0, ea60, 1, 4, 0)
    fd293258 ???????? (f2914, e2d7f9a8, 0, ea60, e8dfbf78, 0)
    f7c0b96c ???????? (e2d7fa2c, b8, 0, 3c, 0, 0)
    f7c05804 ???????? (e2d7faac, b7, 0, f7c16284, 8, e2d7f9c0)
    f7c05804 ???????? (e2d7fb24, f38212b8, 0, f7c160d0, 4, e2d7fa50)
    f7c05a8c ???????? (e2d7fb9c, 0, 0, f7c16420, 4, e2d7fac8)
    f7c0010c ???????? (e2d7fc28, e2d7fe90, a, f3821ca0, 4, e2d7fb40)
    fd15bcf8 ???????? (e2d7fe88, e2d7fcf0, e2d7fda8, f2880, f2880, e2d7fd00)
    fd24a3e4 ???????? (fd582000, ab7120, e2d7fd9c, e2d7fd98, e2d7fda8, f2880)
    fd25d5a8 ???????? (e2d7fe88, e2d7fe84, e2d7fe7c, e2d7fe74, e2d7fe6c, f2880)
    fd26e8f8 ???????? (f2880, f2880, 30298, ab7120, 31a08c, fd267ed8)
    fd267f00 ???????? (f2880, 16, 40, 0, 40, 1)
    fd2643e0 ???????? (f2880, e2d80000, 0, 0, fd2642ac, 1)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 23 --------------------------------
    fe0c0e70 ???????? (e1e7f750, 0, e1e7f7b8, 0, 0, 0)
    fe061f24 ???????? (e1e7f750, fe0eba68, fe0eba68, 0, e1e7f7b8, 0)
    fe06229c ???????? (0, 0, 0, 0, e1e7f840, e1e7f840)
    fd10651c ???????? (0, ea60, 1, f7c160d0, c, 0)
    fd10633c ???????? (f2c90, 0, ea60, 1, 4, 0)
    fd293258 ???????? (f2d24, e1e7f9a8, 0, ea60, e8e053b0, 0)
    f7c0b96c ???????? (e1e7fa2c, b8, 0, 3c, 0, 0)
    f7c05804 ???????? (e1e7faac, b7, 0, f7c16284, 8, e1e7f9c0)
    f7c05804 ???????? (e1e7fb24, f38212b8, 0, f7c160d0, 4, e1e7fa50)
    f7c05a8c ???????? (e1e7fb9c, 0, 0, f7c163d0, 4, e1e7fac8)
    f7c0010c ???????? (e1e7fc28, e1e7fe90, a, f3821ca0, 4, e1e7fb40)
    fd15bcf8 ???????? (e1e7fe88, e1e7fcf0, e1e7fda8, f2c90, f2c90, e1e7fd00)
    fd24a3e4 ???????? (fd582000, 8e3120, e1e7fd9c, e1e7fd98, e1e7fda8, f2c90)
    fd25d5a8 ???????? (e1e7fe88, e1e7fe84, e1e7fe7c, e1e7fe74, e1e7fe6c, f2c90)
    fd26e8f8 ???????? (f2c90, f2c90, 30608, 8e3120, 31a08c, fd267ed8)
    fd267f00 ???????? (f2c90, 17, 40, 0, 40, 1)
    fd2643e0 ???????? (f2c90, e1e80000, 0, 0, fd2642ac, 1)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 76 --------------------------------
    fe0c1294 ???????? (6, 0, fe0a4ba8, ffffffff, fe0e8284, 6)
    fe040038 ???????? (0, 1, fe0b579c, a8350, fe0eb298, 0)
    fd499d98 ???????? (1, fd53ad22, e1d7f668, fd56f8a2, fd56f83a, 14)
    fd37d35c ???????? (e1d7f678, fd5d8b3c, fd53aaec, fd546bb3, fd53ab90, fd546b70)
    fd2f6fa4 ???????? (8f, 5000, 0, ff000000, 0, 48a284)
    fd2c0188 ???????? (8f, fd5c364c, 20361e8, e1d7f590, e1d7f568, 1)
    fd83e174 ???????? (203627c, e1d7f918, 8f, ffffffff, f7c162e4, 0)
    f7c0b96c ???????? (e1d7f994, b8, 0, f7c162a0, 0, e1d7f898)
    f7c05804 ???????? (e1d7fa2c, b8, 0, f7c16298, 4, e1d7f930)
    f7c05804 ???????? (e1d7faac, f38b3ba0, 0, f7c16298, 4, e1d7f9c8)
    f7c05a8c ???????? (e1d7fb24, f38212b8, 0, f7c16420, 8, e1d7fa48)
    f7c05a8c ???????? (e1d7fb9c, 0, 0, f7c163d0, 4, e1d7fac8)
    f7c0010c ???????? (e1d7fc28, e1d7fe90, a, f3821ca0, 4, e1d7fb40)
    fd15bcf8 ???????? (e1d7fe88, e1d7fcf0, e1d7fda8, 20361e8, 20361e8, e1d7fd00)
    fd24a3e4 ???????? (fd582000, ab6910, e1d7fd9c, e1d7fd98, e1d7fda8, 20361e8)
    fd25d5a8 ???????? (e1d7fe88, e1d7fe84, e1d7fe7c, e1d7fe74, e1d7fe6c, 20361e8)
    fd26e8f8 ???????? (20361e8, 20361e8, 309c8, ab6910, 31a08c, fd267ed8)
    fd267f00 ???????? (20361e8, 4c, 7f, 0, 7f, 1)
    fd2643e0 ???????? (20361e8, e1d80000, 0, 0, fd2642ac, 1)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 25 --------------------------------
    fe0c0e70 ???????? (e1cfbc88, 1, e1cfbc08, 0, 0, 1388)
    fe05cf48 ???????? (e1cfbc88, 1, 1388, 10624c00, 0, 0)
    fedd8534 ???????? (e1cfbcf4, 1, e1cfbd24, e1cfbc88, 20, ffffffff)
    fedd9dd8 ???????? (30748, e1cfbe58, ffffffff, 12, 0, ffffffff)
    ff22a3ac ???????? (f42e8, e1cfbe58, ffffffff, ff000000, 0, 0)
    ff220fc0 ???????? (108de50, 7, 8, 0, 1000, ffffe800)
    ff106d68 ???????? (108de50, 78f110, 0, 0, 0, 1)
    fedddf2c ???????? (78f110, ff106d44, 400, fedf6a98, 0, fedf87dc)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
    ----------------- lwp# 26 --------------------------------
    fe0c0144 ???????? (262a0, 498f8, e1bfbd28, 1, 0, 0)
    fe0ba1d4 ???????? (262a0, 498f8, e1bfbd28, 0, 0, 0)
    fe0ba64c ???????? (262a0, 498f8, e1bfbd28, 0, 0, 0)
    fe0ba7e4 ???????? (262a0, 498f8, e1bfbeb8, ff000000, 0, 0)
    fe0ba8d8 ???????? (262a0, 498f8, e1bfbeb8, 0, 0, c350)
    fe0ba918 ???????? (262a0, 498f8, e1bfbeb8, 45d7155d, 0, 3618adb8)
    fedd79fc ???????? (26298, 2, 78faa0, 0, 3618adb8, 0)
    ff23b82c ???????? (2e58, 0, 0, ff2ef26c, ff2ef274, ff2ef260)
    fedddf2c ???????? (78faa0, ff23b498, 400, fedf6a98, 0, fedf87dc)
    fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)

    Unfortunately, we can't tell much from that pstack output because it doesn't include symbols:pstack: warning: librtld_db failed to initialize; symbols from shared libraries will not be availableI don't know pstack couldn't initialize librtld_db. How big is the core file? Is it possible that it was truncated due to a lack of disk space or ulimit? Did you run pstack on the same system that generated the core file?
    While I don't remember seeing a bug like this before, have you tried applying the latest service pack? For Web Server 6.1, that's 6.1SP7. Service packs contain important bug fixes.

  • Need to make periodic request to App Server from NSAPI SAF

    I have to send a keep alive ping to a existing Session on our app server from a NSAPI SAF on IWS6.
    First, is making a direct socket call the best way to handle it or is there another suggestion for sending the request.
    Second, if using the direct socket connection is the way to go do I need to use the net_* methods within the NSAPI code or can I use native socket code.
    Third, will there be any issues with making this type of socket call from a spawned thread, and can I use the native threads on Sun Solarias.
    Some code examples would be very helpful since I can't find much at all on the site.

    NSAPI doesn't expose any infrastructure for managing outbound connections, and the list of supported net_* functions does not include socket, bind, or connect analogs. You are probably best off using native socket code.
    On Solaris, you can create your thread using the NSAPI systhread_create function or the Solaris pthread_create or thr_create functions. Note that you should not call NSAPI functions from a thread you create yourself unless you first call the NSAPI prepare_nsapi_thread function.

  • Imgaes redirection in Iplanet 6.1 SP4

    Hi all,
    We have a webapp with iPlanet 6 and Weblogic 8.1. The entire application is deployed on Weblogic, while the iPlanet is just a Web Server directing all requests to the Weblogic server.
    The iPlanet is configured to use the domain www.some_company.com/ebill and that was configured as the context in the Weblogic.
    The issue we have is with static URLs in the JSP pages like �/images/a.jpg� or �../images/b.jpg� are not displayed when running under this URL context. Only when the iPlanet and Weblogic are configured to use the root context "/" they are displayed.
    Also, when changing the application code to use �images/a.jpg� without the �/� in the beginning the images are being presented. However, I would like get an opinion if it is possible to solve this via iPlanet configuration and not thru code changes.
    My obj.conf is attached below. Please advise.
    # You can edit this file, but comments and formatting changes
    # might be lost when the admin server makes changes.
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn="redirect" from="/hostname:8443/ebill/loginPage.jsp" url="http://www.some_company.com:8443/loginPage.jsp"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/app/hostname/iplanet/ns-icons" name="es-internal"
    NameTrans fn="document-root" root="$docroot"
    PathCheck fn="unix-uri-clean"
    PathCheck fn="check-acl" acl="default"
    PathCheck fn="find-pathinfo"
    PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
    ObjectType fn="type-by-extension"
    ObjectType fn="force-type" type="text/plain"
    Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
    Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
    Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
    Service method="TRACE" fn="service-trace"
    Error fn="error-j2ee"
    AddLog fn="flex-log" name="access"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="cgi">
    ObjectType fn="force-type" type="magnus-internal/cgi"
    Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>
    <Object name="send-compressed">
    PathCheck fn="find-compressed"
    </Object>
    <Object name="compress-on-demand">
    Output fn="insert-filter" filter="http-compression"
    </Object>
    <Object name="ebill" ppath="*/ebill/*">
    Service fn="wl_proxy" WebLogicHost="app_hostname" WebLogicPort="8080"
    </Object>

    We have changed default thin driver to 920 from 817 in 610sp4. If you are using 817
    dbserver, please put 817 classes12.zip in your classpath before weblogic.jar and you will
    be ok.
    Mitesh
    Harish SK wrote:
    Our application used to update a NUMBER(15) column in Oracle with current time
    in milliseconds.
    After migrating from SP3 to SP4 I observed that ORA-01438 was being thrown during
    the update intermittently.
    Increasing the size to default NUMBER, I observed that the values getting inserted
    are sometime random like 59, 81 digits long!
    The update code just does a prepared statement and does setObject of a java.lang.Long.
    I am using the oracle thin driver in oracle's classes12.zip.
    I am sure that this is happening since using SP4, have anyone faced similar problems?

  • Create NSAPI SAF plug-in equivalent to check-request-limits

    Hi Masters,
    GoodDay. Okay, here's the problem:
    I'm a newbie in writing a custom SAF's, & what I'd like to do is to write a SAF which is closer to this one:
    +PathCheck fn="check-request-limits" monitor="$ip" max-rps="10" specifically the check-request-limits fn.+
    I believe source code of the server is not available so the question is:
    How can I get total request of a specific client in a given time (secs for example) [ip->TOTAL_REQUEST_IN_1_SEC]?
    char *ip = pblock_findval("ip", sn->client);
    //NEED HELP HERE
    if (ip->TOTAL_REQUEST_IN_1_SEC < 10 ) {
         //my logic goes here
    }Any help would do! Thanks in advance!

    Source code is out. Check this thread :
    Announcing Open Web Server [http://forums.sun.com/thread.jspa?forumID=759&threadID=5360537|http://forums.sun.com/thread.jspa?forumID=759&threadID=5360537]

  • WLS 6.1 SP2 NSAPI and iPlanet (Sun One) issues

    Hi. I am going nuts with this NSAPI issue. I am working in a Solaris 8 environment,
    WLS 6.1 SP2 and iPlanet (Sun One)and NSAPI. I can get everything to work fine
    and dandy in aniPlanet 4.1 environment. I can not get it to work in an Iplanet
    (Sun One) 6.x environment. It appears that some things work differently between
    the versions of iPlanet (ie. things contained in magnus.conf and/or obj.conf).
    I have tried moving things, removing things, adding things and nothing seems
    to work....it's almost as though the NSAPI, etc. are being ignored.
    I've attached my magnus.conf and obj.conf files (I cut and pasted them into a
    single file so I could upload it). Can anyone help me out here...I've been working
    for weeks on this and can't seem to get any answers.
    Thanks!
    Doug
    P.S. For security purpses I changed the first part of the IP add. in the files
    to 1234567, etc.
    Thanks
    [conf_files.txt]

    Hi Doug
    U have to put the following section
    Init fn="load-modules" funcs="wl_proxy,wl_init" shlib="./libproxy.so"
    Init fn="wl_init"
    into magus.conf
    and put the rest into obj.conf
    Best Regards
    Alex
    "Doug E" <[email protected]> wrote:
    >
    Does anybody know of a good reference document on how to properly install
    the NSAPI
    plug-in for WLS6.1 & iPlanet6(SunOne) on Unix (Solaris). Many of the references
    that
    I have been finding are either incomplete, have typo's and are mostly Windows
    oriented
    (ie. with the .dll's, paths, examples, etc.)
    My problem is that our old iPlanet 4.x works fine...everything proxies,
    etc. iPlanet
    6 just doesn't want to seem to communicate with WLS 6.1 SP2 We tried many
    of the
    saem things from the 4.x magnus & obj.confs...but things look somewhat different
    in iPlanet 6.x (did they move tings..such as the fn's from one to the other,
    etc.)
    If so..and there are big differences in installing iPlanet 4.x vs. 6.x
    then many
    of the docs out there are inaccurate. Does anyone know if there is a newer
    version
    of the NSAPI plug-in for Unix.
    I would love to see a basic, working set of magnus.conf obj.conf, MIME,etc
    from someone
    who has actually gotten NSAPI to work between WLS 6.1 and iPlanet 6 on Unix
    (Solaris)
    It blows my mind that 4.x works and 6.x doesn't. An updated NSAPI plug-in
    , if it exists and perhaps fixes the problem, would make my day. Any ideas?
    Thanks!
    -Doug

  • Iplanet portal sp4 ?? still no docs and software ?

    Thank you for registering for the iPlanet Portal Server SP4 webcast scheduled for February 7, 2002.
    This webcast event has been RESCHEDULED for:
    Thursday, February 14, 2002 at 10:ooam PST.
    We apologize for the technical difficulties you may have encountered during the webcast
    Archive
    Available within 5-7 days of live broadcast
    it's now over 2 weeks when will it be available ??

    SP4 is expected to be released by this month. We are eager as well.
    Thanks,
    Raj_indts
    Developer Technical Support
    Sun Microsystems
    http://www.sun.com/developers/support

  • Solaris + iPlanet 6.0SP2 + PHP 5.1.2 + Instant Client

    Configuration:
    Solaris OS 5.8 (64bit)
    iPlanet 6.0 (SP2) (32bit)
    PHP v5.1.2 (32bit)
    Instant Client 10.2.0.1 (32 bit)
    I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
    I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
    ==========================
    [09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
    [09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
    [09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
    [09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] info (17408): Installing a new configuration
    [09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
    =======================================
    If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
    I would very much appreciate if any one has any ideas to pass thru this
    Thanks
    Vijay

    Configuration:
    Solaris OS 5.8 (64bit)
    iPlanet 6.0 (SP2) (32bit)
    PHP v5.1.2 (32bit)
    Instant Client 10.2.0.1 (32 bit)
    I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
    I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
    ==========================
    [09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
    [09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
    [09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
    [09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
    [09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
    [09/Mar/2006:10:20:58] info (17408): Installing a new configuration
    [09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
    =======================================
    If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
    I would very much appreciate if any one has any ideas to pass thru this
    Thanks
    Vijay

  • I got a big problem that iPlanet 6.0 SP2

    Hi,
    I got a big problem that iPlanet 6.0 SP2 is in cycle of restart.
    The web server's error logs is the following:
    [16/Jul/2002:00:30:05] info ( 8545): successful server startup
    [16/Jul/2002:00:30:05] info ( 8545): iPlanet-WebServer-Enterprise/6.0SP2 B11/13/2001 00:49
    [16/Jul/2002:00:30:09] info ( 8599): Installing a new configuration
    [16/Jul/2002:00:30:09] info ( 8599): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
    [16/Jul/2002:00:30:09] failure ( 8599): Error accepting connection -5928, oserr=130 (Connect aborted)
    [16/Jul/2002:00:30:09] info ( 8599): A new configuration was successfully installed
    [16/Jul/2002:00:38:14] failure ( 8545): Child process admin thread is shutting down
    [16/Jul/2002:00:38:16] info ( 9053): Installing a new configuration
    [16/Jul/2002:00:38:16] info ( 9053): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
    [16/Jul/2002:00:38:16] info ( 9053): A new configuration was successfully installed
    [16/Jul/2002:00:38:16] failure ( 9053): Error accepting connection -5928, oserr=130 (Connect aborted)
    [16/Jul/2002:00:46:04] failure ( 8545): Child process admin thread is shutting down
    [16/Jul/2002:00:46:05] info ( 9496): Installing a new configuration
    [16/Jul/2002:00:46:05] info ( 9496): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
    [16/Jul/2002:00:46:05] failure ( 9496): Error accepting connection -5928, oserr=130 (Connect aborted)
    [16/Jul/2002:00:46:05] info ( 9496): A new configuration was successfully installed
    [16/Jul/2002:02:43:31] failure (15596): Child process admin thread is shutting down
    [16/Jul/2002:02:43:32] info (16212): Installing a new configuration
    [16/Jul/2002:02:43:32] info (16212): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
    [16/Jul/2002:02:43:32] info (16212): A new configuration was successfully installed
    [16/Jul/2002:02:43:32] failure (16212): Error accepting connection -5928, oserr=130 (Connect aborted)
    You can see child process is shutdown and restart it.
    I don't know what's problem is.
    And other problem is the following:
    [16/Jul/2002:16:10:25] catastrophe (23966): Server crash detected (signal SIGBUS)
    [16/Jul/2002:16:10:25] info (23966): Crash occurred in NSAPI SAF NSServletService
    [16/Jul/2002:16:10:25] info (23966): Crash occurred in function direct_identityHashCode from module /usr/java1.2/jre/lib/sparc/libjvm.so
    [16/Jul/2002:16:10:25] failure (23454): Child process admin thread is shutting down
    [16/Jul/2002:16:10:26] info (24006): Installing a new configuration
    [16/Jul/2002:16:10:26] info (24006): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
    [16/Jul/2002:16:10:26] failure (24006): Error accepting connection -5928, oserr=130 (Connect aborted)
    FYI, here is our environment:
    # /usr/java1.2/bin/java -version
    java version "1.2.2" Solaris VM (build Solaris_JDK_1.2.2_07, native threads, sunwjit)
    # uname -a
    SunOS wagency2 5.6 Generic_105181-31 sun4u sparc SUNW,Ultra-4
    Sun Enterprise 450 (2 X UltraSPARC-II 400 Mhz, 2G Memory
    If you have any solution and experience, please let me know.
    Thanks,
    Barney Kim
    [email protected]

    Barney,
    from the error log the problem seems to be related to the use of an external JDK. Try reverting back to the original JRE. See if that helps, i.e., the server starts up fine. Use the administration GUI and select Global Settings > Configure JRE/JDK Paths. On the screen that appears, you can configure the path to the JRE. The default would be <server-root>/bin/https/jre.
    If that works fine, you might download a more recent version of the JDK. iWS 6 SP2 supports JDK 1.3.1.
    Hope this helps.
    Best regards
    Rodrigo

  • IPlanet web server crash 6.0SP5

    Hi all,
    I am getting the following errors in iPlanet web server
    Platform details: Sun solaris, SPARC, 8, iPlanet 6.0 SP5
    Pls let me know how to fix this porblem
    Error details
    Error 1:
    catastrophe ( 7455): Server crash detected (signal SIGSEGV)
    info ( 7455): Crash occurred in NSAPI SAF validate_session_policy
    info ( 7455): Crash occurred in function xmlFreeNodeList from module /opt/SUNWam/lib/libxml2.so.2
    failure ( 7454): Child process admin thread is shutting down
    Error 2:
    catastrophe ( 529): Server crash detected (signal SIGBUS)
    info ( 529): Crash occurred in NSAPI SAF validate_session_policy
    info ( 529): Crash occurred in function xmlFreeProp from module /opt/SUNWam/lib/libxml2.so.2
    failure ( 522): Child process admin thread is shutting down
    Error 3:
    catastrophe (13576): Server crash detected (signal SIGILL)
    info (13576): Crash occurred in NSAPI SAF NSServletService
    failure (29922): Child process admin thread is shutting down
    Error 4:
    catastrophe (11097): Server crash detected (signal SIGSEGV)
    info (11097): Crash occurred in function __0fLPollManagerNAddConnectionR6KConnectionUi from module /app/iws605/bin/https/lib/libns-httpd40.so
    Error 5
    catastrophe (27403): Server crash detected (signal SIGSEGV)
    info (27403): Crash occurred in NSAPI SAF NSServletService
    info (27403): Crash occurred in function memset from module /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1

    Hi
    I am also getting the following error.
    Jawwad ,Can you please let me know did your problem got solved , what was the solution
    Any help will be highly appreciated
    [26/Apr/2004:09:09:04] failure ( 5958): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.la
    ng.OutOfMemoryError
    [26/Apr/2004:09:09:07] failure ( 5958): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.la
    ng.OutOfMemoryError
    [26/Apr/2004:09:09:14] catastrophe ( 5958): Server crash detected (signal SIGSEGV)
    [26/Apr/2004:09:09:14] info ( 5958): Crash occurred in function __0fLPollManagerNAddConnectionR6KConnectionUi from module /opt/app/bstwkwww/
    iplanet60/bin/https/lib/libns-httpd40.so
    Thanks and regards
    Shikhar

  • Add-header SAF how-to

    I am using Iplanet 4.1 SP9 on Solaris 2.7. I need the add-header SAF in obj.conf to add P3P headers for my website.
    The documentation says I can use a file (html) to publish additional headers. I have tried:
    P3P: CP="NOI DEVa TAIa OUR BUS UNI STA OTC"
    in a file called p3pheader.html and I have added the following line in the default object in obj.con:
    Service fn="add-header" path="/export/home/enter_4.1/docs/dev/w3c/p3pheader.html" NSIntAbsFilePath="yes"
    Iplanet returns the following error:
    [23/nbre/2001:16:46:24] config ( 5326): for host 141.126.5.15 trying to GET /SME/frameset.html, pcheck_add_header reports: No header specified
    Any help ?

    The addition of HTTP headers is conspicuously missing from the standard
    directives. The add-header function simply adds HTML to the top of a
    page. You'll need to use a custom SAF for HTTP headers. For example
    you could compile this one:
    * NSAPI SAF to add a HTTP header to the server response.
    * Returns REQ_NOACTION so request is processed as normal.
    * Init fn="load-modules" shlib="/libAddHttpHeader.so" funcs="add-http-header"
    * Service fn="add-http-header" name="P3P" value="CP=\"NOI DEVa TAIa OUR BUS
    UNI STA OTC\""
    #include "nsapi.h"
    NSAPI_PUBLIC int add_http_header(pblock pb, Session sn, Request *rq)
    char *name = pblock_findval("name",pb);
    char *value = pblock_findval("value",pb);
    if (name && value){
    param_free(pblock_remove(name, rq->srvhdrs));
    pblock_nvinsert(name, value, rq->srvhdrs);
    return (REQ_NOACTION);
    Jose Niguidula wrote:
    I am using Iplanet 4.1 SP9 on Solaris 2.7. I need the add-header SAF
    in obj.conf to add P3P headers for my website.
    The documentation says I can use a file (html) to publish additional
    headers. I have tried:
    P3P: CP="NOI DEVa TAIa OUR BUS UNI STA OTC"
    in a file called p3pheader.html and I have added the following line in
    the default object in obj.con:
    Service fn="add-header"
    path="/export/home/enter_4.1/docs/dev/w3c/p3pheader.html"
    NSIntAbsFilePath="yes"
    Iplanet returns the following error:
    [23/nbre/2001:16:46:24] config ( 5326): for host 141.126.5.15 trying
    to GET /SME/frameset.html, pcheck_add_header reports: No header
    specified
    Any help ?

  • Web Svr 6.1 SP4 App Svr 8.1 integration service-passthrough Working example

    This is a verbatim example from a working installation.
    Pathnames etc will differ from this example.
    This is an example of the integration of SUN Java System Web Server 6.1 SP 4 and
    SUN Java System Application Server 8.1 2005Q1.
    The scope of this integration is successfully accessing a working application
    hosted on the application server by making HTTP requests to the web server.
    Download and install the "Reverse Proxy Plug-in"
    The "Sun Java System Web Server 6.1 Add-Ons" download from sun.com
    includes the libpassthrough.so shared object.
    libpassthrough.so includes the required passthrough Server Application Function(s) (SAF).
    The output of the strings command on libpassthrough.so followed by a
    grep for passthrough will list the available Server Application Function(s).
    strings libpassthrough.so | grep -i passthrough
    magnus.conf file edits.
    /export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/config/magnus.conf
    Add this line.
    Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/plugins/passthrough/libpassthrough.so"
    obj.conf edits.
    NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
    Position of the NameTrans directive is significant.
    The NameTrans directives are sequentially searched until a match is found.
    One and only one NameTrans directive is utilized for the
    NameTrans stage of each HTTP request.
    My configuration had this directive as the first NameTrans directive of the obj.conf file.
    <Object name="passthrough">
    Service fn="service-passthrough" servers="http://192.168.1.199:8080"
    </Object>
    Once a NameTrans match is found the corresponding Object
    within the obj.conf file is utilized.
    In this example the name attribute of the NameTrans directive corresponds
    to the name attribute of the Object.
    The Service directive invokes the service-passthrough Server Application Function (SAF)
    of the libpassthrough.so.
    The servers argument is passed to the service-passthrough function.
    HTTP requests made directly to the application server where the application is hosted
    are sussessful. Note the 8080 port in the URL.
    http://localhost:8080/pwc/PWCUnprotected
    HTTP requests made to the WebServer are successful as well.
    The requests are "passed through" between the Web Server
    and the Application Server.
    http://localhost:80/pwc/PWCUnprotected
    http://localhost/pwc/PWCUnprotected
    LOG FILES
    success note 200 HTTP status code
    failure note XXX in URL and 404 HTTP status code
    Web Server
    /export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/access
    127.0.0.1 - - [08/May/2005:23:53:51 -0500] "GET /pwc/PWCUnprotected HTTP/1.1" 200 185
    127.0.0.1 - 09/May/2005:00:02:34 -0500 GET /pwc/PWCUnprotectedXXX HTTP/1.1 404 1003
    Application Server
    /export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/access/server_access_log
    192.168.1.199 - 08/May/2005:23:53:51 -0500 GET /pwc/PWCUnprotected HTTP/1.1 200 185
    127.0.0.1 - 09/May/2005:00:02:34 -0500 GET /pwc/PWCUnprotectedXXX HTTP/1.1 404 1003
    The log files illustrate the NameTrans wild card behavior
    NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
    All requests of the pwc context are passed on to the application server from the
    web server as expected.
    A nominal start of the server from the Web Server Manager yields the following output.
    magnus.conf, obj.conf edit/configuration errors may be seen here.
    Status:
    [https-menfi.houston.rr.com]: Sun ONE Web Server 6.1SP4 B12/16/2004 11:42
    [https-menfi.houston.rr.com]: info: PASS1000: Sun ONE Web Server 6.1SP4 Reverse Proxy Plugin B10/14/2004 13:18
    [https-menfi.houston.rr.com]: info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_01] from [Sun Microsystems Inc.]
    [https-menfi.houston.rr.com]: info: WEB0100: Loading web module in virtual server [https-menfi.houston.rr.com] at [simple]
    [https-menfi.houston.rr.com]: info: WEB0100: Loading web module in virtual server [https-menfi.houston.rr.com] at [search]
    [https-menfi.houston.rr.com]: info: HTTP3072: [LS ls1] http://menfi.houston.rr.com:80 ready to accept requests
    [https-menfi.houston.rr.com]: startup: server started successfully
    Success!
    The server https-menfi.houston.rr.com has started up.
    The Release Notes for Sun Java System Web Server 6.1 Add-Ons Reverse Proxy Plugin
    http://docs.sun.com/source/819-0902-05/rpp61.html
    are well complemented by -
    Sun Java System Web Server 6.1 SP4 Administrator's Configuration File Reference
    http://docs.sun.com/app/docs/doc/817-6248
    Sun Java System Web Server 6.1 SP4 NSAPI Programmer's Guide
    http://docs.sun.com/app/docs/doc/817-6252
    Files from the working installation.
    magnus.conf
    # The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED.
    # They will not be supported in future releases of the Web Server.
    NetsiteRoot /export/home/accesmanagerinstalldir/opt/SUNWwbsvr
    ServerName menfi.houston.rr.com
    ServerID https-menfi.houston.rr.com
    RqThrottle 128
    DNS off
    Security off
    PidLog /export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/pid
    User webservd
    StackSize 131072
    TempDir /tmp/https-menfi.houston.rr.com-25a6f9e8
    Init fn=flex-init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
    Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"
    Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/plugins/passthrough/libpassthrough.so"
    obj.conf
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn=pfx2dir from=/mc-icons dir="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/ns-icons" name="es-internal"
    NameTrans fn=document-root root="$docroot"
    PathCheck fn=unix-uri-clean
    PathCheck fn="check-acl" acl="default"
    PathCheck fn=find-pathinfo
    PathCheck fn=find-index index-names="index.html,home.html,index.jsp"
    ObjectType fn=type-by-extension
    ObjectType fn=force-type type=text/plain
    Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
    Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
    Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
    Service method=TRACE fn=service-trace
    Error fn="error-j2ee"
    AddLog fn=flex-log name="access"
    </Object>
    <Object name="passthrough">
    Service fn="service-passthrough" servers="http://192.168.1.199:8080"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="cgi">
    ObjectType fn=force-type type=magnus-internal/cgi
    Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>
    <Object name="send-compressed">
    PathCheck fn="find-compressed"
    </Object>
    <Object name="compress-on-demand">
    Output fn="insert-filter" filter="http-compression"
    </Object>

    Thanks ur post helpme lot
    Thanks again
    madhu

  • Problems between iPlanet and Weblogic

    Hi guys, I'm having a problem, we I try to access the application through the iPlanet. The iPlanet crash and it restarts again.
    I got this message on the errors log of the iPlanet
    [17/Sep/2009:11:42:48] catastrophe (14873): CORE3260: Server crash detected (signal SIGSEGV)
    [17/Sep/2009:11:42:48] info (14873): CORE3261: Crash occurred in NSAPI SAF wl-proxy
    [17/Sep/2009:11:42:48] info (14873): CORE3262: Crash occurred in function INTcrit_enter from module /opt/iplanet/bin/https/lib/libns-httpd40.so
    [17/Sep/2009:11:42:48] failure (14819): CORE3107: Child process closed admin channel
    [17/Sep/2009:11:42:48] fine (14819): CORE3061: signal_handler_thread: received signal 18
    [17/Sep/2009:11:42:48] fine (14819): CORE3049: Primordial process detected child 14873 died: status 11
    [17/Sep/2009:11:42:48] fine (14819): CORE3050: Is our child, will spawn replacement
    [17/Sep/2009:11:42:48] fine (14819): CORE3062: Unlinking of /tmp/https-emergo2.cert.sabre.com.443-3b90a480/.cgistub_14873 returned -1
    I can add the the iplanet we are using is the 6.1sp5 and the weblogic is the version 9. everything is working on sun 9.
    I'm going to appreciate any help.
    Thanks

    Did you get SSL authentication on iPlanet AND forwarding this to WLS
    working?
    We can do certificate based authentication on iPlanet and the plugin
    forwards this to WLS (6.0sp1). WLS does not do anything with it.
    Thanks,
    Ronald
    Vlatas wrote:
    The trusted CA file holds the root CA certificates that will be trusted by
    the proxy plugin. So if your
    App server has CertA from Verisign, and CertA was issued by a Verisign CA
    certificate, then you
    want to have the Verisign CA certificate in the trusted CA file for the
    proxy plugin.
    Also, look in /tmp/wlproxy.log, errors should be getting logged in there
    that will help determine the
    problem.
    Tony
    "caris" <[email protected]> wrote in message
    news:3b0dbfb4$[email protected]..
    I'm using WebLogic 6.0 and iPlanet 4.1 for my application.
    I've got certificate from Versign for WebLogic and tested it well for
    standalone
    App Server.
    However, when I use iPlanet for proxy, the page doesn't display at all.
    Here is
    my config statement for iPlanet
    <Object name="weblogic" ppath="*/*">Service fn=wl-proxy
    WebLogicHost=localhost
    WebLogicPort=7002 SecureProxy=ON
    TrustedCAFile="c:/bea/wlserver6.0sp1/config/mydomain/getcacert.cer"</Object>
    Am I get it right? And I wonder what should it be put in the field
    "TrustedCAFile"
    By the way, I've got the certificate for the iPlanet Web Server too.
    It works fine for iPlanet with SSL pointing to the WebLogic port 7001.
    However it can't work at all when I pointing to the port 7002..
    Thanks for any ppl who can help me..

Maybe you are looking for