IPlanet 6.0 SP4 - NSAPI SAF
Hi,
I wrote a NSAPI SAF and is used to validate the client certificate. It is called from AuthTrans directive using:
<Object name="default">
AuthTrans "<SAF Name>"
</Object>
During Web Server startup and while loading the configuration file from Server Manager Console, web server calls this SAF (it was not so in previous releases of iPlanet). My SAF fails as there is no client certificate for validation during startup.
I noticed that during both instances, SAF is called as if the request is coming from client with 0.0.0.0 IP address. Since in real life there is no 0.0.0.0 IP adress, is it fair assumption to ignore the requests coming from 0.0.0.0 IP adress?
Thanks!!!
I tried to separate the authrization decision and enforcement using AuthTrans and PathCheck directives by adding following lines in default object of obj.conf
AuthTrans fn=basic-auth auth-type=basic userfn="mySAF"
PathCheck fn=require-auth auth-type=basic realm=test
Now, the web server asks for username/password after asking for client certificate.
The documentation talks about verifying/setting username & password in AuthTrans/PathCheck directives, whereas I want to deal with certificates.
Similar Messages
-
IPlanet 6.0 SP4 crashes for large file uploads
Environment:
iPlanet 6.0 SP4,iPlanet App Server 6.5, with maintenance update 3 installed running on the same machine on Solaris 8.0 (Sparc)
When I try to upload large file( > 10 MB) using HTTP POST MULTIPART/FORM-DATA the web server crashes with the following errors.
[18/Oct/2002:16:52:02] catastrophe ( 600): Server crash detected (signal SIGSEGV) [18/Oct/2002:16:52:02] info ( 600): Crash occurred in function memmove from module /export/home/iplanet/web60sp4/bin/https/lib/liblibdbm.so [18/Oct/2002:16:52:02] failure ( 376): Child process admin thread is shutting down [18/Oct/2002:16:52:05] warning ( 624): On group ls2_default, servername oberon does not match subject "192.168.0.35" of certificate Server-Cert. [18/Oct/2002:16:52:05] info ( 624): Installing a new configuration [18/Oct/2002:16:52:05] info ( 624): [LS ls1] http://oberon, port 80 ready to accept requests [18/Oct/2002:16:52:05] info ( 624): [LS ls2] https://oberon, port 443 ready to accept requests [18/Oct/2002:16:52:05] info ( 624): A new configuration was successfully installed [18/Oct/2002:16:52:05] info ( 624): log.cpp:openPluginLog() reports: Environment variable IAS_PLUGIN_LOG_FILE is not set. All plugin messages will be logged in the web server log file
[21/Oct/2002:10:40:02] catastrophe ( 1210): Server crash detected (signal SIGSEGV) [21/Oct/2002:10:40:02] info ( 1210): Crash occurred in NSAPI SAF gxrequest [21/Oct/2002:10:40:02] info ( 1210): Crash occurred in function __1cIGXBufferLAllocMemMap6ML_L_ from module /export/home/iplanet/app65mu3/ias/gxlib/libgxnsapi6.so [21/Oct/2002:10:40:02] failure ( 715): Child process admin thread is shutting down [21/Oct/2002:10:40:05] warning ( 1230): On group ls2_default, servername oberon does not match subject "192.168.0.35" of certificate Server-Cert. [21/Oct/2002:10:40:05] info ( 1230): Installing a new configuration [21/Oct/2002:10:40:05] info ( 1230): [LS ls1] http://oberon, port 80 ready to accept requests [21/Oct/2002:10:40:05] info ( 1230): [LS ls2] https://oberon, port 443 ready to accept requests [21/Oct/2002:10:40:05] info ( 1230): A new configuration was successfully installed
Do I need to set anything in the web server or app server? Any help is appreciated.Be sure to rollback to 16.0.1; the initial v16 update had serious security flaw.
-
Crash occurred in NSAPI SAF admin40_host_ip_check
Hello Sun Forum,
I just recently started problems with trying to startup the 'startconsole' facility of my 'iPlanet-WebServer-Enterprise/6.0SP1 B11/09/2001 15:18'. I can 'start-admin' ok and get the message:
http://ux2.pcb, port 7583 ready to accept requests
[23/Mar/2005:14:48:20] info (73928): A new configuration was successfully installed
It seems to be ok and waiting for a connection. When I 'startconsole', I get the login pop-up message box ok, but when I enter the password I get the following messages (I included the start-admin messages too, beginning to failure):
[23/Mar/2005:14:48:17] info (141826): successful server startup
[23/Mar/2005:14:48:17] info (141826): iPlanet-WebServer-Enterprise/6.0SP1 B11/09/2001 15:18
[23/Mar/2005:14:48:18] info (141826): Access Host filter is: *.pcb
[23/Mar/2005:14:48:18] info (141826): Access Address filter is: *
[23/Mar/2005:14:48:20] info (73928): Installing a new configuration
[23/Mar/2005:14:48:20] info (73928): [LS ls1] http://ux2.pcb, port 7583 ready to accept requests
[23/Mar/2005:14:48:20] info (73928): A new configuration was successfully installed
[23/Mar/2005:14:48:20] warning (73928): Address directive ignored
[23/Mar/2005:14:49:01] catastrophe (73928): Server crash detected (signal SIGSEGV)
[23/Mar/2005:14:49:01] info (73928): Crash occurred in NSAPI SAF admin40_host_ip_check
[23/Mar/2005:14:49:02] failure (141826): Child process admin thread is shutting down
[23/Mar/2005:14:49:07] info (73930): Installing a new configuration
[23/Mar/2005:14:49:07] info (73930): [LS ls1] http://ux2.pcb, port 7583 ready to accept requests
[23/Mar/2005:14:49:07] info (73930): A new configuration was successfully installed
[23/Mar/2005:14:49:07] warning (73930): Address directive ignored
[23/Mar/2005:16:01:28] info (144414): successful server startup
This results in a looping of the pop-up logon message box indicating :
Cannot logon because of an incorrect User ID, Incorrect password or Directory problem.
java.io.EOFException: Connection lost
Originally we thought we simply forgot the password. We confirmed we had the right password by doing ldapsearch and additionally taking the effort to put the 'dse.ldif' file back with the same encrypted password (SSHA).
Are there any patches to address this problem? Our VAR thought that we might be under attack but we ONLY see this message as a result of trying 'startconsole' and logon.
Thanks for reading this!There is this warning:
[23/Mar/2005:14:48:20] warning (73928): Address directive ignored
Did you try fixing that first? Did it help? Are your hostname and/or IP address settings in your admin server config correct? Are you using DNS? Do they match your DNS settings?
I'm glad I'm migrating off this product to IBM Directory Server.Did you attempt to contact an official Sun DS support person? The ones I know are very knowledgeable and helpful. AFAIK, this forum is not a venue for official support. In fact, I end up answering a fair number of questions, and I'm definitely not affiliated with Sun (although I did work on Netscape/iPlanet DS up until 5.1). -
Crash occurred in NSAPI SAF send-cgi
Hi,
We are getting Crash every couple of days. But could not find why this should happen. Here is the error log and the pstack info. If anyone has idea, please let me know.
We have recently upgraded to sun servers6.1sp6 and solaris 10.
thanks,
log;
[20/Mar/2007:12:01:56] catastrophe (11443): CORE3260: Server crash detected (signal SIGSEGV)
[20/Mar/2007:12:01:56] info (11443): CORE3261: Crash occurred in NSAPI SAF send-cgi
[20/Mar/2007:12:01:56] info (11443): CORE3262: Crash occurred in function INTnetbuf_next from module /usr/iplanet/servers6.1s
p6/bin/https/lib/libns-httpd40.so
[20/Mar/2007:12:02:08] failure (11442): CORE3107: Child process closed admin channel
[20/Mar/2007:12:02:08] info (11160): CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.4.2_05] from [Sun Microsystems In
c.]
pstack:
core 'core.icorefep1.webservd.3205.1010.1171723612.2319' of 2319: webservd -r /usr/iplanet/servers6.1sp6 -d /usr/iplanet/servers6.1sp6/h
pstack: warning: librtld_db failed to initialize; symbols from shared libraries will not be available
----------------- lwp# 1 --------------------------------
fe0c0e70 ???????? (0, 0, ffbff6e8, 0, 0, 3e8)
----------------- lwp# 4 --------------------------------
fe0c0e70 ???????? (fd9fadb8, 1, fd9fad38, 0, 0, 1388)
----------------- lwp# 5 --------------------------------
fe0c0f84 ???????? (d, fcffaedd, feb, 0, 2c00, 0)
----------------- lwp# 6 --------------------------------
fe0c0144 ???????? (27c90, 4a970, fcefbcc8, 1, 0, 0)
----------------- lwp# 7 --------------------------------
fe0c0528 ???????? (fcdfbeb8, 0, 0, fd7e0800, 0, 1)
----------------- lwp# 8 --------------------------------
fe0c0144 ???????? (28668, 66ebf0, 0, 0, 0, 0)
----------------- lwp# 9 --------------------------------
fe0c0e70 ???????? (0, 0, fcbfbea8, 0, 0, 0)
----------------- lwp# 11 --------------------------------
fe0c0144 ???????? (286b8, 66ee98, 0, 0, 0, 0)
----------------- lwp# 12 --------------------------------
fe0c0144 ???????? (7c1390, 7af2e8, fc9fbc90, 1, 0, 0)
----------------- lwp# 13 --------------------------------
fe0c1378 ???????? (88490, 88478, fa67fd30, 3b9ac800, 1d8dbc20, 16)
----------------- lwp# 14 --------------------------------
fe0c1378 ???????? (8c150, 8c138, f1430, 0, 0, 0)
----------------- lwp# 15 --------------------------------
fe0c1378 ???????? (8c2b8, 8c2a0, f1638, 0, 0, f9e7f8a4)
----------------- lwp# 16 --------------------------------
fe0c1378 ???????? (87c20, 87c08, ff000000, ff000000, 0, 0)
----------------- lwp# 18 --------------------------------
fe0c1378 ???????? (88a30, 88a18, f1a48, 0, 4b8110, f7a7fd50)
----------------- lwp# 19 --------------------------------
fe0c1378 ???????? (88ac0, 88aa8, f1c50, 0, 4b8110, 0)
fd194078 ???????? (88a60, 0, 8cd50, 4000, 4194, f1c50)
fd2aac7c ???????? (fd5358a9, fd5c1238, f1c50, 12c1d0, 31a08c, fd267ed8)
fd267f00 ???????? (f1c50, 13, 40, 0, 40, 1)
fd2643e0 ???????? (f1c50, e3780000, 0, 0, fd2642ac, 1)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 20 --------------------------------
fe0c1378 ???????? (88ac0, 88aa8, edb50, 0, 4b8110, 0)
fd194078 ???????? (88a60, 0, 8d020, 4000, 4194, edb50)
fd2aac7c ???????? (fd5358a9, fd5c1238, edb50, 12cde8, 31a08c, fd267ed8)
fd267f00 ???????? (edb50, 14, 40, 0, 40, 1)
fd2643e0 ???????? (edb50, e3500000, 0, 0, fd2642ac, 1)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 22 --------------------------------
fe0c0e70 ???????? (e2d7f750, 0, e2d7f7b8, 0, 0, 0)
fe061f24 ???????? (e2d7f750, fe0eba68, fe0eba68, 0, e2d7f7b8, 0)
fe06229c ???????? (0, 0, 0, 0, e2d7f840, e2d7f840)
fd10651c ???????? (0, ea60, 1, f7c160d0, c, 0)
fd10633c ???????? (f2880, 0, ea60, 1, 4, 0)
fd293258 ???????? (f2914, e2d7f9a8, 0, ea60, e8dfbf78, 0)
f7c0b96c ???????? (e2d7fa2c, b8, 0, 3c, 0, 0)
f7c05804 ???????? (e2d7faac, b7, 0, f7c16284, 8, e2d7f9c0)
f7c05804 ???????? (e2d7fb24, f38212b8, 0, f7c160d0, 4, e2d7fa50)
f7c05a8c ???????? (e2d7fb9c, 0, 0, f7c16420, 4, e2d7fac8)
f7c0010c ???????? (e2d7fc28, e2d7fe90, a, f3821ca0, 4, e2d7fb40)
fd15bcf8 ???????? (e2d7fe88, e2d7fcf0, e2d7fda8, f2880, f2880, e2d7fd00)
fd24a3e4 ???????? (fd582000, ab7120, e2d7fd9c, e2d7fd98, e2d7fda8, f2880)
fd25d5a8 ???????? (e2d7fe88, e2d7fe84, e2d7fe7c, e2d7fe74, e2d7fe6c, f2880)
fd26e8f8 ???????? (f2880, f2880, 30298, ab7120, 31a08c, fd267ed8)
fd267f00 ???????? (f2880, 16, 40, 0, 40, 1)
fd2643e0 ???????? (f2880, e2d80000, 0, 0, fd2642ac, 1)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 23 --------------------------------
fe0c0e70 ???????? (e1e7f750, 0, e1e7f7b8, 0, 0, 0)
fe061f24 ???????? (e1e7f750, fe0eba68, fe0eba68, 0, e1e7f7b8, 0)
fe06229c ???????? (0, 0, 0, 0, e1e7f840, e1e7f840)
fd10651c ???????? (0, ea60, 1, f7c160d0, c, 0)
fd10633c ???????? (f2c90, 0, ea60, 1, 4, 0)
fd293258 ???????? (f2d24, e1e7f9a8, 0, ea60, e8e053b0, 0)
f7c0b96c ???????? (e1e7fa2c, b8, 0, 3c, 0, 0)
f7c05804 ???????? (e1e7faac, b7, 0, f7c16284, 8, e1e7f9c0)
f7c05804 ???????? (e1e7fb24, f38212b8, 0, f7c160d0, 4, e1e7fa50)
f7c05a8c ???????? (e1e7fb9c, 0, 0, f7c163d0, 4, e1e7fac8)
f7c0010c ???????? (e1e7fc28, e1e7fe90, a, f3821ca0, 4, e1e7fb40)
fd15bcf8 ???????? (e1e7fe88, e1e7fcf0, e1e7fda8, f2c90, f2c90, e1e7fd00)
fd24a3e4 ???????? (fd582000, 8e3120, e1e7fd9c, e1e7fd98, e1e7fda8, f2c90)
fd25d5a8 ???????? (e1e7fe88, e1e7fe84, e1e7fe7c, e1e7fe74, e1e7fe6c, f2c90)
fd26e8f8 ???????? (f2c90, f2c90, 30608, 8e3120, 31a08c, fd267ed8)
fd267f00 ???????? (f2c90, 17, 40, 0, 40, 1)
fd2643e0 ???????? (f2c90, e1e80000, 0, 0, fd2642ac, 1)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 76 --------------------------------
fe0c1294 ???????? (6, 0, fe0a4ba8, ffffffff, fe0e8284, 6)
fe040038 ???????? (0, 1, fe0b579c, a8350, fe0eb298, 0)
fd499d98 ???????? (1, fd53ad22, e1d7f668, fd56f8a2, fd56f83a, 14)
fd37d35c ???????? (e1d7f678, fd5d8b3c, fd53aaec, fd546bb3, fd53ab90, fd546b70)
fd2f6fa4 ???????? (8f, 5000, 0, ff000000, 0, 48a284)
fd2c0188 ???????? (8f, fd5c364c, 20361e8, e1d7f590, e1d7f568, 1)
fd83e174 ???????? (203627c, e1d7f918, 8f, ffffffff, f7c162e4, 0)
f7c0b96c ???????? (e1d7f994, b8, 0, f7c162a0, 0, e1d7f898)
f7c05804 ???????? (e1d7fa2c, b8, 0, f7c16298, 4, e1d7f930)
f7c05804 ???????? (e1d7faac, f38b3ba0, 0, f7c16298, 4, e1d7f9c8)
f7c05a8c ???????? (e1d7fb24, f38212b8, 0, f7c16420, 8, e1d7fa48)
f7c05a8c ???????? (e1d7fb9c, 0, 0, f7c163d0, 4, e1d7fac8)
f7c0010c ???????? (e1d7fc28, e1d7fe90, a, f3821ca0, 4, e1d7fb40)
fd15bcf8 ???????? (e1d7fe88, e1d7fcf0, e1d7fda8, 20361e8, 20361e8, e1d7fd00)
fd24a3e4 ???????? (fd582000, ab6910, e1d7fd9c, e1d7fd98, e1d7fda8, 20361e8)
fd25d5a8 ???????? (e1d7fe88, e1d7fe84, e1d7fe7c, e1d7fe74, e1d7fe6c, 20361e8)
fd26e8f8 ???????? (20361e8, 20361e8, 309c8, ab6910, 31a08c, fd267ed8)
fd267f00 ???????? (20361e8, 4c, 7f, 0, 7f, 1)
fd2643e0 ???????? (20361e8, e1d80000, 0, 0, fd2642ac, 1)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 25 --------------------------------
fe0c0e70 ???????? (e1cfbc88, 1, e1cfbc08, 0, 0, 1388)
fe05cf48 ???????? (e1cfbc88, 1, 1388, 10624c00, 0, 0)
fedd8534 ???????? (e1cfbcf4, 1, e1cfbd24, e1cfbc88, 20, ffffffff)
fedd9dd8 ???????? (30748, e1cfbe58, ffffffff, 12, 0, ffffffff)
ff22a3ac ???????? (f42e8, e1cfbe58, ffffffff, ff000000, 0, 0)
ff220fc0 ???????? (108de50, 7, 8, 0, 1000, ffffe800)
ff106d68 ???????? (108de50, 78f110, 0, 0, 0, 1)
fedddf2c ???????? (78f110, ff106d44, 400, fedf6a98, 0, fedf87dc)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)
----------------- lwp# 26 --------------------------------
fe0c0144 ???????? (262a0, 498f8, e1bfbd28, 1, 0, 0)
fe0ba1d4 ???????? (262a0, 498f8, e1bfbd28, 0, 0, 0)
fe0ba64c ???????? (262a0, 498f8, e1bfbd28, 0, 0, 0)
fe0ba7e4 ???????? (262a0, 498f8, e1bfbeb8, ff000000, 0, 0)
fe0ba8d8 ???????? (262a0, 498f8, e1bfbeb8, 0, 0, c350)
fe0ba918 ???????? (262a0, 498f8, e1bfbeb8, 45d7155d, 0, 3618adb8)
fedd79fc ???????? (26298, 2, 78faa0, 0, 3618adb8, 0)
ff23b82c ???????? (2e58, 0, 0, ff2ef26c, ff2ef274, ff2ef260)
fedddf2c ???????? (78faa0, ff23b498, 400, fedf6a98, 0, fedf87dc)
fe0c00a0 ???????? (0, 0, 0, 0, 0, 0)Unfortunately, we can't tell much from that pstack output because it doesn't include symbols:pstack: warning: librtld_db failed to initialize; symbols from shared libraries will not be availableI don't know pstack couldn't initialize librtld_db. How big is the core file? Is it possible that it was truncated due to a lack of disk space or ulimit? Did you run pstack on the same system that generated the core file?
While I don't remember seeing a bug like this before, have you tried applying the latest service pack? For Web Server 6.1, that's 6.1SP7. Service packs contain important bug fixes. -
Need to make periodic request to App Server from NSAPI SAF
I have to send a keep alive ping to a existing Session on our app server from a NSAPI SAF on IWS6.
First, is making a direct socket call the best way to handle it or is there another suggestion for sending the request.
Second, if using the direct socket connection is the way to go do I need to use the net_* methods within the NSAPI code or can I use native socket code.
Third, will there be any issues with making this type of socket call from a spawned thread, and can I use the native threads on Sun Solarias.
Some code examples would be very helpful since I can't find much at all on the site.NSAPI doesn't expose any infrastructure for managing outbound connections, and the list of supported net_* functions does not include socket, bind, or connect analogs. You are probably best off using native socket code.
On Solaris, you can create your thread using the NSAPI systhread_create function or the Solaris pthread_create or thr_create functions. Note that you should not call NSAPI functions from a thread you create yourself unless you first call the NSAPI prepare_nsapi_thread function. -
Imgaes redirection in Iplanet 6.1 SP4
Hi all,
We have a webapp with iPlanet 6 and Weblogic 8.1. The entire application is deployed on Weblogic, while the iPlanet is just a Web Server directing all requests to the Weblogic server.
The iPlanet is configured to use the domain www.some_company.com/ebill and that was configured as the context in the Weblogic.
The issue we have is with static URLs in the JSP pages like �/images/a.jpg� or �../images/b.jpg� are not displayed when running under this URL context. Only when the iPlanet and Weblogic are configured to use the root context "/" they are displayed.
Also, when changing the application code to use �images/a.jpg� without the �/� in the beginning the images are being presented. However, I would like get an opinion if it is possible to solve this via iPlanet configuration and not thru code changes.
My obj.conf is attached below. Please advise.
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="redirect" from="/hostname:8443/ebill/loginPage.jsp" url="http://www.some_company.com:8443/loginPage.jsp"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/app/hostname/iplanet/ns-icons" name="es-internal"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="unix-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log" name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object name="ebill" ppath="*/ebill/*">
Service fn="wl_proxy" WebLogicHost="app_hostname" WebLogicPort="8080"
</Object>We have changed default thin driver to 920 from 817 in 610sp4. If you are using 817
dbserver, please put 817 classes12.zip in your classpath before weblogic.jar and you will
be ok.
Mitesh
Harish SK wrote:
Our application used to update a NUMBER(15) column in Oracle with current time
in milliseconds.
After migrating from SP3 to SP4 I observed that ORA-01438 was being thrown during
the update intermittently.
Increasing the size to default NUMBER, I observed that the values getting inserted
are sometime random like 59, 81 digits long!
The update code just does a prepared statement and does setObject of a java.lang.Long.
I am using the oracle thin driver in oracle's classes12.zip.
I am sure that this is happening since using SP4, have anyone faced similar problems? -
Create NSAPI SAF plug-in equivalent to check-request-limits
Hi Masters,
GoodDay. Okay, here's the problem:
I'm a newbie in writing a custom SAF's, & what I'd like to do is to write a SAF which is closer to this one:
+PathCheck fn="check-request-limits" monitor="$ip" max-rps="10" specifically the check-request-limits fn.+
I believe source code of the server is not available so the question is:
How can I get total request of a specific client in a given time (secs for example) [ip->TOTAL_REQUEST_IN_1_SEC]?
char *ip = pblock_findval("ip", sn->client);
//NEED HELP HERE
if (ip->TOTAL_REQUEST_IN_1_SEC < 10 ) {
//my logic goes here
}Any help would do! Thanks in advance!Source code is out. Check this thread :
Announcing Open Web Server [http://forums.sun.com/thread.jspa?forumID=759&threadID=5360537|http://forums.sun.com/thread.jspa?forumID=759&threadID=5360537] -
WLS 6.1 SP2 NSAPI and iPlanet (Sun One) issues
Hi. I am going nuts with this NSAPI issue. I am working in a Solaris 8 environment,
WLS 6.1 SP2 and iPlanet (Sun One)and NSAPI. I can get everything to work fine
and dandy in aniPlanet 4.1 environment. I can not get it to work in an Iplanet
(Sun One) 6.x environment. It appears that some things work differently between
the versions of iPlanet (ie. things contained in magnus.conf and/or obj.conf).
I have tried moving things, removing things, adding things and nothing seems
to work....it's almost as though the NSAPI, etc. are being ignored.
I've attached my magnus.conf and obj.conf files (I cut and pasted them into a
single file so I could upload it). Can anyone help me out here...I've been working
for weeks on this and can't seem to get any answers.
Thanks!
Doug
P.S. For security purpses I changed the first part of the IP add. in the files
to 1234567, etc.
Thanks
[conf_files.txt]Hi Doug
U have to put the following section
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib="./libproxy.so"
Init fn="wl_init"
into magus.conf
and put the rest into obj.conf
Best Regards
Alex
"Doug E" <[email protected]> wrote:
>
Does anybody know of a good reference document on how to properly install
the NSAPI
plug-in for WLS6.1 & iPlanet6(SunOne) on Unix (Solaris). Many of the references
that
I have been finding are either incomplete, have typo's and are mostly Windows
oriented
(ie. with the .dll's, paths, examples, etc.)
My problem is that our old iPlanet 4.x works fine...everything proxies,
etc. iPlanet
6 just doesn't want to seem to communicate with WLS 6.1 SP2 We tried many
of the
saem things from the 4.x magnus & obj.confs...but things look somewhat different
in iPlanet 6.x (did they move tings..such as the fn's from one to the other,
etc.)
If so..and there are big differences in installing iPlanet 4.x vs. 6.x
then many
of the docs out there are inaccurate. Does anyone know if there is a newer
version
of the NSAPI plug-in for Unix.
I would love to see a basic, working set of magnus.conf obj.conf, MIME,etc
from someone
who has actually gotten NSAPI to work between WLS 6.1 and iPlanet 6 on Unix
(Solaris)
It blows my mind that 4.x works and 6.x doesn't. An updated NSAPI plug-in
, if it exists and perhaps fixes the problem, would make my day. Any ideas?
Thanks!
-Doug -
Iplanet portal sp4 ?? still no docs and software ?
Thank you for registering for the iPlanet Portal Server SP4 webcast scheduled for February 7, 2002.
This webcast event has been RESCHEDULED for:
Thursday, February 14, 2002 at 10:ooam PST.
We apologize for the technical difficulties you may have encountered during the webcast
Archive
Available within 5-7 days of live broadcast
it's now over 2 weeks when will it be available ??SP4 is expected to be released by this month. We are eager as well.
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support -
Solaris + iPlanet 6.0SP2 + PHP 5.1.2 + Instant Client
Configuration:
Solaris OS 5.8 (64bit)
iPlanet 6.0 (SP2) (32bit)
PHP v5.1.2 (32bit)
Instant Client 10.2.0.1 (32 bit)
I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
==========================
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
[09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
[09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
[09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] info (17408): Installing a new configuration
[09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
=======================================
If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
I would very much appreciate if any one has any ideas to pass thru this
Thanks
VijayConfiguration:
Solaris OS 5.8 (64bit)
iPlanet 6.0 (SP2) (32bit)
PHP v5.1.2 (32bit)
Instant Client 10.2.0.1 (32 bit)
I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
==========================
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
[09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
[09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
[09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] info (17408): Installing a new configuration
[09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
=======================================
If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
I would very much appreciate if any one has any ideas to pass thru this
Thanks
Vijay -
I got a big problem that iPlanet 6.0 SP2
Hi,
I got a big problem that iPlanet 6.0 SP2 is in cycle of restart.
The web server's error logs is the following:
[16/Jul/2002:00:30:05] info ( 8545): successful server startup
[16/Jul/2002:00:30:05] info ( 8545): iPlanet-WebServer-Enterprise/6.0SP2 B11/13/2001 00:49
[16/Jul/2002:00:30:09] info ( 8599): Installing a new configuration
[16/Jul/2002:00:30:09] info ( 8599): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
[16/Jul/2002:00:30:09] failure ( 8599): Error accepting connection -5928, oserr=130 (Connect aborted)
[16/Jul/2002:00:30:09] info ( 8599): A new configuration was successfully installed
[16/Jul/2002:00:38:14] failure ( 8545): Child process admin thread is shutting down
[16/Jul/2002:00:38:16] info ( 9053): Installing a new configuration
[16/Jul/2002:00:38:16] info ( 9053): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
[16/Jul/2002:00:38:16] info ( 9053): A new configuration was successfully installed
[16/Jul/2002:00:38:16] failure ( 9053): Error accepting connection -5928, oserr=130 (Connect aborted)
[16/Jul/2002:00:46:04] failure ( 8545): Child process admin thread is shutting down
[16/Jul/2002:00:46:05] info ( 9496): Installing a new configuration
[16/Jul/2002:00:46:05] info ( 9496): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
[16/Jul/2002:00:46:05] failure ( 9496): Error accepting connection -5928, oserr=130 (Connect aborted)
[16/Jul/2002:00:46:05] info ( 9496): A new configuration was successfully installed
[16/Jul/2002:02:43:31] failure (15596): Child process admin thread is shutting down
[16/Jul/2002:02:43:32] info (16212): Installing a new configuration
[16/Jul/2002:02:43:32] info (16212): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
[16/Jul/2002:02:43:32] info (16212): A new configuration was successfully installed
[16/Jul/2002:02:43:32] failure (16212): Error accepting connection -5928, oserr=130 (Connect aborted)
You can see child process is shutdown and restart it.
I don't know what's problem is.
And other problem is the following:
[16/Jul/2002:16:10:25] catastrophe (23966): Server crash detected (signal SIGBUS)
[16/Jul/2002:16:10:25] info (23966): Crash occurred in NSAPI SAF NSServletService
[16/Jul/2002:16:10:25] info (23966): Crash occurred in function direct_identityHashCode from module /usr/java1.2/jre/lib/sparc/libjvm.so
[16/Jul/2002:16:10:25] failure (23454): Child process admin thread is shutting down
[16/Jul/2002:16:10:26] info (24006): Installing a new configuration
[16/Jul/2002:16:10:26] info (24006): [LS ls1] http://xxx.xxx.xxx.xxx, port 80 ready to accept requests
[16/Jul/2002:16:10:26] failure (24006): Error accepting connection -5928, oserr=130 (Connect aborted)
FYI, here is our environment:
# /usr/java1.2/bin/java -version
java version "1.2.2" Solaris VM (build Solaris_JDK_1.2.2_07, native threads, sunwjit)
# uname -a
SunOS wagency2 5.6 Generic_105181-31 sun4u sparc SUNW,Ultra-4
Sun Enterprise 450 (2 X UltraSPARC-II 400 Mhz, 2G Memory
If you have any solution and experience, please let me know.
Thanks,
Barney Kim
[email protected]Barney,
from the error log the problem seems to be related to the use of an external JDK. Try reverting back to the original JRE. See if that helps, i.e., the server starts up fine. Use the administration GUI and select Global Settings > Configure JRE/JDK Paths. On the screen that appears, you can configure the path to the JRE. The default would be <server-root>/bin/https/jre.
If that works fine, you might download a more recent version of the JDK. iWS 6 SP2 supports JDK 1.3.1.
Hope this helps.
Best regards
Rodrigo -
IPlanet web server crash 6.0SP5
Hi all,
I am getting the following errors in iPlanet web server
Platform details: Sun solaris, SPARC, 8, iPlanet 6.0 SP5
Pls let me know how to fix this porblem
Error details
Error 1:
catastrophe ( 7455): Server crash detected (signal SIGSEGV)
info ( 7455): Crash occurred in NSAPI SAF validate_session_policy
info ( 7455): Crash occurred in function xmlFreeNodeList from module /opt/SUNWam/lib/libxml2.so.2
failure ( 7454): Child process admin thread is shutting down
Error 2:
catastrophe ( 529): Server crash detected (signal SIGBUS)
info ( 529): Crash occurred in NSAPI SAF validate_session_policy
info ( 529): Crash occurred in function xmlFreeProp from module /opt/SUNWam/lib/libxml2.so.2
failure ( 522): Child process admin thread is shutting down
Error 3:
catastrophe (13576): Server crash detected (signal SIGILL)
info (13576): Crash occurred in NSAPI SAF NSServletService
failure (29922): Child process admin thread is shutting down
Error 4:
catastrophe (11097): Server crash detected (signal SIGSEGV)
info (11097): Crash occurred in function __0fLPollManagerNAddConnectionR6KConnectionUi from module /app/iws605/bin/https/lib/libns-httpd40.so
Error 5
catastrophe (27403): Server crash detected (signal SIGSEGV)
info (27403): Crash occurred in NSAPI SAF NSServletService
info (27403): Crash occurred in function memset from module /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1Hi
I am also getting the following error.
Jawwad ,Can you please let me know did your problem got solved , what was the solution
Any help will be highly appreciated
[26/Apr/2004:09:09:04] failure ( 5958): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.la
ng.OutOfMemoryError
[26/Apr/2004:09:09:07] failure ( 5958): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.la
ng.OutOfMemoryError
[26/Apr/2004:09:09:14] catastrophe ( 5958): Server crash detected (signal SIGSEGV)
[26/Apr/2004:09:09:14] info ( 5958): Crash occurred in function __0fLPollManagerNAddConnectionR6KConnectionUi from module /opt/app/bstwkwww/
iplanet60/bin/https/lib/libns-httpd40.so
Thanks and regards
Shikhar -
I am using Iplanet 4.1 SP9 on Solaris 2.7. I need the add-header SAF in obj.conf to add P3P headers for my website.
The documentation says I can use a file (html) to publish additional headers. I have tried:
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA OTC"
in a file called p3pheader.html and I have added the following line in the default object in obj.con:
Service fn="add-header" path="/export/home/enter_4.1/docs/dev/w3c/p3pheader.html" NSIntAbsFilePath="yes"
Iplanet returns the following error:
[23/nbre/2001:16:46:24] config ( 5326): for host 141.126.5.15 trying to GET /SME/frameset.html, pcheck_add_header reports: No header specified
Any help ?The addition of HTTP headers is conspicuously missing from the standard
directives. The add-header function simply adds HTML to the top of a
page. You'll need to use a custom SAF for HTTP headers. For example
you could compile this one:
* NSAPI SAF to add a HTTP header to the server response.
* Returns REQ_NOACTION so request is processed as normal.
* Init fn="load-modules" shlib="/libAddHttpHeader.so" funcs="add-http-header"
* Service fn="add-http-header" name="P3P" value="CP=\"NOI DEVa TAIa OUR BUS
UNI STA OTC\""
#include "nsapi.h"
NSAPI_PUBLIC int add_http_header(pblock pb, Session sn, Request *rq)
char *name = pblock_findval("name",pb);
char *value = pblock_findval("value",pb);
if (name && value){
param_free(pblock_remove(name, rq->srvhdrs));
pblock_nvinsert(name, value, rq->srvhdrs);
return (REQ_NOACTION);
Jose Niguidula wrote:
I am using Iplanet 4.1 SP9 on Solaris 2.7. I need the add-header SAF
in obj.conf to add P3P headers for my website.
The documentation says I can use a file (html) to publish additional
headers. I have tried:
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA OTC"
in a file called p3pheader.html and I have added the following line in
the default object in obj.con:
Service fn="add-header"
path="/export/home/enter_4.1/docs/dev/w3c/p3pheader.html"
NSIntAbsFilePath="yes"
Iplanet returns the following error:
[23/nbre/2001:16:46:24] config ( 5326): for host 141.126.5.15 trying
to GET /SME/frameset.html, pcheck_add_header reports: No header
specified
Any help ? -
Web Svr 6.1 SP4 App Svr 8.1 integration service-passthrough Working example
This is a verbatim example from a working installation.
Pathnames etc will differ from this example.
This is an example of the integration of SUN Java System Web Server 6.1 SP 4 and
SUN Java System Application Server 8.1 2005Q1.
The scope of this integration is successfully accessing a working application
hosted on the application server by making HTTP requests to the web server.
Download and install the "Reverse Proxy Plug-in"
The "Sun Java System Web Server 6.1 Add-Ons" download from sun.com
includes the libpassthrough.so shared object.
libpassthrough.so includes the required passthrough Server Application Function(s) (SAF).
The output of the strings command on libpassthrough.so followed by a
grep for passthrough will list the available Server Application Function(s).
strings libpassthrough.so | grep -i passthrough
magnus.conf file edits.
/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/config/magnus.conf
Add this line.
Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/plugins/passthrough/libpassthrough.so"
obj.conf edits.
NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
Position of the NameTrans directive is significant.
The NameTrans directives are sequentially searched until a match is found.
One and only one NameTrans directive is utilized for the
NameTrans stage of each HTTP request.
My configuration had this directive as the first NameTrans directive of the obj.conf file.
<Object name="passthrough">
Service fn="service-passthrough" servers="http://192.168.1.199:8080"
</Object>
Once a NameTrans match is found the corresponding Object
within the obj.conf file is utilized.
In this example the name attribute of the NameTrans directive corresponds
to the name attribute of the Object.
The Service directive invokes the service-passthrough Server Application Function (SAF)
of the libpassthrough.so.
The servers argument is passed to the service-passthrough function.
HTTP requests made directly to the application server where the application is hosted
are sussessful. Note the 8080 port in the URL.
http://localhost:8080/pwc/PWCUnprotected
HTTP requests made to the WebServer are successful as well.
The requests are "passed through" between the Web Server
and the Application Server.
http://localhost:80/pwc/PWCUnprotected
http://localhost/pwc/PWCUnprotected
LOG FILES
success note 200 HTTP status code
failure note XXX in URL and 404 HTTP status code
Web Server
/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/access
127.0.0.1 - - [08/May/2005:23:53:51 -0500] "GET /pwc/PWCUnprotected HTTP/1.1" 200 185
127.0.0.1 - 09/May/2005:00:02:34 -0500 GET /pwc/PWCUnprotectedXXX HTTP/1.1 404 1003
Application Server
/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/access/server_access_log
192.168.1.199 - 08/May/2005:23:53:51 -0500 GET /pwc/PWCUnprotected HTTP/1.1 200 185
127.0.0.1 - 09/May/2005:00:02:34 -0500 GET /pwc/PWCUnprotectedXXX HTTP/1.1 404 1003
The log files illustrate the NameTrans wild card behavior
NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
All requests of the pwc context are passed on to the application server from the
web server as expected.
A nominal start of the server from the Web Server Manager yields the following output.
magnus.conf, obj.conf edit/configuration errors may be seen here.
Status:
[https-menfi.houston.rr.com]: Sun ONE Web Server 6.1SP4 B12/16/2004 11:42
[https-menfi.houston.rr.com]: info: PASS1000: Sun ONE Web Server 6.1SP4 Reverse Proxy Plugin B10/14/2004 13:18
[https-menfi.houston.rr.com]: info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_01] from [Sun Microsystems Inc.]
[https-menfi.houston.rr.com]: info: WEB0100: Loading web module in virtual server [https-menfi.houston.rr.com] at [simple]
[https-menfi.houston.rr.com]: info: WEB0100: Loading web module in virtual server [https-menfi.houston.rr.com] at [search]
[https-menfi.houston.rr.com]: info: HTTP3072: [LS ls1] http://menfi.houston.rr.com:80 ready to accept requests
[https-menfi.houston.rr.com]: startup: server started successfully
Success!
The server https-menfi.houston.rr.com has started up.
The Release Notes for Sun Java System Web Server 6.1 Add-Ons Reverse Proxy Plugin
http://docs.sun.com/source/819-0902-05/rpp61.html
are well complemented by -
Sun Java System Web Server 6.1 SP4 Administrator's Configuration File Reference
http://docs.sun.com/app/docs/doc/817-6248
Sun Java System Web Server 6.1 SP4 NSAPI Programmer's Guide
http://docs.sun.com/app/docs/doc/817-6252
Files from the working installation.
magnus.conf
# The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED.
# They will not be supported in future releases of the Web Server.
NetsiteRoot /export/home/accesmanagerinstalldir/opt/SUNWwbsvr
ServerName menfi.houston.rr.com
ServerID https-menfi.houston.rr.com
RqThrottle 128
DNS off
Security off
PidLog /export/home/accesmanagerinstalldir/opt/SUNWwbsvr/https-menfi.houston.rr.com/logs/pid
User webservd
StackSize 131072
TempDir /tmp/https-menfi.houston.rr.com-25a6f9e8
Init fn=flex-init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"
Init fn="load-modules" shlib="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/plugins/passthrough/libpassthrough.so"
obj.conf
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="/pwc(|/*)" name="passthrough"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn=pfx2dir from=/mc-icons dir="/export/home/accesmanagerinstalldir/opt/SUNWwbsvr/ns-icons" name="es-internal"
NameTrans fn=document-root root="$docroot"
PathCheck fn=unix-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.html,home.html,index.jsp"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
Service method=TRACE fn=service-trace
Error fn="error-j2ee"
AddLog fn=flex-log name="access"
</Object>
<Object name="passthrough">
Service fn="service-passthrough" servers="http://192.168.1.199:8080"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>Thanks ur post helpme lot
Thanks again
madhu -
Problems between iPlanet and Weblogic
Hi guys, I'm having a problem, we I try to access the application through the iPlanet. The iPlanet crash and it restarts again.
I got this message on the errors log of the iPlanet
[17/Sep/2009:11:42:48] catastrophe (14873): CORE3260: Server crash detected (signal SIGSEGV)
[17/Sep/2009:11:42:48] info (14873): CORE3261: Crash occurred in NSAPI SAF wl-proxy
[17/Sep/2009:11:42:48] info (14873): CORE3262: Crash occurred in function INTcrit_enter from module /opt/iplanet/bin/https/lib/libns-httpd40.so
[17/Sep/2009:11:42:48] failure (14819): CORE3107: Child process closed admin channel
[17/Sep/2009:11:42:48] fine (14819): CORE3061: signal_handler_thread: received signal 18
[17/Sep/2009:11:42:48] fine (14819): CORE3049: Primordial process detected child 14873 died: status 11
[17/Sep/2009:11:42:48] fine (14819): CORE3050: Is our child, will spawn replacement
[17/Sep/2009:11:42:48] fine (14819): CORE3062: Unlinking of /tmp/https-emergo2.cert.sabre.com.443-3b90a480/.cgistub_14873 returned -1
I can add the the iplanet we are using is the 6.1sp5 and the weblogic is the version 9. everything is working on sun 9.
I'm going to appreciate any help.
ThanksDid you get SSL authentication on iPlanet AND forwarding this to WLS
working?
We can do certificate based authentication on iPlanet and the plugin
forwards this to WLS (6.0sp1). WLS does not do anything with it.
Thanks,
Ronald
Vlatas wrote:
The trusted CA file holds the root CA certificates that will be trusted by
the proxy plugin. So if your
App server has CertA from Verisign, and CertA was issued by a Verisign CA
certificate, then you
want to have the Verisign CA certificate in the trusted CA file for the
proxy plugin.
Also, look in /tmp/wlproxy.log, errors should be getting logged in there
that will help determine the
problem.
Tony
"caris" <[email protected]> wrote in message
news:3b0dbfb4$[email protected]..
I'm using WebLogic 6.0 and iPlanet 4.1 for my application.
I've got certificate from Versign for WebLogic and tested it well for
standalone
App Server.
However, when I use iPlanet for proxy, the page doesn't display at all.
Here is
my config statement for iPlanet
<Object name="weblogic" ppath="*/*">Service fn=wl-proxy
WebLogicHost=localhost
WebLogicPort=7002 SecureProxy=ON
TrustedCAFile="c:/bea/wlserver6.0sp1/config/mydomain/getcacert.cer"</Object>
Am I get it right? And I wonder what should it be put in the field
"TrustedCAFile"
By the way, I've got the certificate for the iPlanet Web Server too.
It works fine for iPlanet with SSL pointing to the WebLogic port 7001.
However it can't work at all when I pointing to the port 7002..
Thanks for any ppl who can help me..
Maybe you are looking for
-
Access Migration Error Creating Migration Project - string literal too long
I get this error when attempting to create an MS Access Migration Project: ORA-20001: GET_BLOCK Error. ORA-20001: GET_STMT error. ORA-20001: Execution of the statement was unsuccessful. ORA-06550: line 8, column 8: PLS-00172: string literal too long
-
I have f110 automatic payment program promblem
hi i m one invice enter 14.08.2007 and i m also want to payment this day it is possible or not..i m paymnet terms use for 0002 std.i have some error display Job log overview for job: F110-20070810-MH -X / 18163801 Date Time Message text Message
-
Creating a Video Podcast in Soundtrack Pro
sorry, posted this in the wrong place
-
PocketMac for BlackBerry​: (error 1); skipping
Hi to all, i don't know well english, anyway i got using Pocketmac, at half of sync it's blocked and return a message error:Unable to connect to BlackBerry (error 1); skipping. As you can see it seems cannot find device, i founded a lot of post w
-
Invoke Webservice from ODI -10
Hi, Need to invoke a web service through ODI 10.1.3.5, I know this is possible in 11g. Can we do it from 10 too. Regards, Naveen