Apache in front of WLS in a cluster

          hi all,
          I have some doubts about apache and wls in a cluster. We have 2 Apache server
          (installed on 2 different hosts) in front
          of a clustered WLS 6.1. Now my doubt is: who will take care of authentication,
          Apache or WLS?
          In other words as the 2 instances of Apache don't know about each other (they
          are chosen with DNS-round robin), will the
          authentication be done twice? or it's possible to handle authentication on the
          application
          server rather ? if so, where the Cookie that identifies the session will be kept?
          Tanks a lot
          Francesco
          

It all depends on what you mean by authentication and how you configure each
          node.
          If you mean authentication re:SSL, then apache.
          If you have ACL's defined in Apache, then Apache will, but this is http
          basic auth, no cookies.
          If you have security defined in WLS or are using session's in WLS, then
          cookies will be set and passed from WLS all the way back to the client and
          then when a new request is made the cookie will be passed from the client to
          apache and back to wls.
          Cheers
          mbg
          "Francesco" <[email protected]> wrote in message
          news:[email protected]..
          >
          > hi all,
          > I have some doubts about apache and wls in a cluster. We have 2 Apache
          server
          >
          > (installed on 2 different hosts) in front
          > of a clustered WLS 6.1. Now my doubt is: who will take care of
          authentication,
          > Apache or WLS?
          > In other words as the 2 instances of Apache don't know about each other
          (they
          > are chosen with DNS-round robin), will the
          > authentication be done twice? or it's possible to handle authentication on
          the
          > application
          > server rather ? if so, where the Cookie that identifies the session will
          be kept?
          >
          > Tanks a lot
          > Francesco
          

Similar Messages

  • Apache 2.0.35 httpd.conf issue with Win2k WLS 6.1sp2 Cluster

    Hi,
              Anybody has a Win2K Apache 2.0.35 httpd.conf that works
              with a WLS 6.1sp2 Cluster?
              I am getting errors like
              "..Cannot load D:/Apache2.0.35/Apache2/modules/mod_wl_20.so into server: The
              specified procedure could not be found."
              Thanks,
              -ad
              

    you should post this question plugin newsgroup.
              I will ask one of our plugin engineer to get back to you...
              Kumar
              Toly Dedes wrote:
              > Hi,
              > Anybody has a Win2K Apache 2.0.35 httpd.conf that works
              > with a WLS 6.1sp2 Cluster?
              > I am getting errors like
              > "..Cannot load D:/Apache2.0.35/Apache2/modules/mod_wl_20.so into server: The
              > specified procedure could not be found."
              >
              > Thanks,
              > -ad
              >
              >
              >
              

  • Help about W2K Apache plug-in for WLS

    Hi,everybody.
    I want to use the W2K apache http server for redirect the dynamic request to
    WLS. But i don't have the corresponding plug-in. Who can help me? or Who can
    give me some hint about this?
    Thanks in advance.
    BR
    Steven Zhao

    Hi Steven,
    as far as I know there is no Apache Plugin for Windows Platform. Your
    choice is either Unix->Apache or Windows->IIS. I think there is a
    Netscape Plugin as well, but I don't know for which platforms.
    Daniel
    -----Original Message-----
    From: Steven Zhao [mailto:[email protected]]
    Posted At: Friday, October 20, 2000 6:02 AM
    Posted To: management
    Conversation: Help about W2K Apache plug-in for WLS
    Subject: Help about W2K Apache plug-in for WLS
    Hi,everybody.
    I want to use the W2K apache http server for redirect the dynamic
    request to
    WLS. But i don't have the corresponding plug-in. Who can help me? or Who
    can
    give me some hint about this?
    Thanks in advance.
    BR
    Steven Zhao

  • Apache in front of OC4J?  AJP13?

    Hello,
    I need to place OC4J behind Apache.
    I have a working Apache setup that talks to JBoss/Jetty via AJP13 on port 8009. How can I configure OC4J to listed to some port and listen for AJP13 requests?
    Does OC4J come with its own protocol and Apache module?
    When I start OC4J and use `nmap' to check which ports OC4J is listening, I only see port 8888, which is OC4J's internal HTTP server. I want to put Apache in front instead.
    I couldn't find any documentation about this, so any help would be great.
    Thanks,
    Otis

    For 9.0 PE you can also use the apache mod_jk plugin to have an apache in front of Glassfish/9.0PE. Google around for mod_jk and glassfish and you should find some blogs about it.

  • JNDI Provider for wls 5.1 cluster

    hi,
              how can I specify a JNDI provider URL for a WLS 5.1 cluster where the
              cluster nodes are different machines ? Is there a way to specify the
              URL without using a single servers IP address ?
              thx
              johannes
              

    [att1.html]
              

  • Problem configuring front end host for weblogic cluster

    hi,
    I am using weblogic 8 sp4,I have a cluster of WLI servers for which i am trying to configure a front end host.I am using apache Http server 2.0.55 for the same.
    I copied the mod_wl_20.so file to the modules directory and added the following to httpd.conf file
    LoadModule weblogic_module modules/mod_wl_20.so
    <IfModule mod_weblogic.c>
    WebLogic http://myIP:9191,http://myIP:9192,http://myIP:9193
    ErrorPage http://myerrorpage1.mydomain.com/
    MatchExpression *.jsp
    MatchExpression *.xyz
    </IfModule>
    <Location /weblogic>
    SetHandler weblogic-handler
    PathTrim /weblogic
    </Location>
    however,the error page gets displayed and not the default weblogic page.
    When I change the Error page url to that of my cluster url(i.e)http://myIP:9191, the weblogic default page gets displayed .. I mean to say that the same url doesnot work with the WeblogicCluster parameter but works with
    the ErrorPage parameter.
    Somebody who has configured the front end host using apache http server please clarify, it would be of great help.
    Thanks in advance

    The error.log displays the following (sorry i forgot to add it above :-()
    [Thu Nov 24 15:46:40 2005] [notice] Apache/2.0.55 (Unix) configured -- resuming normal operations
    [Thu Nov 24 15:46:56 2005] [error] Port number specified in WebLogicCluster parameter specified in httpd.conf is not an integer less than 65535
    [Thu Nov 24 15:46:56 2005] [error] CONFIG_ERROR [line 1344 of ap_proxy.cpp]: Port number specified in WebLogicCluster parameter specified in httpd.conf is not an integer less than 65535

  • Is a web server plug-in required between Apache 2.2 and WLS 10.3.5

    I am using Fusion Middleware 11g PS4 (11.1.1.5) at a new client and they currently are using Apache 2.2 for their web clients. The detailed question that I cannot answer is... Why do I need the web server plug-in mod_wl_22.so to be installed? I've read the docs that state how to install and configure and I have done this before without question. But, is this module really needed to send requests to weblogic server?
    Does anyone know the detailed answer to this? What is the mod_wl_22.so really doing?
    My client is very web savvy and is wondering if the web server can be set up to front-end weblogic server without this.
    The environment is a 2 node cluster with SOA suite as the main component. I have a soa_cluster, bam_cluster, wsp-pm_cluster and Admin Server installed on both of these nodes.
    Any help is appreciated.
    Thanks,

    I found this link to a .pdf that I believe explains the difference between OHS and Apache and what the web server plug-ins do. See this link:
    http://www.oracle.com/technetwork/middleware/ias/ohs11gr1-131852.pdf

  • WLS 8.1 cluster startup scripts

    Hi all,
    I'm new to WebLogic and so am stumped by a configuration issue that should be normally be simple. I'm running WebLogic Server 8.1 SP6 on a Linux server and the Sun 1.4.2 JVM. A single cluster with 3 managed servers is set up, all servers being on the same machine.
    I'm trying to get the JProfiler 4.3 agent running on one of these servers to investigate a memory leak issue. Using the WLS administration console (TestDomain > Clusters > TestCluster > TestServer1 > Configuration > RemoteStart), I have changed the server's startup arguments to add "-Xrunjprofiler" and "-Xbootclasspath".
    For now I'm getting a "Error occurred during initialization of VM Could not find -Xrun library: libjprofiler.so" message when I start the server using the admin console. To solve this I need to modify the LD_LIBRARY_PATH for this particular server to include this library's dynamic dependencies.
    The current question is: where should I be making these changes? I thought that the setEnv.sh, startManagedWebLogic.sh and startWebLogic.sh scripts in ~/domains/TestDomain/TestServer would be executed when starting this individual server, but changing them doesn't seem to have any impact. This means that other scripts are invoked, but which ones?
    Thanks a bunch for your help.
    Cheers,
    GB
    Edited by gbilodeau at 08/13/2007 10:59 AM
    Edited by gbilodeau at 08/13/2007 10:59 AM

    Hi,
    Go through the following link and check whether you configured load balancing settings correctly or not.
    http://e-docs.bea.com/wls/docs81/cluster/load_balancing.html
    Regards
    Anilkumar kari

  • Can JMS topics and queues be clustered in a WLS 7.0 Cluster?

    We are installing a weblogic 7.0 cluster with 1 admin server and 2 managed
              node servers. Two nodes have been clustered. We are at the point where we
              need to configure JMS. Has any one implemented JMS in WLS 7 clustered
              environment? What are the things to watch out when clustering JMS? Can JMS
              topics and queues be clustered?
              TIA for any helpful hints and comments.
              Regards
              

    "Karim Ali" <[email protected]> wrote:
              >> Has any one implemented JMS in WLS 7 clustered
              >> environment?
              I'm currently working on a project with WLS 7 here at work, involving
              the implementation of BEA's JMS Cluster. So far, I really haven't had
              many hiccups.
              "Karim Ali" <[email protected]> wrote:
              >> What are the things to watch out when clustering JMS?
              At least in WLS 7, the biggest thing that stands out is the lack of
              automatic failover. Also, Message Paging -- make sure you configure
              paging high/low thresholds. Or, if you don't wish for it to occur but
              can't stop the server (very common these days with SLAs), set that
              byte/message high threshold to a very large number (correct me if I'm
              wrong, but I believe BEA recommends 2^63 -1).
              "Karim Ali" <[email protected]> wrote:
              >> Can JMS topics and queues be clustered?
              Well, since Topics and Queues are extensions of the
              javax.jms.Destination interface, the answer is: Yes!
              (SIDE NOTE: most people usually refer to them as a [JMS] "destination"
              -- it avoids a lot of conceptual baggage and plus, less typing!)
              You'll probably want to see this section of BEA's e-docs:
              http://edocs.bea.com/wls/docs70/adminguide/jms.html#config_distributed_destinations
              later,
              Brian J. Mitchell
              BEA Systems Administrator
              TRX
              Atlanta, GA
              email: [email protected]
              office: 404-327-7238
              mobile: 678-283-6530
              

  • WLS Proxy in Cluster with Firewall

    We are currently setting up a system that has a DMZ with Netscape inside
              the DMZ proxying a WLS cluster that is behind the DMZ. When a cookie
              based session is started a cookie is returned successfully, but it looks
              like the physical address versuses a firewalled(NATed) address is placed
              in the cookie. This in turn causes a failure on accessing the WLS
              server. The firewall rejects future requests due to the use of the
              physical instead of the NATed address.
              If you understand the above and can help I would appreciate it.
              Don Davis
              D3, Inc.
              

    Just wanted to let you know that everything is working with the latest patches for
              4.5.1 and 5.1.
              Thanks for the help
              Don Davis
              Prasad Peddada wrote:
              > You might have to wait for the service pack. In the mean time I can give you a one
              > of patch for testing.
              >
              > - Prasad
              >
              > Don Davis wrote:
              >
              > > Thanks for the help Prasad,
              > >
              > > I have migrated to 5.1 and set the DNSName property.
              > >
              > > I will let you know if all goes well.
              > >
              > > Don Davis
              > >
              > > Prasad Peddada wrote:
              > >
              > > > The problem has been fixed.
              > > >
              > > > Prasad Peddada wrote:
              > > >
              > > > > I assume you are using 451. WLS proxy with firewall was not behaving right.
              > > > > Either you can wait for the next service pack or contact
              > > > > [email protected] for a one of patch.
              > > > >
              > > > > Remember to set weblogic.system.DNSName in the properties file for each
              > > > > server.
              > > > >
              > > > > - Prasad
              > > > >
              > > > > Don Davis wrote:
              > > > >
              > > > > > We are currently setting up a system that has a DMZ with Netscape inside
              > > > > > the DMZ proxying a WLS cluster that is behind the DMZ. When a cookie
              > > > > > based session is started a cookie is returned successfully, but it looks
              > > > > > like the physical address versuses a firewalled(NATed) address is placed
              > > > > > in the cookie. This in turn causes a failure on accessing the WLS
              > > > > > server. The firewall rejects future requests due to the use of the
              > > > > > physical instead of the NATed address.
              > > > > >
              > > > > > If you understand the above and can help I would appreciate it.
              > > > > >
              > > > > > Don Davis
              > > > > > D3, Inc.
              

  • UOO sequencing along with WLS high availability cluster and fault tolerance

    Hi WebLogic gurus.
    My customer is currently using the following Oracle products to integrate Siebel Order Mgmt to Oracle BRM:
    * WebLogic Server 10.3.1
    * Oracle OSB 11g
    They use path service feature of a WebLogic clustered environment.
    They have configured EAI to use the UOO(Unit Of Order) Weblogic 10.3.1 feature to preserve the natural order of subsequent modifications on the same entity.
    They are going to apply UOO to a distributed queue for high availability.
    They have the following questions:
    1) When during the processing of messages having the same UOO, the end point becomes unavailable, and another node is available in order to migrate, there is a chance the UOO messages exist in the failed endpoint.
    2) During the migration of the initial endpoint, are these messages persisted?
    By persisted we mean that when other messages arrive with the same UOO in the migrated endpoint this migrated resource contains also the messages that existed before the migration?
    3) During the migration of endpoints is the client receiving error messages or not?
    I've found an entry on the WLS cluster documentation regarding fault tolerance of such solution.
    Special Considerations For Targeting a Path Service
    When the path service for a cluster is targeted to a migratable target, as a best practice, the path
    service and its custom store should be the only users of that migratable target.
    When a path service is targeted to a migratable target its provides enhanced storage of message
    unit-of-order (UOO) information for JMS distributed destinations, since the UOO information
    will be based on the entire migratable target instead of being based only on the server instance
    hosting the distributed destinations member.
    Do you have any feedback to that?
    My customer is worry about loosing UOO sequencing during migration of endpoints !!
    best regards & thanks,
    Marco

    First, if using a distributed queue the Forward Delay attribute controls the number of seconds WebLogic JMS will wait before trying to forward the messages. By default, the value is set to −1, which means that forwarding is disabled. Setting a Forward Delay is incompatible with strictly ordered message processing, including the Unit-of-Order feature.
    When using unit-of-order with distributed destinations, you should always send the messages to the distributed destination rather than to one of its members. If you are not careful, sending messages directly to a member destination may result in messages for the same unit-of-order going to more than one member destination and cause you to lose your message ordering.
    When unit-of-order messages are processed, they will be processed in strict order. While the current unit-of-order message is being processed by a message consumer, the next message in the unit-of-order will not be delivered unless it is to the same transaction or session. If no message associated with a particular unit-of-order is processing, then a message associated with that unit-of-order may go to any session that’s consuming from the message’s destination. This guarantees that all messages will be processed one at a time and in order, and any rollback or recover will not prevent ordered processing of the messages.
    The path service uses a persistent store to save the state of which member destination a particular unit-of-order is currently using. When a Path Service receives the first message for a particular unit-of-order bound for a distributed destination, it uses the normal JMS load balancing heuristics to select which member destination will handle the unit and writes that information into its persistent store. The Path Service ensures that a new UOO, or an old UOO that has no messages currently on any destination, can be enqueued anywhere in the cluster. Adding and removing member destinations will not disrupt any existing unit-of-order because the routing decision is made dynamically and those decisions are persistent.
    If the Path Service is unavailable, any requests to create new units-of-order will throw the JMSOrderException until the Path Service is available. Information about existing units-of-order are cached in the connection factory and destination servers so the Path Service availability typically will not prevent existing unit-of-order messages from being sent or processed.
    Hope this helps.

  • Apache Proxy Plugin with SSL in Weblogic Cluster

    Hi,
    I have configured a weblogic cluster and configured SSL. Then I configured the apache plugin to work with the cluster machines with non ssl and worked succesfull but when I configured the ssl communication between apache and weblogic I´m having problems.
    The actual configuration is:
    <Location /spmlws>
    SetHandler weblogic-handler
    WLLogFile /var/log/httpd/tmpweblogic1.log
    DebugConfigInfo ON
    Debug ALL
    KeepAliveEnabled ON
    KeepAliveSecs 15
    WebLogicPort 7002
    SecureProxy ON
    TrustedCAFile /opt/freeware/etc/httpd/conf/trustedCA35cert.pem
    TrustedCAFile /opt/freeware/etc/httpd/conf/trustedCA36cert.pem
    WLProxySSL ON
    RequireSSLHostMatch false
    WebLogicCluster machine35:7002,machine36:7002
    EnforceBasicConstraints false
    </Location>
    The problem is that the plugin always takes the last TrustedCAFile. In this way if machine36 is down the plugin tries to send all the request to machine35 but it takes the TrustedCAFile for the machine36 (/opt/freeware/etc/httpd/conf/trustedCA36cert.pem) hence the apache complains
    [Wed Jun 30 11:13:56 2010] [error] [client 10.19.232.249] ap_proxy: trying GET /spmlws/OIMProvisioning at backend host '10.19.232.97/7002; got exception 'WRITE_ERROR_TO_SERVER [os error=0,  line 796 of ../nsapi/URL.cpp]: '
    What can I do to have multiple TrustedCAFile or to have working the communication between apache and weblogic cluster using SSL?
    thanks in advance

    Acording to the documentation this is not possible.
    One way to achieve the load balancing of n-weblogic servers in cluster using ssl is to configure de HttpClusterServlet.

  • WLS 5.1 Cluster - Dynamic Server List

              Hi all,
              I have multiple (more than 4) servers in a cluster on a WLS5.1, Netscape web server/Proxy-plugin
              on a Solaris environment - each running on separate boxes.
              Is there a way I can dynamically (run-time) take one server out of the cluster
              (READ: Not shutting it down. Just taking it out of the cluster ONLY - it still
              needs to be up for me to do some diagnostics on that server).
              I have seen docs on doing it thru the Admin Console in WLS 6.X. What about 5.1
              Thanks in advance for your help,
              Nanjan
              

    On Unix you can also unplug the IP:port combo at the OS level ... but I
              can't remember the command.
              Peace,
              Cameron Purdy
              Tangosol Inc.
              << Tangosol Server: How Weblogic applications are customized >>
              << Download now from http://www.tangosol.com/download.jsp >>
              "Mike Reiche" <[email protected]> wrote in message
              news:3baf9a60$[email protected]..
              >
              > Physically unplug it from the netwok.
              >
              > Mike
              >
              > "Nanjan Selvaraj" <[email protected]> wrote:
              > >
              > >Hi all,
              > >
              > >I have multiple (more than 4) servers in a cluster on a WLS5.1, Netscape
              > >web server/Proxy-plugin
              > >on a Solaris environment - each running on separate boxes.
              > >
              > >Is there a way I can dynamically (run-time) take one server out of the
              > >cluster
              > >?
              > >
              > >(READ: Not shutting it down. Just taking it out of the cluster ONLY -
              > >it still
              > >needs to be up for me to do some diagnostics on that server).
              > >
              > >I have seen docs on doing it thru the Admin Console in WLS 6.X. What
              > >about 5.1
              > >?
              > >
              > >Thanks in advance for your help,
              > >Nanjan
              >
              

  • Apache Virtual Hosting and WLS 6.0 Apache plug-in

    We have a client that uses Apache and virtual hosting. We also have a
    single webapp that serves these virtual hosts/domains.
    Therefore, all of the served virtual hosts/domain has the same webapp
    directory structure ( e.g.: index.jsp, advert.jsp, css/ )
    For the above to work, we are thinking of getting the requested virtual
    hostname ( supposedly part of the HTTP header sent by the browser as the
    "Host:" parameter ) to figure out how the page will be displayed ... Does
    the Apache plug-in send this information to WLS?

    Apache plugin will forward the "Host" header to wls.
    BTW, HTTP1.0 client will not send the HOST header if I recalled properly since
    HOST header is not part of HTTP1.0 spec.
    Jesus M. Salvo Jr. <[email protected]> wrote:
    >
    We have a client that uses Apache and virtual hosting. We also have a
    single webapp that serves these virtual hosts/domains.
    Therefore, all of the served virtual hosts/domain has the same webapp
    directory structure ( e.g.: index.jsp, advert.jsp, css/ )
    For the above to work, we are thinking of getting the requested virtual
    hostname ( supposedly part of the HTTP header sent by the browser as
    the
    "Host:" parameter ) to figure out how the page will be displayed ...
    Does
    the Apache plug-in send this information to WLS?

  • HP-UX Kernel Params for WLS 6.0SP2 Cluster to Avoid java.lang.outofmemory and/or thread death

              I'm running a WLS 6.0 SP2 clustered application on HP-UX 11i. I'm seeing heap and
              thread issues on start-up or invocation of my application as I deploy EJB's and create
              DB connection pools. These are fairly trivial tasks that don't give me any issues
              when starting the first node. It's only when I invoke the second node.
              I'm pretty sure that my issue is tied to the following kernel areas:
              1. Thread allocation
              2. Heap allocation
              3. Max Processes per user
              Can anyone make some kernel recommendations that might be beneficial to my deployment?
              My app runs on NT/2000 and Sun as well, and I haven't seen these issues. I typically
              allocate 50 to 100 threads per node (3 nodes on a 4 CPU machine) and allocate about
              1GB of RAM per node on a 4GB machine...
              Regards,
              Steve
              

    I'm running a WLS 6.0 SP2 clustered application on HP-UX 11i. I'm seeing          heap and
              > thread issues on start-up or invocation of my application as I deploy
              EJB's and create
              > DB connection pools. These are fairly trivial tasks that don't give me any
              issues
              > when starting the first node. It's only when I invoke the second node.
              >
              > I'm pretty sure that my issue is tied to the following kernel areas:
              >
              > 1. Thread allocation
              > 2. Heap allocation
              > 3. Max Processes per user
              >
              > Can anyone make some kernel recommendations that might be beneficial to my
              deployment?
              > My app runs on NT/2000 and Sun as well, and I haven't seen these issues. I
              typically
              > allocate 50 to 100 threads per node (3 nodes on a 4 CPU machine) and
              allocate about
              > 1GB of RAM per node on a 4GB machine...
              HP has some kernel tuning guidelines for Java server apps on their web site,
              and BEA has some notes as well in their platform support page.
              What issues specifically are you seeing?
              Peace,
              Cameron Purdy
              Tangosol, Inc.
              Clustering Weblogic? You're either using Coherence, or you should be!
              Download a Tangosol Coherence eval today at http://www.tangosol.com/
              "Steve Feldman" <[email protected]> wrote in message
              news:3cdc046e$[email protected]..
              >
              

Maybe you are looking for

  • "Invalid column index: getValidColumnIndex" in SQL Developer 1.5.4

    The error given in the "Subject" line occurred when clicking the "Commit" button in a table grid after changing one value. I also get it when clicking the "Rollback" button, but I also get "Rollback successful" as well and when I refresh the data is

  • Ipod will not restore in disc mode

    I tried the steps listed in ipod support to unfreeze my mini. The icons shift from the apple logo, to file error, to do not disconnect. When I tried to restore it in disc mode, I got a message on my PC that said, "Can't mount ipod." Does this mean th

  • "Service battery" msg after installing ram

    Hello, I have some trouble with my macbook (6.1 with OSsl 10.6.8). I installed some RAM yesterday (up to 4GB from 2GB, 2x 2GB SODIMMS) and everything was OK. I wake up this morning and opened the lid (I didn't shut down last night) and macbook is "de

  • Approval Center - Report SSRS

    I would like to create a report (SSRS or Excel Services) that compares the data (Planned Work) of scheduling with data which send resources (Actual Work). That's what today is inadequate because it allows project managers complain that they can not s

  • ChaRM Reporting - Transport Request, Tak and Owner columns not filled

    I am using ChaRM reporting functionalities (/TMWFLOW/REPORTING transaction). When I select "display header, project, task list and transport", transport request, task and owner columns are not filled with values. What is the problem? Thanks Antonello