Configuring obj.conf

Hi,
I am working in a Solaris environment and iPlanet (Sun One).
I can get everything to work fineand dandy
in an iPlanet 4.1 environment. I can not get it to work in an Iplanet(Sun One) 6.x environment. It appears that some things work differently betweenthe versions of iPlanet (ie. things contained in magnus.conf and/or obj.conf). I have tried
moving things, removing things, adding things and nothing seemsto work....
obj.conf:
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/software/Attemp.jsp" dir="/usr/local/cigem10/jsp/Attemp.jsp"
NameTrans fn="pfx2dir" from="/software/Attemp.cab" dir="/usr/local/cigem10/jsp/SoftwareAccess.jsp"
The first and second NameTrans work correctly, but the last no.
Can anyone help me out here...I've been workingfor weeks on this and can't seem to get any answers.
Thanks

Similar Messages

Obj.conf configuration behaving differently

hi I have Sun Web Server update 8 installed which will talk to my weblogic server on which I have deployed two applications. The problem is that when I try and access one application from Sun web server it goes fine, however when I try and access the other application I will get a message "Not Found
The requested object does not exist on this server. The link you followed is either outdated, inaccurate, or the server has been instructed not to let you have it. "
To mention here, the application which I can access finally goes in to display a gif whereas the one which I am getting this error for goes on to display something like this ../manager/jsp/index.jsp
In the logs its shows a message like:
[17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: executing method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service"
[17/Sep/2010:21:16:56] warning (16244): for host 135.209.101.44 trying to GET /manager, send-file reports: HTTP4142: can't find /opt/app/p1cmt1w1/Sun/SJWebServer7u8/https-p1cmt1w1.bhdc.att.com/docs/manager (File not found)
[17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service" returned -1 (REQ_ABORTED)
The obj.conf definition is like this:
==================================
"obj.conf" 55 lines, 1799 characters
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# You can edit this file, but comments and formatting changes
# might be lost when you use the administration GUI or CLI.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="*/Calendar/" name="WLSTEST"
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# You can edit this file, but comments and formatting changes
# might be lost when you use the administration GUI or CLI.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/app/p1cmt1w1/Sun/SJWebServer7u8/lib/icons" name="es-internal"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="send-precompressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object name="Campaign" ppath="*/Campaign/*">
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
<Object name="manager" ppath=*/manager/*>
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
=================================================================
The magnus.conf is like this :
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
Init fn="load-modules" shlib="libj2eeplugin.so"
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib="/opt/app//Sun/SJWebServer7u8/https-abcd.xyz.net/plugins/lib/libproxy_61.so"
Init fn="wl_init"
Please help me someone on this.

please upgrade to 7.0.9 as it includes fix for potential security vulnerabilities. you can download oracle iplanet web server 7.0.9 * formerly sun one / sun java system web server * from here -http://bit.ly/aPphqr
this is what you could do
edit <install-root>/https-<hostname>/config/obj.conf or <install-root>/https-<hostname>/<hostname>-obj.conf (depending on your configuration)
and add the following
<Object name="default">
NameTrans fn="assign-name" from="<context-root-of-app1>" name="app1"
NameTrans fn="assign-name" from="<context-root-of-app2>" name="app2"
</Object>
<Object name="app1">
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
<Object name="app2>
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
and comment out these existing object configurations.
#<Object name="Campaign" ppath="/Campaign/">
#Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
#</Object>
#<Object name="manager" ppath=/manager/*>
#Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
#</Object>
and now save this file and can either run bin/reconfig (for dynamically reloading the configuration changes without any server downtime) or bin/restart -> for simply restarting the server and verify if this works out for you
if it does address your concern then you might have to manually pull your manual configuration changes into admin config repository by running
<install-root>/bin/wadm pull-config --user=admin --config=<hostname> <hostname>
for more information on what how to configure web server 7, please refer to obj.conf guide.
http://docs.sun.com/app/docs/doc/819-2630/gbysz?l=en&q=security&a=view
http://docs.sun.com/app/docs/doc/819-2630/abvar?l=en&q=security&a=view
http://docs.sun.com/app/docs/doc/819-2630/abuik?l=en&a=view
http://docs.sun.com/app/docs/doc/819-2630/gdaer?l=en&a=view
hope this helps

Obj.conf configuration help

I am creating a profile page and the url in the address bar needs to be http://domain.com/pages/personal/Rajshree.Rath. The page Rajshree.Rath does not exist. I have to get the first name and the last name and create the page dynamically.
I made this change in obj.conf and it worked exactly I needed. The url prepend gave me the first name and last name and the url did not change in the address bar.The page Details.jsp resides on app server.
<Object name="weblogic" ppath="*/pages/personal*">
Service fn="wl_proxy" WebLogicHost="weblogichost" WebLogicPort="weblogicport" PathPrepend="/subdir/Details.jsp?url=" WLProxySSL="ON"
</Object>
However, now the requirement has changed. The page Details.jsp needs to be on the web server.
What configuration I need to add to obj.conf so that the page works on web server ?
Thanks in Advance,
Rajshree

I assume you want to process requests for /pages/personal/user as though they were requests for /subdir/Details.jsp?url=/pages/personal/user, where /subdir/Details.jsp is a JSP running on the same web server. You can do that in Sun Java System Web Server 7.0 using the new restart SAF:<Object ppath="*/pages/personal*">
NameTrans fn="restart" uri="/subdir/Details.jsp?url=$uri"
</Object>I'm not aware of any way to do this in earlier versions of Web Server.
An alternative would be to use normal Servlet <url-pattern> mappings in web.xml to map /pages/personal/* to a particular JSP. If you do that, though, the information about the originally requested path won't appear in the query string, so you'd need to modify the way the JSP figures out which user's page is being requested.

Configuring wl-proxy for iPlanet obj.conf

Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension) plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?


The Debug option was added in a fairly recent service pack so make sure you are using the plugin from Service
          Pack 8 (I am assuming WLS 5.1 here...).
          As for Netscape, try putting all of the parameters on one line (with no line continuation characters and no
          white space in the cluster list). Netscape, especially on NT is very sensitive to how the obj.conf file is
          formatted. Try the one attached.
          Hope this helps,
          Robert
          Ganapur Srinivas wrote:
          > Hello,
          >
          > Following is the contents of the obj.conf file, which we are using to set up the
          > iPlanet for clustered environment of Weblogic. With the below settings we are able
          > to access the JSP files, but not able to pass the Servlet request via the Proxy plug-in.
          > Also the Debug=ON option is not working properly. Of the two machines the request
          > is going to only one machine, if that particular machine is not on the net, the request
          > is not directed to the live machine which has weblogic instance running.
          >
          > If somebody already running Weblogic clustering successfully please let us know if
          > the following settings are okay in obj.conf:
          >
          > ====================START of obj.conf
          > # Sun Netscape Alliance - obj.conf
          > # You can edit this file, but comments and formatting changes
          > # might be lost when the admin server makes changes.
          >
          > # Use only forward slashes in pathnames--backslashes can cause
          > # problems. See the documentation for more information.
          >
          > Init fn="load-modules" funcs="wl-proxy,wl-init"\
          > shlib=C:/Netscape/Server4/https-MyMachine/proxy36.dll
          > Init fn="wl-init"
          >
          > Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip%
          > - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status%
          > %Req->srvhdrs.content-length%"
          > Init fn="load-types" mime-types="mime.types"
          > Init disable="yes" fn="dns-cache-init"
          >
          > <Object name="default">
          > NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          > NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          > NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
          > NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
          > NameTrans fn="document-root" root="D:/Webserver/examples"
          > Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
          > WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001"
          > ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm"
          > Debug=ON
          > PathCheck fn="nt-uri-clean"
          > PathCheck fn="check-acl" acl="default"
          > PathCheck fn="find-pathinfo"
          > PathCheck fn="find-index" index-names="index.html"
          > ObjectType fn="type-by-extension"
          > ObjectType fn="force-type" type="text/plain"
          > Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
          > Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
          > Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
          > AddLog fn="flex-log" name="access"
          > </Object>
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001" PathTrim="/weblogic"
          > </Object>
          >
          > <Object name="cgi">
          > ObjectType fn="force-type" type="magnus-internal/cgi"
          > Service fn="send-cgi"
          > </Object>
          >
          > <Object name="es-internal">
          > PathCheck fn="check-acl" acl="es-internal"
          > </Object>
          >
          > ====================END of obj.conf
          >
          > sam nemati <[email protected]> wrote:
          > >Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension)
          > plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?
          # Sun Netscape Alliance - obj.conf
          # You can edit this file, but comments and formatting changes
          # might be lost when the admin server makes changes.
          # Use only forward slashes in pathnames--backslashes can cause
          # problems. See the documentation for more information.
          Init fn="load-modules" funcs="wl-proxy,wl-init" shlib="C:/Netscape/Server4/https-MyMachine/proxy36.dll"
          Init fn="wl-init"
          Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
          Init fn="load-types" mime-types="mime.types"
          Init disable="yes" fn="dns-cache-init"
          <Object name="default">
          NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
          NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
          NameTrans fn="document-root" root="D:/Webserver/examples"
          Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm" Debug=ON
          PathCheck fn="nt-uri-clean"
          PathCheck fn="check-acl" acl="default"
          PathCheck fn="find-pathinfo"
          PathCheck fn="find-index" index-names="index.html"
          ObjectType fn="type-by-extension"
          ObjectType fn="force-type" type="text/plain"
          Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
          Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
          Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
          AddLog fn="flex-log" name="access"
          </Object>
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" PathTrim="/weblogic"
          </Object>
          <Object name="cgi">
          ObjectType fn="force-type" type="magnus-internal/cgi" Service fn="send-cgi"
          </Object>
          <Object name="es-internal">
          PathCheck fn="check-acl" acl="es-internal"
          </Object>

Issue in iPlanet loading obj.conf file in admin console module

Dear all,
I have done following chanegs in obj.conf file to block insecure http methods,but whenever I try to access admin module of iPlanet and restart, all manual changes done in obj.conf disappears.
Only one time it asked me with message that file has been modified manually do you want to load?
but this is not happening every time.I am using iplanet 9.
Please let me know if there is any issue with this or I am missing something.
to just brief, only after trying 20 times it asked me above mentioned message
---obj.conf file contents----
<Object name="WebCon1" ppath="*/WebCon/*">
*<Client method="(GET|POST)">*
AuthTrans fn="match-browser" browser="MSIE*" ssl-unclean-shutdown="true"*
*</Client>*
*<Client method="(HEAD|PUT|TRACE|TRACK|SEARCH|INDEX|OPTIONS|DELETE|MKDIR|SHOWMETHOD|UNLINK|CHECKIN|TEXTSEARCH|SPACEJUMP|CONNECT|PATCH|PROPFIND|PROPPATCH|MKCOL|COPY|MOVE|LOCK|UNLOCK|CHECKOUT|RMDIR|ACL|VERSION-CONTROL|REPORT|UNCHECKOUT|ORDERPATCH)">*
*AuthTrans fn="set-variable" remove-headers="transfer-encoding" set-headers="content-length: -1" error="405"*
*</Client>*
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/cedera/iPlanetServer/Installation/ns-icons" name="es-internal"
PathCheck fn="unix-uri-clean"
PathCheck fn="find-pathinfo"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|POST)" type="image/gif" fn="send-file"
Service method="(GET|POST)" type="image/jpeg" fn="send-file"
Service method="(GET|POST)" type="text/css" fn="send-file"
Service method="(GET|POST)" type="application/x-javascript" fn="send-file"
Service method="(GET|POST)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|POST)" type="magnus-internal/directory" fn="send-error" path="/WebCon/WebCon/restrict.htm"
Service method="(GET|POST)" fn="wl_proxy" WebLogicHost="10.10.61.224" WebLogicPort="444" HungServerRecoverSecs="600" Debug="ALL" DebugConfigInfo="TRUE" RequireSSLHostMatch="FALSE" WLLogFile="/home/cedera/iPlanetServer/Installation/https-webcon2/logs/Log_JSP.txt" PathTrim="/WebCon" PathPrepend="/WebConverter" SecureProxy="ON" URIContainsSpace="true" ErrorPage="/home/cedera/iPlanetServer/Installation/docs/WebCon/WebCon/serviceUnavailable.htm" MaxPostSize="-1" DefaultFileName="WebCon/login.jsp" ConnectTimeoutSecs="10" ConnectRetrySecs="2" WLDNSRefreshInterval="0" TrustedCAFile="/home/cedera/iPlanetServer/Installation/https-webcon2/config/trustedcafile.pem"
AddLog fn="flex-log" name="access"
</Object>
I have added contents marked in bold manually....
but it was not picking up it from frontend...then suddenly after 20 time, it picked up these changes in admin...
but now if I am trying to change in <client> tag , but it does not recognise any new changes done manually...it loads same obj.conf...whenever i restart instance from frontend...
Edited by: sweetvish on Nov 9, 2009 9:26 PM

After making manual changes in obj.conf, have you tried clicking the 'Apply' link in admin console and then choosing 'Load configuration Changes' option?

Confused - obj.conf

I am attempting to configure Web Server 6.1 to support an application that uses HTTP 1.0 and expects a content-length header in the response. The response is generated from a php script (index.php). The php script does not generate the header itself.
Here is my modified obj.conf:
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn=pfx2dir from=/mc-icons dir="/opt/SUNWwbsvr/ns-icons" name="es-internal"
NameTrans fn=document-root root="$docroot"
PathCheck fn=unix-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.php"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service fn="match-browser" browser="*" http-downgrade="1.0" UseOutputStreamSize="8192"
Service fn="php5_execute" type="magnus-internal/x-httpd-php"
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
Service method=TRACE fn=service-trace
Error fn="error-j2ee"
#AddLog fn=flex-log name="access"
AddLog fn=flex-log name="extended"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
What is confusing is:
1. Why do I need the http-downgrade=1.0 twice - once in AuthTrans and once in Service?
2. How come this works at all since the server should stop at the first Service entry, i.e. the match-match browser one and not call the PHP.
3. Why does this only work for GET and not for POST ??????
Any help would be greatly appreciated.

You don't see the UseOutputStreamSize syntax error when you have the AuthTrans directive because only the first match-browser directive to match the browser will actually be executed. I think you should remove your Service fn="match-browser" directive altogether. Instead, you could use the following:<Object name="default">
AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
Service fn="php5_execute" type="magnus-internal/x-httpd-php" UseOutputStreamSize="8192"
</Object>Neither UseOutputStreamSize nor http-downgrade are specific to GET. Both work with POST. If you don't get a Content-length: header on POST responses, it may be because the content is more than 8192 bytes in length. Try changing UseOutputStreamSize="8192" to UseOutputStreamSize="65536".

Using a question mark in a obj.conf redirect

We seem to have a problem with the following obj.conf entry on iPlanet v6.1 SP4:
NameTrans fn="redirect" from="/xxxxxxxxx/?" url-prefix="http://www.domain.com/directory/?rid=zzzzzzzzz&"
The "?" is not recognized by the server so the redirect is never executed. We have also tried:
NameTrans fn="redirect" from="/xxxxxxxxx/%3f" url-prefix="http://www.domain.com/directory/?rid=zzzzzzzzz&"
This is also not recognized. Is the "?" a special character for iPlanet configuration?
Any help would be appreciated in solving this problem. Thanks

The from parameter specifies a path prefix. Paths don't include query strings (the stuff beginning with "?" in the URL).
I can't think of any easy way to do what you want in Sun ONE Web Server 6.1. However, the following could be used in Sun Java System Web Server 7.0:
<If defined $query>
NameTrans fn="redirect" from="/xxxxxxxxx/" url="http://www.domain.com/directory/?rid=zzzzzzzzz&$query"
</If>In 6.1, you'll probably need to write some code (Java Servlet, Java Filter, CGI program, or NSAPI plugin) to get the functionality you want.

Nsapi in cluster (obj.conf file conflict)

Hi,
          I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          running with the plugin...
          When I am on non-cluster environment, everything is just fine, but on
          cluster, IPlanet is starting, but I can not see anything on the browser
          (page cannot be displayed), I have attached my obj.conf file. Please let
          me know ASAP what I am doing wrong...
          Regards
          GOD BLESS
          Chris
          ## ------------- BEGIN SAMPLE OBJ.CONF CONFIGURATION ---------
          # (no cluster)
          # The following line locates the NSAPI library for loading at
          # startup, and identifies which functions within the library are
          # NSAPI functions. Verify the path to the library (the value
          # of the shlib=<...> parameter) and that the file is
          # readable, or the server will fail to start.
          Init fn="load-modules" funcs="wl-proxy,wl-init"\
          shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          Init fn="wl-init"
          # Configure which types of HTTP requests should be handled by the
          # NSAPI module (and, in turn, by WebLogic). This is done
          # with one or more "<Object>" tags as shown below.
          # Here we configure the NSAPI module to pass requests for
          # "/weblogic" to a WebLogic Server listening at port 7011 on
          # the host ags-dtcXXXX.agsolutions.co.uk that is your localhost (e.g:
          ags-dtc1724) .
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          PathTrim="/weblogic"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "WLS" to weblogic server on port 7011.
          <Object name="eutility" ppath="*WLS*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "wls" to weblogic server on port 7011.
          <Object name="eutility1" ppath="*wls*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # Here we configure the plug-in so that requests that
          # match "/servletimages/" will be handled by the
          # plug-in/WebLogic.
          <Object name="si" ppath="*/servletimages/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          # This Object directive works by file extension rather than
          # request path. To use this configuration, you must also add
          # a line to the mime.types file:
          # type=text/jsp exts=jsp
          # This configuration means that any file with the extension
          # ".jsp" will be proxied to WebLogic. Then you must add the
          # Service line for this extension to the Object "default",
          # which should already exist in your obj.conf file:
          <Object name=default>
          NameTrans fn=pfx2dir from=/ns-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn=pfx2dir from=/mc-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn="pfx2dir" from="/help" dir=\
          "/usr/netscape/server4/manual/https/ug"
          NameTrans fn=document-root root="/usr/eutilweb"
          Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
          WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011 PathPrepend=/jspfiles
          PathCheck fn=unix-uri-clean
          PathCheck fn="check-acl" acl="default"
          PathCheck fn=find-pathinfo
          PathCheck fn=find-index
          index-names="index.html,index.htm,wls.htm,wls.html,home.html"
          ObjectType fn=type-by-extension
          ObjectType fn=force-type type=text/plain
          Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
          Service method=(GET|HEAD) \
          type=magnus-internal/directory fn=index-common
          Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
          AddLog fn=flex-log name="access"
          </Object>
          # The following directive enables HTTP-tunneling of the
          # WebLogic protocol through the NSAPI plug-in.
          <Object name="tunnel" ppath="*/HTTPClnt*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]


          Since IPlanet is started ( as per your email) , are you able to access
          index.html page?
          If yes, add the following debug flag in obj.conf and point your browser
          to
          http://[NES-host]:[port]/weblogic/index.html?__WebLogicBridgeConfig (2
          under scores)
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/weblogic" DebugConfigInfo="ON"
          </Object>
          Does the screen shot shows primary & secondary server info?
          what's the build date/time on it?
          PS: Also make sure there aren't any extra spaces in it.. Sometimes NES
          is very much picky..
          Kumar
          starssoul wrote:
          > Hi,
          >
          > I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          > running with the plugin...
          > When I am on non-cluster environment, everything is just fine, but on
          > cluster, IPlanet is starting, but I can not see anything on the
          > browser
          > (page cannot be displayed), I have attached my obj.conf file. Please
          > let me know ASAP what I am doing wrong...
          > Regards
          >
          > GOD BLESS
          > Chris
          >
          >
          >
          >
          > Init fn="load-modules" funcs="wl-proxy,wl-init"\
          > shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          > Init fn="wl-init"
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          > PathTrim="/weblogic"
          > </Object>
          >
          >
          > ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]

$doc root Variable use in obj.conf file of iPlanet6 SP2

Is there any way I can build expressions in obj.conf file using $docroot variable?
I have the following configured in the obj.conf now:
<<Object name="default">
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="/home/ns6.0SP2/https-site/docs/servlet" name="ServletByExt"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/cgi-bin" dir="/home/ns-home/https-site/cgi-bin" name="cgi"
NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
NameTrans fn="document-root" root="$docroot"
</Object>
I would like to have something like this:
<Object name="default">
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="$docroot/servlet" name="ServletByExt"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/cgi-bin" dir="$docroot/../cgi-bin" name="cgi"
NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
NameTrans fn="document-root" root="$docroot"
</Object>
I have tried the code above but unfortunatelly it does not work - I get "Not Found
The requested object does not exist on this server." error.
I need this to specify different $docroot-s for different URLs but keep the same default object for all of them.
Is there any other way to implement this?
Thank you very much for your cooperation!
Sasha

Yes, this technique does work.
However, in your example, the NameTrans fn="pfx2dir" from="/cgi-bin" directive will probably not work as you expect. This is because the PathTrans fn="unix-uri-clean" directive (which is written to all obj.conf files iWS creates) will reject all paths that contain "..". For more information on the unix-uri-clean SAF, refer to the NSAPI Programmer's Guide at http://docs.iplanet.com/docs/manuals/enterprise/50/nsapi/03_direc.htm#18613

Proxy 4.04 : Manual configurations of .conf files not loading

Hello,
Apologies if i sound a bit noobish , but some questions regarding manually configuring files (*.conf) using notepad/vi.
Issue now is , whenever i use a script or manually copy & paste newer configs, i do not get prompted for the reload configuration prompt like in 3.6. While i do realize the software supports dynamic reconfiguration , but i noticed that there is no updates show in my admin server (e.g , updated templates in obj.conf but in admin server -> view templates , it's not showing). And no prompt to "load configuration files). I'm running java that came with the package itself btw.

Hello,
Apologies if i sound a bit noobish , but some questions regarding manually configuring files (*.conf) using notepad/vi.
Issue now is , whenever i use a script or manually copy & paste newer configs, i do not get prompted for the reload configuration prompt like in 3.6. While i do realize the software supports dynamic reconfiguration , but i noticed that there is no updates show in my admin server (e.g , updated templates in obj.conf but in admin server -> view templates , it's not showing). And no prompt to "load configuration files). I'm running java that came with the package itself btw.

1000-2000 Redirects in Obj.conf - Performance Issues?

I'm potentially going to have upwards of 1000 redirects in obj.conf.
I assume there is no maximum number of redirects, but I'm worried about performance.
Will there be a significant impact on server start up time?
Also, I imagine that Sun One caches this config file to memory once - is that assumption correct?
Is it possible for a large number of entries in obj.conf to result in a performance hit on each page?

It would probably make sense to move the redirects to a separate configuration file (for ease of administration) and only to check for a redirect if the original URL would result in a 404 (to improve request-time performance). This is possible in Sun Java System Web Server 7.0, but not in earlier versions, by adding the following directives to the default object:<If $code = "404" and lookup('redirect.conf', $uri)>
Error fn="redirect" url="$(lookup('redirect.conf', $uri))"
</If>Where redirect.conf is a file that contains the URIs from which to redirect and the associated URLs to redirect to:# redirect.conf
/foo /bar
/old/index.html /new/index.jspIf the redirects are isolated to a relatively small number of directories, you can improve performance even in earlier versions of Web Server (e.g. Web Server 6.x) by moving the directives out of the default object and into path-specific objects. For example, consider the following:<Object name="default">
NameTrans fn="redirect" from="/foo/1" url="/new/A"
NameTrans fn="redirect" from="/bar/A" url="/new/1"
NameTrans fn="redirect" from="/foo/2" url="/new/B"
NameTrans fn="redirect" from="/foo/3" url="/new/C"
NameTrans fn="redirect" from="/bar/B" url="/new/2"
NameTrans fn="document-root" root="$docroot"
</Object>The above could be written as follows for improved performance:<Object ppath="/foo/*">
NameTrans fn="redirect" from="/foo/1" url="/new/A"
NameTrans fn="redirect" from="/foo/2" url="/new/B"
NameTrans fn="redirect" from="/foo/3" url="/new/C"
</Object>
<Object ppath="/bar/*">
NameTrans fn="redirect" from="/bar/A" url="/new/1"
NameTrans fn="redirect" from="/bar/B" url="/new/2"
</Object>
<Object name="default">
NameTrans fn="document-root" root="$docroot"
</Object>

Reference DOCUMENT_ROOT in obj.conf

In server.xml <document-root> is specified for each virtual server. How do I reference this value later in obj.conf file?
Here is the idea. I need a multiple virtual servers to share a common obj.conf file, and I want to easily add new virtual servers with minimal server.xml editing. (This minimal edit would be to add <object-file> line). Then in obj.conf I need to reference the document root for current virtual server. Specifically, I need to check the requested URI for existence like this:
<If $uri =~ '^/(.*)$' and !(-f"$docroot/$1")>
So how do I place <document-root> from server.xml into that $docroot variable? Would be great if this variable was predefined, but it is not.

Thank you for your help, I use SJSWS update 4, but I sure will upgrade.
As for configuration, I need to do the opposite thing. Once again.
I don't want all virtual servers to use the same document root. I want each one to have it's own document root. To make the creation of new virtual servers as quick as possible I need it to happen like this:
1. I add a virtual server with Admin Console (web interface). I specify document root with this interface.
2. I force it to use my-obj.conf by editing server.xml manually and adding <object-file> directive.
3. Deploy the configuration.
That is all. No other configuration steps should be performed.
Now the problem follows. my-obj.conf needs to know the document root of whatever virtual server it is invoked this time, and document root needs to be stored in some variable so something (file system path, exactly) could be tested against it. Recall the line:
<If $uri =~ '^/(.*)$' and !(-f"$docroot/$1")>
When the server runs through my-obj.conf, it sure knows the document root since it is set in <document-root> directory which Admin Console creates automatically in server.xml.
So it would be great if there was a predefined variable $docroot which I could use in my-obj.conf. I can see from the list you provided that there is no such a variable. I know that I could define one by adding <variable> directive to server.xml, but it's redundant, and I want to keep the creation of a virtual server as simple as possible.
I also tried to refer to $env{'DOCUMENT_ROOT'} in my-obj.conf, somehow it happens to be not defined, while the documentation states that $env includes CGI variables (is it fixed in recent iPlanet?)
So my last chance: is there a SAF that would put document root into a variable so it can be read?
The predefined variables really lack for documentation. What members do $env, $reqpb and rq have? Could not find it anywhere.

Obj.conf.template ignored?

Using SJSWS 6.1sp2...
I have made some customizations to obj.conf.template file in $SERVER_ROOT/bin/https/install/misc, but the instance creation process in the admin server seems to ignore this. I confirmed that this occurs on SJSWS 6.1sp1 as well. Any hints?
-chris

sorry for the late reply:
Basics of Server Operation in Sun ONE Application Server 7 Administrator's Configuration File Reference document. The obj.conf section mentions:
"The file named obj.conf that lacks a prefix is a template that Sun ONE Application Server uses to create obj.conf files for each virtual server. Editing this file does not affect any existing virtual servers, but does affect any subsequently created virtual servers."
thanks,
V.

Why doesn't iplanet 4.19 recognize a line obj.conf "AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true""?

We add this line for fixing "page can not be displayed" problem we suffer. But After apply it below "<Object name="default">", according to the document. Admin console shows, "Unknown: AuthTrans: match-browser" in red. Can anybody give me advice to this?Thanks.

I have the same problem.
Can anybody help?
Which version of iPlane I need to use following directive in "obj.conf":
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true".
Is there any alternative of this directive for iPlanet 4.1?
Thanks.

PPATH directive ignored in obj.conf

I just upgraded to 7.0 u3 from 6.1 sp3. Now it appears as if my ppath directives are ignored. This is supposed to use basic authentication. It works in 6.1 but not in 7.0. below is what my obj.conf looks like. Any help would be greatly appreciated.
<Object name="reverseproxyspeller">
ObjectType fn="force-type" type="magnus-internal/passthrough"
Service fn="service-passthrough" servers="http://prod-fs.alumniconnections.com:8080"
</Object>
<Object name="default">
<Client uri="*olclogin.app">
AuthTrans fn="set-variable" keep-alive="disabled" http-downgrade="1.0"
</Client>
AuthTrans fn="olc-cookie-auth"
AuthTrans fn="nsOLCauth"
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="*/aspell_setup.php" name="reverseproxyspeller"
NameTrans fn="assign-name" from="*/spell-check-logic.php" name="reverseproxyspeller"
NameTrans fn="assign-name" from="*/spell-check-savedicts.php" name="reverseproxyspeller"
NameTrans fn="nsOLCsetrc"
NameTrans fn="strip-params"
NameTrans fn="nsOLCrestrict"
NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/app.sph/mydirectory.app"
NameTrans fn="substring-replace" replace="/directory.cgi" search="/app.sph/old.app"
NameTrans fn="substring-replace" replace="/memberupdate.cgi" search="/app.sph/memberupdate.app"
NameTrans fn="substring-replace" replace="/networking.cgi" search="/app.sph/networking.app"
NameTrans fn="substring-replace" replace="/olclogin.cgi" search="/app.sph/olclogin.app"
NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/mydirectory.cgi"
NameTrans fn="substring-replace" replace="/directory.cgi" search="/old.cgi"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/WWW/ns-home/lib/icons" name="es-internal"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,index.htm,index.cgi,index.jsp,home.html"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service fn="send-cgi" type="magnus-internal/cgi" user="$user" group="$group" dir="$dir" chroot="$chroot" nice="$nice"
Service fn="shtml_send" type="magnus-internal/parsed-html" method="(GET|HEAD)" opts="noexec"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service fn="sapphire-form" method="(GET|POST)" type="magnus-internal/sapphire"
Error fn="error-j2ee"
Error reason="Unauthorized" fn="query-handler" path="/usr/olc/cgi-bin/invalidlogin.cgi"
Error reason="Server Error" fn="query-handler" path="/WWW/olc/cgi-bin/servererrorhandler01.cgi"
Error reason="Not Found" fn="send-error" path="/WWW/ns-home/docs/errorpages/notfound.html"
AddLog fn="flex-log"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/pub/*">
PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/admin/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/admin/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
</Object>

Add in default object as the first PathCheck directive (just above PathCheck fn="uri-clean")
<If $ppath =~ "/WWW/ns-home/docs/olc/pub/" or $ppath =~ "/WWW/ns-home/docs/olc/membersonly/" or $ppath =~ "/WWW/ns-home/docs/olc/admin/">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</If>Assuming your Web Server document root is "/WWW/ns-home/docs/" you can try this as well:
<If $uri =~ "/olc/pub/" or $uri =~ "/olc/membersonly/" or $uri =~ "/olc/admin/">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</If>Edited by: mv on Oct 10, 2008 8:13 AM

Configuring obj.conf

Similar Messages

Maybe you are looking for