Disable HTTP Methods on Sun One Web Server 6.1

I've been instructed by our auditors to disable the HTTP TRACE and TRACK methods in our web server. I can't find anything in the documentation on how to do this, although the following statments in the default object in obj.conf look like they might be involved:
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Can anyone point me in the right direction here?
Thanks,

Remove Comment out the line in obj.conf that contains the method "TRACE".
http://blogs.sun.com/meena/entry/disabling_trace_in_sun_java

Similar Messages

Disable PUT and DELETE HTTP methods in Sun ONE Web Server 6.1

Hello ,
i want disable PUT and DELETE methods in SunOne 6.1 , i don't find the solution ...
Thnaks to help me .
telnet www.mywebsite.com 80
Trying 145.248.193.13...
Connected to www.mywebsite.com.
Escape character is '^]'.
OPTIONS * HTTP/1.0
HTTP/1.1 200 OK
Server: Sun-ONE-Web-Server/6.1
Date: Wed, 18 Jan 2006 08:07:41 GMT
Content-length: 0
Allow: HEAD, GET, PUT, POST, DELETE, TRACE, OPTIONS, MOVE, INDEX, MKDIR, RMDIR
Connection: close

are you sure that it isn't a vulnerability ? if i understand you , OPTIONS * HTTP/1.0 list all the possible methods but they are not actived ?
i have test with OPTIONS / HTTP/1.0 , is that the those possible methods : HEAD , GET ??
thanks
telnet www.mywebsite.com 80
Trying 145.248.193.13...
Connected to www.mywebsite.com.
Escape character is '^]'.
OPTIONS / HTTP/1.0
HTTP/1.1 200 OK
Server: Sun-ONE-Web-Server/6.1
Date: Wed, 18 Jan 2006 11:11:07 GMT
Content-length: 0
Allow: HEAD, GET
Connection: close

Sun ONE Web Server 6.1SP5

Hi,
I had a absolutely working copy of sam (inherited) and for some reason today it was not authenticating (prompting for incorrect password although I was using correct uid/pwd on browser console), so I restarted the server and now I cant even go to the browser console page...
looking at the start logs following error spits off during start time:
=======================================
++ ./webservd-wdog -r /opt/SUNWwbsvr -d /opt/SUNWwbsvr/https-dev.companyname/config -n https-dev.companyname
Sun ONE Web Server 6.1SP5 B06/23/2005 17:36
info: CORE3016: daemon is running as super-user
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_04] from [Sun Microsystems Inc.]
info: WEB0100: Loading web module in virtual server [https-dev.companyname] at [amserver]
warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
info: WEB0100: Loading web module in virtual server [https-dev.companyname] at [ampassword]
warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
info: WEB0100: Loading web module in virtual server [https-dev.companyname] at [amcommon]
info: WEB0100: Loading web module in virtual server [https-dev.companyname] at [amconsole]
warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
info: WEB0100: Loading web module in virtual server [https-dev.companyname] at [search]
failure: WebModule[amserver]: WEB2783: Servlet /amserver threw load() exception
javax.servlet.ServletException: WEB2778: Servlet.init() for servlet LoginLogoutMapping threw exception
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:949)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
----- Root Cause -----
java.lang.NullPointerException
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
info: HTTP3072: [LS ls1] http://dev.companyname:80 ready to accept requests
startup: server started successfully
++ test 0 -ne 0
++ exit 0
=======================================
Thanks
Sat

Ooops! it's an initialization error. There are many possible causes given the log you posted. It could be convenient if you enable message debugging so you can have a better idea of what's happening.
Some common reasons for such error:
- The dsameuser/puser password changed
- A configuration file is damaged
- Operative System permissions changed for configuration files/directories
- a File system corruption
- Something weird happened to your DS instance
I'm supposing you are ABSOLUTELY sure nobody configured wrongly the product.
Regards

How do I configure a Sun One Web Server 6.1 to run JSP pages

I have a Sun One Web server version 6.1 running on Solaris 10.
The web server is not configured to run JSP pages. When I try and run a JSP page, I get an HTTP 405 error.
Can somebody please point me to the configuration directions, including changes to the obj.conf, magnus,.conf, etc.
Thanks

Web Container is enabled by default.
Here are my config files
$tail -1 magnus.conf
Init fn="load-modules" shlib="/export2/ws6.1sp11/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"$cat obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/export2/ws6.1sp11/ns-icons" name="es-internal"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="unix-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log" name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>JAVA settings in server.xml:
<JAVA classpathsuffix="" debug="false" debugoptions="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n" dynamicreloadinterval="-1" envclasspathignored="true" javahome="/export2/ws6.1sp11/bin/https/jdk" nativelibrarypathprefix="" serverclasspath="/export2/ws6.1sp11/bin/https/jar/webserv-rt.jar:${java.home}/lib/tools.jar:/export2/ws6.1sp11/bin/https/jar/webserv-ext.jar:/export2/ws6.1sp11/bin/https/jar/webserv-jstl.jar:/export2/ws6.1sp11/bin/https/jar/ktsearch.jar">
        <JVMOPTIONS>-Djava.security.manager</JVMOPTIONS>
        <JVMOPTIONS>-Djava.security.policy=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/server.policy</JVMOPTIONS>
    <JVMOPTIONS>-Djava.security.auth.login.config=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/login.conf</JVMOPTIONS>
    <JVMOPTIONS>-Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager</JVMOPTIONS>
    <JVMOPTIONS>-Xmx256m</JVMOPTIONS>
    <SECURITY anonymousrole="ANYONE" audit="false" defaultrealm="native">
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.file.FileRealm" name="file">
        <PROPERTY name="file" value="/export2/ws6.1sp11/https-alamanac.india.sun.com/config/keyfile"/>
        <PROPERTY name="jaas-context" value="fileRealm"/>
      </AUTHREALM>
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.webcore.NativeRealm" name="native">
        <PROPERTY name="jaas-context" value="nativeRealm"/>
      </AUTHREALM>
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.ldap.LDAPRealm" name="ldap">
        <PROPERTY name="directory" value="ldap://localhost:389"/>
        <PROPERTY name="base-dn" value="o=isp"/>
        <PROPERTY name="jaas-context" value="ldapRealm"/>
      </AUTHREALM>
            <AUTHREALM name="solaris" classname="com.iplanet.ias.security.auth.realm.solaris.SolarisRealm">
              <PROPERTY name="jaas-context" value="solarisRealm"/>
            </AUTHREALM>
    </SECURITY>
    <RESOURCES>
        </RESOURCES>
</JAVA>

Sun ONE Web Server 6.1SP5 and Communications Express Error

I post this to the wrong forum i think i am getting this error after running the config-uwc.
Sun ONE Web Server 6.1SP5 B06/23/2005 22:22
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_04] from [Sun Microsystems Inc.]
config: for host 0.0.0.0 trying to GET /, name-trans-passthrough reports: init-passthrough has not been called
info: WEB0100: Loading web module in virtual server [https-proxy1.mrc.ac.za] at [da]
info: WEB0100: Loading web module in virtual server [https-proxy1.mrc.ac.za] at [uwc]
info: WEB0110: Ignoring invalid property [allowLinking] = [true]
info: WEB0100: Loading web module in virtual server [https-proxy1.mrc.ac.za] at [search]
warning: CORE3283: stderr: Exception in thread "Thread-1" java.lang.NoClassDefFoundError: org/mozilla/jss/crypto/KeyGenAlgorithm
warning: CORE3283: stderr: at java.lang.Class.forName0(Native Method)
warning: CORE3283: stderr: at java.lang.Class.forName(Class.java:164)
warning: CORE3283: stderr: at com.iplanet.services.util.Crypt.createInstance(Crypt.java:133)
warning: CORE3283: stderr: at com.iplanet.services.util.Crypt.<clinit>(Crypt.java:103)
warning: CORE3283: stderr: at com.iplanet.services.ldap.LDAPUser.getPasswd(LDAPUser.java:117)
warning: CORE3283: stderr: at com.iplanet.services.ldap.ServerInstance.getPasswd(ServerInstance.java:128)
warning: CORE3283: stderr: at com.sun.identity.security.ServerInstanceAction.run(ServerInstanceAction.java:92)
warning: CORE3283: stderr: at java.security.AccessController.doPrivileged(Native Method)
warning: CORE3283: stderr: at com.iplanet.am.util.AdminUtils.<clinit>(AdminUtils.java:82)
warning: CORE3283: stderr: at com.sun.identity.security.AdminDNAction.run(AdminDNAction.java:86)
warning: CORE3283: stderr: at java.security.AccessController.doPrivileged(Native Method)
warning: CORE3283: stderr: at com.sun.identity.authentication.internal.server.SMSAuthModule.initialize(SMSAuthModule.java:129)
warning: CORE3283: stderr: at com.sun.identity.authentication.internal.LoginContext.login(LoginContext.java:122)
warning: CORE3283: stderr: at com.sun.identity.authentication.internal.AuthLoginThread.run(AuthLoginThread.java:82)

I reran the access manager configuration and deployed it to the web server and now the webserver starts up successfully. I think my problem was that the file I was using initially wasn't properly setup for my enviroment.
Carinus

Sun ONE Web Server & Remote User field

Hi,
I look for a tip to my Sun ONE Web Server 6.1 SP2 configuration.
I have:
- OS: Sun Solaris 8
- Apache 1.3 (listen port :80)
- Sun ONE Web Server 6.1 SP2 (listen port :81)
- Weblogic 8.1 SP4 (listen port :8001)
The 3 applications are in the same server.
My first configuration works:
- Apache works with basic authentification by password file (generate with htpasswd) and communicates with Weblogic
- Weblogic listens http requests and work with the remote user id (use method HttpServletRequest.getRemoteUser())
My second configuration doesn't work:
- Apache works with basic authentification by password file (generate with htpasswd) + reverse proxy mode (use VirtuaHost) and communicates with Sun ONE Web Server
- Sun ONE Web Server works with no authentification mode and communicates with Weblogic
- Weblogic listens http requests and works with the remote user id (use method HttpServletRequest.getRemoteUser())
The HttpServletRequest.getRemoteUser() returns null in my second configuration.
How I can configure my Sun ONE Web Server to foward the remote user id ?
Thank you.
Christophe.

Can you send your obj.conf?
I do not have a 6.1 Web Server installed, by guess work try
NameTrans fn="redirect" from="/index.html" url="/"
Also remove find-index or any such SAFs if you have in your obj.conf
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"Why do you need this?

Error when starting Sun ONE Web Server 6.1SP4 after successful installation

I have installed Sun ONE Web Server 6.1SP4 on my Solaris computer and I receive the following error when I try to start the Admin server:
Sun ONE Web Server 6.1SP4 B01/20/2005 17:43
failure: CORE3170: Configuration initialization failed: Error running init funct
ion load-modules: dlopen of /opt/SUNWwbsvr/bin/https/lib/libj2eeplugin.so failed
(ld.so.1: webservd: fatal: relocation error: file /opt/SUNWwbsvr/bin/https/lib/
libares3.so: symbol __res_state: referenced symbol not found)
I am running Solaris 8 and I have installed Patch 108993-22 as stated in chapter 2 of the installation and migration guide. I have also installed patches 116602-01, 115827-01, 113648-03, 112396-02, 111317-05, 111310-01, 111111-04, 111023-03, 110386-03, 108987-15, and 108528-24 since they are necessary for patch 108993-22.
I have been stumped by this error. I have tried several different ways to install this software but I always get the same error. I believe that I have the latest version of the Sun One Web Server and I received no error notifications when I installed it! Any help would be apeciated!
Thanks!!!!!

I think this might occur if you don't have the patch for SunAlert 46042 installed. There's more information on this critical Solaris security vulnerability, which was reported back in 2002, at http://sunsolve.central.sun.com/search/document.do?assetkey=1-26-46042-1
Can you run the following command to check if you have patch 109326-09 installed and let us know the result?showrev -p | grep 109326If you don't have 109326-09 or higher installed, you should install it as soon as possible. You can follow the link from the SunAlert. Better yet, install the latest Solaris 8 recommended patch cluster from http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access to make sure your system is fully patched and up to date.

How do you get Sun One Web Server to read white spacing in a url

Hi guys,
I am currently using Sun One Web Server and this is the problem that i am currently facing.
The url which is i am trying to read from the Sun One Web Server is http://test:8000/test/Testing%20A%20B
The error which i am getting is java.lang.RuntimeException: java.net.URISyntaxException: Illegal character in path
The reason why this is happening is because the original url is http://test:8000/test/Testing A B It has spacing in between the url. I cannot get rid of the spacing thru the code where its bound to a Content Management System. So the only way is to get the Sun One Web Server to be able to read this kind of url. There are about 300 to 400 of this types of url as they are dynamically generated.
I was looking at the obj.conf and magnum.conf file to see whether i can manipulate this url to work for this situation. But with no luck.
Can anyone please let me know if they have came across this problem.
Thanks.

Hi,
This is the stack Trace:
Error 500--Internal Server Error
java.lang.RuntimeException: java.net.URISyntaxException: Illegal character in path at index 29: /models/Sportwagon/Sportwagon SS V-Series
     at au.com.holden.cs.assembler.FriendlyURLAssembler.getInputURI(FriendlyURLAssembler.java:329)
     at au.com.holden.web.mvc.ViewUtil.getInputModelAndView(ViewUtil.java:29)
     at au.com.holden.web.mvc.navigation.ModelNavigationController.handleNoSuchRequestHandlingMethod(ModelNavigationController.java:17)
     at org.springframework.web.servlet.mvc.multiaction.MultiActionController.handleRequestInternal(MultiActionController.java:375)
     at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153)
     at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:45)
     at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:820)
     at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:755)
     at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:396)
     at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:350)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(Unknown Source)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: java.net.URISyntaxException: Illegal character in path at index 29: /models/Sportwagon/Sportwagon SS V-Series
     at java.net.URI$Parser.fail(URI.java:2809)
     at java.net.URI$Parser.checkChars(URI.java:2982)
     at java.net.URI$Parser.parseHierarchical(URI.java:3066)
     at java.net.URI$Parser.parse(URI.java:3024)
     at java.net.URI.(URI.java:578)
     at au.com.holden.cs.assembler.FriendlyURLAssembler.getInputURI(FriendlyURLAssembler.java:326)
     ... 26 more
This is the path which was access by me using Sun One Web Server: http://poll:8006/models/Sportwagon/Sportwagon%20SS%20V-Series
As you can see that Sun One Web Server dont like spacing between url.
Does anyone know how to fix this problem thru configuration in Sun One Web Server?

Sslext NOt working Sun ONE Web Server 6.0?

Hi,
I have implemented the sslext tag for dynamic switching of http to https.
I am using ATG Dynamo Server ONLY in the Development Env. (using the default Web Server of ATG) for testing this and sslext tag works fine using the Plug-In of struts which is in sslext.jar.
but in producation the ATG Dynamo Server 6.0 is configured with Sun ONE Web Server 6.0, as forwarding request throught the Web Server to the App Server.
But here sslext stop working?? any guss why?
Sun ONE Server 6.0 is configured with ATG Dynamo Server 6.0 as Connection Module.
There are three ways a Connection Module can handle requests for files whose MIME type is text/html.
1)You can choose to have the files served by the Sun ONE Web Server,
2)by the Dynamo server,
3)or by the Sun ONE Web Server (but also send requests to Dynamo for logging).
we select the 3rd option.
any Guess why this is happening???
regards
DJ

Since removing the log settings from magnus.conf failed to fix the problem, the log settings are probably not the source of the problem.
Did anything else - e.g. ColdFusion configuration changes - occur at about the same time you changed the log settings?

Poor Performance of Sun One Web Server 6.0 SP6

We are running on an E450 with 2GB of memory, Solaris 8 2/02 with Recommended and Security Patch Cluster from 31 Jul 03, Sun One Web Server 6.0 SP6, Macromedia ColdFusion 5, JDK 1.4.1_02. We are seeing intermittent (three or four times a day) performance problems, extremely poor response time.
A vanilla, �test� iPlanet web server was put up on port 2443 with https turned on and off. Repeated control tests on file operations (�copy link as�) showed similar results as those described in High Impact above. Changes to add KeepAlive parameters (in magnus.conf) showed no noticeable improvement.
Tests were conducted -- on the test server -- accessing the same file from two clients, one a thin client (TC), the other a Unix workstation (UW).
Results:
1) Sometimes process TC was started first and continued normally while process UW hung up; when this happened, only one httpd process was building cpu time;
2) Sometimes process UW was started first and continued normally while process TC hung up; when this happened, only one httpd process was building cpu time;
3) Sometimes both process TC and process UW continued normally regardless of which was started first; when this happened, two different httpd processes were building cpu time together;
Speculation on Process Management - speculation is that, in the case of the 3rd bullet above, iPlanet assigned different httpd processes to the two requests. In the case of the first two bullets, however, the belief is that iPlanet actually assigned the second request to the same process it had previously assigned the first request. In this case, the second request was left to wait. It appears that most of the work done by httpd children is performed by only two or three children, even when there are 10 available.
Questions;
Why are the other httpd children are not more fully utilized?
What about changing the number of Acceptor Threads?
Could turning on Native Polling help (UseNativePoll in magnus.conf)?
Any other thoughts about what is going on or how to fix the issue?
Thanks for any assistance
Excerpt from /etc/system
* Web Server and ColdFusion Setting
set shmsys: shminfo_shmmax = 2147483647
set shmsys: shminfo_shmmin = 1
set shmsys: shminfo_shmmni = 100
set shmsys: shminfo_shmseg = 50
set semsys: seminfo_semmns = 1750
set semsys: seminfo_semmni = 70
set msgsys:msginfo_msgmax = 65535
set msgsys:msginfo_msgmnb = 65535
set msgsys:msginfo_msgseg = 8192
set msgsys:msginfo_msgssz = 16
* Default is 512, which handles several thousand connections
*set tcp:tcp_conn_hash_size=262144
* Do not set to 0 in solaris 8 on Production Systems
*set sq_max_size=0
set rlim_fd_max=8192
set rlim_fd_cur=8192
* END of Web / ColdFusion Settings
Excerpt from /etc/rc2.d/S69inet
## Web Server and ColdFusion Settings
# Comment out tcp_slow_start_initial, because default is 4
#ndd -set /dev/tcp tcp_slow_start_initial 2
ndd -set /dev/tcp tcp_xmit_hiwat 32768
ndd -set /dev/tcp tcp_recv_hiwat 32768
ndd -set /dev/tcp tcp_conn_req_max_q 1024
ndd -set /dev/tcp tcp_conn_req_max_q0 4096
ndd -set /dev/tcp tcp_time_wait_interval 60000
ndd -set /dev/tcp tcp_keepalive_interval 900000
# Comment out next 4 to accept default
# - change only if tcp longer than 10 seconds expected
#ndd -set /dev/tcp tcp_ip_abort_interval 60000
#ndd -set /dev/tcp tcp_rexmit_interval_max 10000
#ndd -set /dev/tcp tcp_rexmit_interval_initial 3000
#ndd -set /dev/tcp tcp_rexmit_interval_min 3000
# Left out changing ephemeral (short lived) port
#ndd -set /dev/tcp tcp_smallest_anon_port 1024
# Keep default of 1480576
#ndd -set /dev/tcp tcp_cwnd_max 65535
## End of Web / ColdFusion Settings
Excerpt from magnus.conf
RqThrottle 1
MaxProcs 10
StackSize 131072
## Added for lightly loaded systems
KeepAliveQueryMeanTime 1
KeepAliveQueryMaxSleepTime 0

Because the security context is set as a process context, the NSAPI thread locks the process prior to setting the security context. The older NASPI plugin that we are using is not reentrant, it will not work with the mulitthreading model. Under multithreading each thread would have access to the security context of each thread.

NetBeans and Sun ONE Web Server 6.1

I have a JSP / Beans / Servlet Web application working in Tomcat on my local machine, a Macintosh laptop. I used NetBeans to create it all, and everything works fine there. I have tried to upload everything to another computer (Solaris based) which is running Sun ONE Web Server 6.1, but am having problems.
I uploaded the WAR file that NetBeans created, and uploaded the 'web' directory that NetBeans created. I can access HTML files from that web folder, but when I ask it to go to the first page, index.jsp, it has a problem with the beans. In my JSP file I do:
<jsp:useBean id="db" class="drc.database" scope="session" />
It seems to be having problems loading that class. What do I need to do? Here is the error code:
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: context = StandardEngine[null].StandardHost[drc].StandardContext[]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: contextPath =
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: wrapper = StandardEngine[null].StandardHost[drc].StandardContext[].StandardWrapper[jsp]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: servletPath = /index.jsp
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: pathInfo = null
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): JspEngine --> /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): ServletPath: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): PathInfo: null
[04/Aug/2005:17:15:36] fine (15708):      for host 0.0.0.0 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RealPath: /www/html/drc/index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RequestURI: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): QueryString: null
[04/Aug/2005:17:15:36] failure (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: StandardWrapperValve[jsp]: WEB2792: Servlet.service() for servlet jsp threw exception
     org.apache.jasper.JasperException: WEB4000: Unable to compile class for JSPWEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:66: package drc does not exist
     drc.database db = null;
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:69: package drc does not exist
     db= (drc.database)
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:74: package drc does not exist
     db = (drc.database) java.beans.Beans.instantiate(this.getClass().getClassLoader(), "drc.database");
     ^
     3 errors
     at org.apache.jasper.compiler.Compiler.compile(Compiler.java:312)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.loadJSP(JspServlet.java:764)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.access$000(JspServlet.java:624)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:412)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:363)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:771)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:322)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:578)

it is certifying / authenticating that the secured
web site is owned by the genune party and the
transactions with the party is doing through a
encrypted format.
Am i correct up to this???Correct, that is what SSL/certificates are for.
>
Then my dowt is that
Is it possible to make my server SSL enabled with
h out using any certificate ????( the documents you
are given is telling about certificates)No it is not possible - the whole idea behind SSL communication is that it is based on TRUSTED secure communication. If a client can not check validity of server's certificate it is not trusted any more.
It might not seem to be the case when you create a self-signed certificate, but it really is so. In case of a self signed certificate you(i.e your browser) trust yourself with whatever you do with your application on your webserver.
After all can I install some certificates lateron ??
If you really need SSL with your webserver you have to either create a self signed certificate, see this: http://sial.org/howto/openssl/self-signed/
or request a test certificate from www.verisign.com or www.thawtee.com

Connecting to Oracle 9i with Sun One Web Server 6.1 SP4

I have an application that connects to an Oracle 9i database. When I run iPlanet 4.1, I am able to login to the application and run it. Since I have migrated to Sun One Web Server 6.1 SP4, I have not been able to login. Through some built in error logging, I have been able to determine that my user validation routine is receiving a Null pointer when it trys to connect to the database. I have also determined that my login servlet is executing properly. When I receive the Null pointer error, I am redirected to a failed login page, which is what is supposed to happen in such a case. I believe that I do not have the web server configured properly to connect to the database and I am not sure how to do it! Below is an excerpt from my code where the database connection occurs and the exception is detected. Any help would be appreciated!
DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
oracleConnect = DriverManager.getConnection("jdbc:oracle:thin:@" + chost + ":" + cport + ":" + csid ,u,p);
enable = true;
oracleConnect.close();
}catch(java.sql.SQLException e){processError.logError("validateUser Invalue user" + e.getMessage()); enable = false;}
catch(java.io.FileNotFoundException e){processError.logError("validate User error" + e.getMessage());}
catch(java.io.IOException e){processError.logError("evalidateUser rror File Error " + e.getMessage());}
catch(java.lang.NullPointerException e){processError.logError("validateUser error Null Pointer " + e.getMessage());}

You are not using the server's built in JDBC Connection pooling, so there is no special WebServer configuration needed to connect to a database.
If in the other hand, you want to use the built in connection pooling, then refer to this page to see how to create a connection pool
http://docs.sun.com/source/817-1831-10/agjava.html#wp1085593
Samples on how to configure and use JDBC connection pooling can be found in the sample apps
http://docs.sun.com/source/817-1833-10/pwawap.html#wp40108

Problem with maxprocs 1 on Sun One Web server 6.1

I am using sun one web server on Unix with maxprocs set to 3.
This means that there are 3 jvms running my application under 1 instance. However I have certain components like an application cache that I would like to share between these 3 processes.
Additionally is there a way to configure the server so that requests from 1 session are served by 1 process only.
I am really stuck here. Have searched in all the documentation, but in vain. Would really help if some one of the Sun Developers could answer this.
Thanks
Chetan

Elving,
It is great to hear that there is no predefined limit on number of sessions but if that's the case why the webserver always starts with 1000 allowed by default. Are there any potential performance reasons behind it?
I have your link open in my browser for a few days now as a reference because I am experimenting with different Session Managers. I am trying to find a solution for BheegaChicken to be able to accomodate several thousand simultaneous sessions for his application.
We use V6.0SP2 and SP6 and for BheegaChicken's app specifically V6.1SP2...
I have spent some time in the past looking for the answers how to handle higher then 1000 sessions capacity on one instance and that was even before V6.1 was out. I have found the following reco that talks about optimal performance for sites using threads:
http://docs.sun.com/source/816-5690-10/perf6.htm#17580
*** start qoute
Multi-Process Mode
You can configure the server to handle requests using multiple processes with multiple threads in each process. This flexibility provides optimal performance for sites using threads, and also provides backward compatibility to sites running legacy applications that are not ready to run in a threaded environment. Because applications on Windows NT generally already take advantage of multi-thread considerations, this feature applies to Unix/Linux platforms.
The advantage of multiple processes is that legacy applications that are not thread-aware or thread safe can be run more effectively in iPlanet Web Server. However, because all the Netscape/iPlanet extensions are built to support a single-process threaded environment, they may not run in the multi-process mode, and the Search plug-ins will fail on startup if the server is in multi-process mode.
In the multi-process mode, the server spawns multiple server processes at startup. Each process contains one or more threads (depending on the configuration) which receive incoming requests. Since each process is completely independent, each one has its own copies of global variables, caches, and other resources. Using multiple processes requires more resources from your system. Also, if you try to install an application which requires shared state, it has to synchronize that state across multiple processes. NSAPI provides no helper functions for implementing cross-process synchronization.
If you are not running any NSAPI in your server, you should use the default settings: one process and many threads. If you are running an application which is not scalable in a threaded environment, you should use a few processes and many threads, for example, 4 or 8 processes and 128 or 512 threads per process.
MaxProcs (Unix/Linux)
Use this directive to set your Unix/Linux server in multi-process mode, which may allow for higher scalability on multi-processor machines. If you set the value to less than 1, it will be ignored and the default value of 1 will be used.
Tuning
You can set the value for MaxProcs by:
Editing the MaxProcs parameter in magnus.conf
Setting or changing the MaxProcs value in the Magnus Editor of the Server Manager
Note You will receive duplicate startup messages when running your server in MaxProcs mode.
*** end quote
If it is not relevant anymore please explane.
I am still interested to understand which of the SessionManagers is recommended by Sun to have optimal performance for sites with high number of sessions and using threads. It is not really obvious from http://docs.sun.com/source/817-6251/pwasessn.html. On top of this that's documented just for V6.1. What about V6.0?
Thank you very much for your cooperation!
Sasha aka ttalex

Problems with Sun One Web Server 6.1 with SP1

I get errors while compiling my JSP files on SUN one Web Server which is deployed on Solaris 9. it states that cannot compile JSP pages. here is the stack trace that i get.
[03/Feb/2007:19:11:17] warning ( 354): CORE3283: stderr: java.lang.NoClassDefFoundError: com/sun/tools/javac/Main
[03/Feb/2007:19:11:17] warning ( 354): CORE3283: stderr:      at org.apache.jasper.compiler.SunJava14Compiler$JavacTask.run(SunJava14Compiler.java:207)
[03/Feb/2007:19:11:17] failure ( 354): for host 192.168.123.2 trying to GET /reports1/jsp/common/ClientInstall.jsp, service-j2ee reports: StandardWrapperValve[jsp]: WEB2792: Servlet.service() for servlet jsp threw exception
org.apache.jasper.JasperException: WEB4000: Unable to compile class for JSP
     at org.apache.jasper.compiler.Compiler.compile(Compiler.java:312)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.loadJSP(JspServlet.java:756)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.access$000(JspServlet.java:616)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:401)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:363)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:771)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:322)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:586)Please help. The Java version i am using is j2sdk1.4.2_08.

It looks like the Web Server has somehow been configured to use a JRE. Web Server requires a JDK. The following message in particular indicates that a JRE, not a JDK, is being used:java.lang.NoClassDefFoundError: com/sun/tools/javac/MainAre you using the JDK that shipped with Web Server, or did you attempt to configure Web Server to use a different JDK?

Deploying servlets in the Sun One Web Server 6.1

Friends, Please let me know how to deploy servlets in the Sun One Web Server 6.1.
Thanks in advance,
Madan.

You cannot get that behavior.
When an SSL client and server negotiate the connection, the client sends a list of all the cipher suites it supports. From that list the server will pick the most secure cipher suite which it also supports (if the server doesn't support any of the cipher suites proposed by the client, the connection establishment will fail).
RC4 (128bit) is more secure than 3DES (112 bit). Thus, a server will never pick 3DES above RC4_128 if both are valid options (i.e. when both client and server support both). If you really wanted to force use of 3DES you need to disable RC4_128 in the server (or all the clients; or both).

Disable HTTP Methods on Sun One Web Server 6.1

Similar Messages

Maybe you are looking for