Editing obj.conf manually

I was putting some content expiry objects in the obj.conf file in sun one 6.1 sp2 on solaris.
<Object ppath="*.swf">
PathCheck fn="set-cache-control" control="public,must-revalidate,max-age=3600"
</Object>
When doing the same thing from Administrative console it give me two options :
Apply changes "WITHOUT" restarting and then "WITH" restart.
How can i edit the obj.conf file and apply "WITHOUT" restarting from command line ?
Thanks

Run the reconfig script. It's in the instance's bin subdirectory.

Similar Messages

Editting the obj.conf of netscape enterprise server 3.6 to map two".so"

I have netscape enterprise server 3.6 (I know.. but cant go another option now)
I already have a application running on this server which is accessed by "www.abc.com/Application" (dummy url).
In the obj.conf file.. it is as below.
Init fn="load-types" mime-types="mime.types"
Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/AA.so"
Init fn="fun1" LateInit="yes" ui_url_prefix="Application"
This works fine....Now I have a BB.so which I want to be accessed by "www.abc.com/Application1" (dummy url).
When i edit the config file as below. It doesnt seem to work. Can someone please help.
Init fn="load-types" mime-types="mime.types"
Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/AA.so"
Init fn="fun1" LateInit="yes" ui_url_prefix="Application"
Init fn="load-types" mime-types="mime.types"
Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/BB.so"
Init fn="fun1" LateInit="yes" ui_url_prefix="Application2"
Both AA.so and BB.so in few functionalites, but otherwise are same. And I want both "www.abc.com/Application1" and "www.abc.com/Application2" to work.
Im new to this.. please excuse my ignorance.

First - You really, REALLY should be upgrading to Web Server 6.1 or Web Server 7.0 (or Open Web Server). Really.
Second - You can have multiple SAFs, but you need to make sure that you code them to avoid conflicts with function names, data structures, etc. Good luck.

Issue in iPlanet loading obj.conf file in admin console module

Dear all,
I have done following chanegs in obj.conf file to block insecure http methods,but whenever I try to access admin module of iPlanet and restart, all manual changes done in obj.conf disappears.
Only one time it asked me with message that file has been modified manually do you want to load?
but this is not happening every time.I am using iplanet 9.
Please let me know if there is any issue with this or I am missing something.
to just brief, only after trying 20 times it asked me above mentioned message
---obj.conf file contents----
<Object name="WebCon1" ppath="*/WebCon/*">
*<Client method="(GET|POST)">*
AuthTrans fn="match-browser" browser="MSIE*" ssl-unclean-shutdown="true"*
*</Client>*
*<Client method="(HEAD|PUT|TRACE|TRACK|SEARCH|INDEX|OPTIONS|DELETE|MKDIR|SHOWMETHOD|UNLINK|CHECKIN|TEXTSEARCH|SPACEJUMP|CONNECT|PATCH|PROPFIND|PROPPATCH|MKCOL|COPY|MOVE|LOCK|UNLOCK|CHECKOUT|RMDIR|ACL|VERSION-CONTROL|REPORT|UNCHECKOUT|ORDERPATCH)">*
*AuthTrans fn="set-variable" remove-headers="transfer-encoding" set-headers="content-length: -1" error="405"*
*</Client>*
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/cedera/iPlanetServer/Installation/ns-icons" name="es-internal"
PathCheck fn="unix-uri-clean"
PathCheck fn="find-pathinfo"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|POST)" type="image/gif" fn="send-file"
Service method="(GET|POST)" type="image/jpeg" fn="send-file"
Service method="(GET|POST)" type="text/css" fn="send-file"
Service method="(GET|POST)" type="application/x-javascript" fn="send-file"
Service method="(GET|POST)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|POST)" type="magnus-internal/directory" fn="send-error" path="/WebCon/WebCon/restrict.htm"
Service method="(GET|POST)" fn="wl_proxy" WebLogicHost="10.10.61.224" WebLogicPort="444" HungServerRecoverSecs="600" Debug="ALL" DebugConfigInfo="TRUE" RequireSSLHostMatch="FALSE" WLLogFile="/home/cedera/iPlanetServer/Installation/https-webcon2/logs/Log_JSP.txt" PathTrim="/WebCon" PathPrepend="/WebConverter" SecureProxy="ON" URIContainsSpace="true" ErrorPage="/home/cedera/iPlanetServer/Installation/docs/WebCon/WebCon/serviceUnavailable.htm" MaxPostSize="-1" DefaultFileName="WebCon/login.jsp" ConnectTimeoutSecs="10" ConnectRetrySecs="2" WLDNSRefreshInterval="0" TrustedCAFile="/home/cedera/iPlanetServer/Installation/https-webcon2/config/trustedcafile.pem"
AddLog fn="flex-log" name="access"
</Object>
I have added contents marked in bold manually....
but it was not picking up it from frontend...then suddenly after 20 time, it picked up these changes in admin...
but now if I am trying to change in <client> tag , but it does not recognise any new changes done manually...it loads same obj.conf...whenever i restart instance from frontend...
Edited by: sweetvish on Nov 9, 2009 9:26 PM

After making manual changes in obj.conf, have you tried clicking the 'Apply' link in admin console and then choosing 'Load configuration Changes' option?

Obj.conf configuration behaving differently

hi I have Sun Web Server update 8 installed which will talk to my weblogic server on which I have deployed two applications. The problem is that when I try and access one application from Sun web server it goes fine, however when I try and access the other application I will get a message "Not Found
The requested object does not exist on this server. The link you followed is either outdated, inaccurate, or the server has been instructed not to let you have it. "
To mention here, the application which I can access finally goes in to display a gif whereas the one which I am getting this error for goes on to display something like this ../manager/jsp/index.jsp
In the logs its shows a message like:
[17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: executing method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service"
[17/Sep/2010:21:16:56] warning (16244): for host 135.209.101.44 trying to GET /manager, send-file reports: HTTP4142: can't find /opt/app/p1cmt1w1/Sun/SJWebServer7u8/https-p1cmt1w1.bhdc.att.com/docs/manager (File not found)
[17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service" returned -1 (REQ_ABORTED)
The obj.conf definition is like this:
==================================
"obj.conf" 55 lines, 1799 characters
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# You can edit this file, but comments and formatting changes
# might be lost when you use the administration GUI or CLI.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="*/Calendar/" name="WLSTEST"
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
# You can edit this file, but comments and formatting changes
# might be lost when you use the administration GUI or CLI.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/app/p1cmt1w1/Sun/SJWebServer7u8/lib/icons" name="es-internal"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="send-precompressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object name="Campaign" ppath="*/Campaign/*">
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
<Object name="manager" ppath=*/manager/*>
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
=================================================================
The magnus.conf is like this :
# Copyright 2008 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
Init fn="load-modules" shlib="libj2eeplugin.so"
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib="/opt/app//Sun/SJWebServer7u8/https-abcd.xyz.net/plugins/lib/libproxy_61.so"
Init fn="wl_init"
Please help me someone on this.

please upgrade to 7.0.9 as it includes fix for potential security vulnerabilities. you can download oracle iplanet web server 7.0.9 * formerly sun one / sun java system web server * from here -http://bit.ly/aPphqr
this is what you could do
edit <install-root>/https-<hostname>/config/obj.conf or <install-root>/https-<hostname>/<hostname>-obj.conf (depending on your configuration)
and add the following
<Object name="default">
NameTrans fn="assign-name" from="<context-root-of-app1>" name="app1"
NameTrans fn="assign-name" from="<context-root-of-app2>" name="app2"
</Object>
<Object name="app1">
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
<Object name="app2>
Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
</Object>
and comment out these existing object configurations.
#<Object name="Campaign" ppath="/Campaign/">
#Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
#</Object>
#<Object name="manager" ppath=/manager/*>
#Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
#</Object>
and now save this file and can either run bin/reconfig (for dynamically reloading the configuration changes without any server downtime) or bin/restart -> for simply restarting the server and verify if this works out for you
if it does address your concern then you might have to manually pull your manual configuration changes into admin config repository by running
<install-root>/bin/wadm pull-config --user=admin --config=<hostname> <hostname>
for more information on what how to configure web server 7, please refer to obj.conf guide.
http://docs.sun.com/app/docs/doc/819-2630/gbysz?l=en&q=security&a=view
http://docs.sun.com/app/docs/doc/819-2630/abvar?l=en&q=security&a=view
http://docs.sun.com/app/docs/doc/819-2630/abuik?l=en&a=view
http://docs.sun.com/app/docs/doc/819-2630/gdaer?l=en&a=view
hope this helps

Configuring wl-proxy for iPlanet obj.conf

Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension) plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?


The Debug option was added in a fairly recent service pack so make sure you are using the plugin from Service
          Pack 8 (I am assuming WLS 5.1 here...).
          As for Netscape, try putting all of the parameters on one line (with no line continuation characters and no
          white space in the cluster list). Netscape, especially on NT is very sensitive to how the obj.conf file is
          formatted. Try the one attached.
          Hope this helps,
          Robert
          Ganapur Srinivas wrote:
          > Hello,
          >
          > Following is the contents of the obj.conf file, which we are using to set up the
          > iPlanet for clustered environment of Weblogic. With the below settings we are able
          > to access the JSP files, but not able to pass the Servlet request via the Proxy plug-in.
          > Also the Debug=ON option is not working properly. Of the two machines the request
          > is going to only one machine, if that particular machine is not on the net, the request
          > is not directed to the live machine which has weblogic instance running.
          >
          > If somebody already running Weblogic clustering successfully please let us know if
          > the following settings are okay in obj.conf:
          >
          > ====================START of obj.conf
          > # Sun Netscape Alliance - obj.conf
          > # You can edit this file, but comments and formatting changes
          > # might be lost when the admin server makes changes.
          >
          > # Use only forward slashes in pathnames--backslashes can cause
          > # problems. See the documentation for more information.
          >
          > Init fn="load-modules" funcs="wl-proxy,wl-init"\
          > shlib=C:/Netscape/Server4/https-MyMachine/proxy36.dll
          > Init fn="wl-init"
          >
          > Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip%
          > - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status%
          > %Req->srvhdrs.content-length%"
          > Init fn="load-types" mime-types="mime.types"
          > Init disable="yes" fn="dns-cache-init"
          >
          > <Object name="default">
          > NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          > NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          > NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
          > NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
          > NameTrans fn="document-root" root="D:/Webserver/examples"
          > Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
          > WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001"
          > ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm"
          > Debug=ON
          > PathCheck fn="nt-uri-clean"
          > PathCheck fn="check-acl" acl="default"
          > PathCheck fn="find-pathinfo"
          > PathCheck fn="find-index" index-names="index.html"
          > ObjectType fn="type-by-extension"
          > ObjectType fn="force-type" type="text/plain"
          > Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
          > Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
          > Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
          > AddLog fn="flex-log" name="access"
          > </Object>
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001" PathTrim="/weblogic"
          > </Object>
          >
          > <Object name="cgi">
          > ObjectType fn="force-type" type="magnus-internal/cgi"
          > Service fn="send-cgi"
          > </Object>
          >
          > <Object name="es-internal">
          > PathCheck fn="check-acl" acl="es-internal"
          > </Object>
          >
          > ====================END of obj.conf
          >
          > sam nemati <[email protected]> wrote:
          > >Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension)
          > plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?
          # Sun Netscape Alliance - obj.conf
          # You can edit this file, but comments and formatting changes
          # might be lost when the admin server makes changes.
          # Use only forward slashes in pathnames--backslashes can cause
          # problems. See the documentation for more information.
          Init fn="load-modules" funcs="wl-proxy,wl-init" shlib="C:/Netscape/Server4/https-MyMachine/proxy36.dll"
          Init fn="wl-init"
          Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
          Init fn="load-types" mime-types="mime.types"
          Init disable="yes" fn="dns-cache-init"
          <Object name="default">
          NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
          NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
          NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
          NameTrans fn="document-root" root="D:/Webserver/examples"
          Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm" Debug=ON
          PathCheck fn="nt-uri-clean"
          PathCheck fn="check-acl" acl="default"
          PathCheck fn="find-pathinfo"
          PathCheck fn="find-index" index-names="index.html"
          ObjectType fn="type-by-extension"
          ObjectType fn="force-type" type="text/plain"
          Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
          Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
          Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
          AddLog fn="flex-log" name="access"
          </Object>
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" PathTrim="/weblogic"
          </Object>
          <Object name="cgi">
          ObjectType fn="force-type" type="magnus-internal/cgi" Service fn="send-cgi"
          </Object>
          <Object name="es-internal">
          PathCheck fn="check-acl" acl="es-internal"
          </Object>

Reference DOCUMENT_ROOT in obj.conf

In server.xml <document-root> is specified for each virtual server. How do I reference this value later in obj.conf file?
Here is the idea. I need a multiple virtual servers to share a common obj.conf file, and I want to easily add new virtual servers with minimal server.xml editing. (This minimal edit would be to add <object-file> line). Then in obj.conf I need to reference the document root for current virtual server. Specifically, I need to check the requested URI for existence like this:
<If $uri =~ '^/(.*)$' and !(-f"$docroot/$1")>
So how do I place <document-root> from server.xml into that $docroot variable? Would be great if this variable was predefined, but it is not.

Thank you for your help, I use SJSWS update 4, but I sure will upgrade.
As for configuration, I need to do the opposite thing. Once again.
I don't want all virtual servers to use the same document root. I want each one to have it's own document root. To make the creation of new virtual servers as quick as possible I need it to happen like this:
1. I add a virtual server with Admin Console (web interface). I specify document root with this interface.
2. I force it to use my-obj.conf by editing server.xml manually and adding <object-file> directive.
3. Deploy the configuration.
That is all. No other configuration steps should be performed.
Now the problem follows. my-obj.conf needs to know the document root of whatever virtual server it is invoked this time, and document root needs to be stored in some variable so something (file system path, exactly) could be tested against it. Recall the line:
<If $uri =~ '^/(.*)$' and !(-f"$docroot/$1")>
When the server runs through my-obj.conf, it sure knows the document root since it is set in <document-root> directory which Admin Console creates automatically in server.xml.
So it would be great if there was a predefined variable $docroot which I could use in my-obj.conf. I can see from the list you provided that there is no such a variable. I know that I could define one by adding <variable> directive to server.xml, but it's redundant, and I want to keep the creation of a virtual server as simple as possible.
I also tried to refer to $env{'DOCUMENT_ROOT'} in my-obj.conf, somehow it happens to be not defined, while the documentation states that $env includes CGI variables (is it fixed in recent iPlanet?)
So my last chance: is there a SAF that would put document root into a variable so it can be read?
The predefined variables really lack for documentation. What members do $env, $reqpb and rq have? Could not find it anywhere.

How can I get URL forwarding working without touching the obj.conf

It won't work right after it is set up from the Admin server. I have to manually edit the obj.conf so that the [NameTrans fn="redirect"] lines are ahead of any other lines NameTrans lines. Why the Admin server cannot do this when adding the "redirect" lines to obj.conf, or did I miss anything when I config the URL forwarding?
SunOne WebServer6.1 SP4

This is a full copy of the obj.conf file, right after I set up a URL Forwarding. The URL Forwarding is added as the 3rd [NameTrans] line. I have to manually move it as the 1st [AuthTrans] line, else it won't work.
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
# Use only forward slashes in pathnames--backslashes can cause
# problems. See the documentation for more information.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="c:/Sun/WebServer6.1/ns-icons" name="es-internal"
NameTrans fn="redirect" from="/AuxFiles" url-prefix="http://pdiweb.pdi.sci.com:8080/AuxFiles"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="nt-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
PathCheck fn="set-cache-control" control="private"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log" name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>

Nsapi in cluster (obj.conf file conflict)

Hi,
          I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          running with the plugin...
          When I am on non-cluster environment, everything is just fine, but on
          cluster, IPlanet is starting, but I can not see anything on the browser
          (page cannot be displayed), I have attached my obj.conf file. Please let
          me know ASAP what I am doing wrong...
          Regards
          GOD BLESS
          Chris
          ## ------------- BEGIN SAMPLE OBJ.CONF CONFIGURATION ---------
          # (no cluster)
          # The following line locates the NSAPI library for loading at
          # startup, and identifies which functions within the library are
          # NSAPI functions. Verify the path to the library (the value
          # of the shlib=<...> parameter) and that the file is
          # readable, or the server will fail to start.
          Init fn="load-modules" funcs="wl-proxy,wl-init"\
          shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          Init fn="wl-init"
          # Configure which types of HTTP requests should be handled by the
          # NSAPI module (and, in turn, by WebLogic). This is done
          # with one or more "<Object>" tags as shown below.
          # Here we configure the NSAPI module to pass requests for
          # "/weblogic" to a WebLogic Server listening at port 7011 on
          # the host ags-dtcXXXX.agsolutions.co.uk that is your localhost (e.g:
          ags-dtc1724) .
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          PathTrim="/weblogic"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "WLS" to weblogic server on port 7011.
          <Object name="eutility" ppath="*WLS*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # NSAPI's configuration to pass request for any file begining with
          # "wls" to weblogic server on port 7011.
          <Object name="eutility1" ppath="*wls*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/EUtility"
          </Object>
          # Here we configure the plug-in so that requests that
          # match "/servletimages/" will be handled by the
          # plug-in/WebLogic.
          <Object name="si" ppath="*/servletimages/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          # This Object directive works by file extension rather than
          # request path. To use this configuration, you must also add
          # a line to the mime.types file:
          # type=text/jsp exts=jsp
          # This configuration means that any file with the extension
          # ".jsp" will be proxied to WebLogic. Then you must add the
          # Service line for this extension to the Object "default",
          # which should already exist in your obj.conf file:
          <Object name=default>
          NameTrans fn=pfx2dir from=/ns-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn=pfx2dir from=/mc-icons\
          dir="/usr/Netscape/Server4/ns-icons"
          NameTrans fn="pfx2dir" from="/help" dir=\
          "/usr/netscape/server4/manual/https/ug"
          NameTrans fn=document-root root="/usr/eutilweb"
          Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
          WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011 PathPrepend=/jspfiles
          PathCheck fn=unix-uri-clean
          PathCheck fn="check-acl" acl="default"
          PathCheck fn=find-pathinfo
          PathCheck fn=find-index
          index-names="index.html,index.htm,wls.htm,wls.html,home.html"
          ObjectType fn=type-by-extension
          ObjectType fn=force-type type=text/plain
          Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
          Service method=(GET|HEAD) \
          type=magnus-internal/directory fn=index-common
          Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
          AddLog fn=flex-log name="access"
          </Object>
          # The following directive enables HTTP-tunneling of the
          # WebLogic protocol through the NSAPI plug-in.
          <Object name="tunnel" ppath="*/HTTPClnt*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          </Object>
          ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]


          Since IPlanet is started ( as per your email) , are you able to access
          index.html page?
          If yes, add the following debug flag in obj.conf and point your browser
          to
          http://[NES-host]:[port]/weblogic/index.html?__WebLogicBridgeConfig (2
          under scores)
          <Object name="weblogic" ppath="*/weblogic/*">
          Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
          PathTrim="/weblogic" DebugConfigInfo="ON"
          </Object>
          Does the screen shot shows primary & secondary server info?
          what's the build date/time on it?
          PS: Also make sure there aren't any extra spaces in it.. Sometimes NES
          is very much picky..
          Kumar
          starssoul wrote:
          > Hi,
          >
          > I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
          > running with the plugin...
          > When I am on non-cluster environment, everything is just fine, but on
          > cluster, IPlanet is starting, but I can not see anything on the
          > browser
          > (page cannot be displayed), I have attached my obj.conf file. Please
          > let me know ASAP what I am doing wrong...
          > Regards
          >
          > GOD BLESS
          > Chris
          >
          >
          >
          >
          > Init fn="load-modules" funcs="wl-proxy,wl-init"\
          > shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
          > Init fn="wl-init"
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
          > PathTrim="/weblogic"
          > </Object>
          >
          >
          > ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
          [att1.html]

PPATH directive ignored in obj.conf

I just upgraded to 7.0 u3 from 6.1 sp3. Now it appears as if my ppath directives are ignored. This is supposed to use basic authentication. It works in 6.1 but not in 7.0. below is what my obj.conf looks like. Any help would be greatly appreciated.
<Object name="reverseproxyspeller">
ObjectType fn="force-type" type="magnus-internal/passthrough"
Service fn="service-passthrough" servers="http://prod-fs.alumniconnections.com:8080"
</Object>
<Object name="default">
<Client uri="*olclogin.app">
AuthTrans fn="set-variable" keep-alive="disabled" http-downgrade="1.0"
</Client>
AuthTrans fn="olc-cookie-auth"
AuthTrans fn="nsOLCauth"
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" from="*/aspell_setup.php" name="reverseproxyspeller"
NameTrans fn="assign-name" from="*/spell-check-logic.php" name="reverseproxyspeller"
NameTrans fn="assign-name" from="*/spell-check-savedicts.php" name="reverseproxyspeller"
NameTrans fn="nsOLCsetrc"
NameTrans fn="strip-params"
NameTrans fn="nsOLCrestrict"
NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/app.sph/mydirectory.app"
NameTrans fn="substring-replace" replace="/directory.cgi" search="/app.sph/old.app"
NameTrans fn="substring-replace" replace="/memberupdate.cgi" search="/app.sph/memberupdate.app"
NameTrans fn="substring-replace" replace="/networking.cgi" search="/app.sph/networking.app"
NameTrans fn="substring-replace" replace="/olclogin.cgi" search="/app.sph/olclogin.app"
NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/mydirectory.cgi"
NameTrans fn="substring-replace" replace="/directory.cgi" search="/old.cgi"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/WWW/ns-home/lib/icons" name="es-internal"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,index.htm,index.cgi,index.jsp,home.html"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service fn="send-cgi" type="magnus-internal/cgi" user="$user" group="$group" dir="$dir" chroot="$chroot" nice="$nice"
Service fn="shtml_send" type="magnus-internal/parsed-html" method="(GET|HEAD)" opts="noexec"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service fn="sapphire-form" method="(GET|POST)" type="magnus-internal/sapphire"
Error fn="error-j2ee"
Error reason="Unauthorized" fn="query-handler" path="/usr/olc/cgi-bin/invalidlogin.cgi"
Error reason="Server Error" fn="query-handler" path="/WWW/olc/cgi-bin/servererrorhandler01.cgi"
Error reason="Not Found" fn="send-error" path="/WWW/ns-home/docs/errorpages/notfound.html"
AddLog fn="flex-log"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/pub/*">
PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/admin/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/admin/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</Object>
<Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
</Object>

Add in default object as the first PathCheck directive (just above PathCheck fn="uri-clean")
<If $ppath =~ "/WWW/ns-home/docs/olc/pub/" or $ppath =~ "/WWW/ns-home/docs/olc/membersonly/" or $ppath =~ "/WWW/ns-home/docs/olc/admin/">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</If>Assuming your Web Server document root is "/WWW/ns-home/docs/" you can try this as well:
<If $uri =~ "/olc/pub/" or $uri =~ "/olc/membersonly/" or $uri =~ "/olc/admin/">
PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
</If>Edited by: mv on Oct 10, 2008 8:13 AM

$doc root Variable use in obj.conf file of iPlanet6 SP2

Is there any way I can build expressions in obj.conf file using $docroot variable?
I have the following configured in the obj.conf now:
<<Object name="default">
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="/home/ns6.0SP2/https-site/docs/servlet" name="ServletByExt"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/cgi-bin" dir="/home/ns-home/https-site/cgi-bin" name="cgi"
NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
NameTrans fn="document-root" root="$docroot"
</Object>
I would like to have something like this:
<Object name="default">
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="$docroot/servlet" name="ServletByExt"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/cgi-bin" dir="$docroot/../cgi-bin" name="cgi"
NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
NameTrans fn="document-root" root="$docroot"
</Object>
I have tried the code above but unfortunatelly it does not work - I get "Not Found
The requested object does not exist on this server." error.
I need this to specify different $docroot-s for different URLs but keep the same default object for all of them.
Is there any other way to implement this?
Thank you very much for your cooperation!
Sasha

Yes, this technique does work.
However, in your example, the NameTrans fn="pfx2dir" from="/cgi-bin" directive will probably not work as you expect. This is because the PathTrans fn="unix-uri-clean" directive (which is written to all obj.conf files iWS creates) will reject all paths that contain "..". For more information on the unix-uri-clean SAF, refer to the NSAPI Programmer's Guide at http://docs.iplanet.com/docs/manuals/enterprise/50/nsapi/03_direc.htm#18613

Obj.conf.template ignored?

Using SJSWS 6.1sp2...
I have made some customizations to obj.conf.template file in $SERVER_ROOT/bin/https/install/misc, but the instance creation process in the admin server seems to ignore this. I confirmed that this occurs on SJSWS 6.1sp1 as well. Any hints?
-chris

sorry for the late reply:
Basics of Server Operation in Sun ONE Application Server 7 Administrator's Configuration File Reference document. The obj.conf section mentions:
"The file named obj.conf that lacks a prefix is a template that Sun ONE Application Server uses to create obj.conf files for each virtual server. Editing this file does not affect any existing virtual servers, but does affect any subsequently created virtual servers."
thanks,
V.

Example of obj.conf file using dynamic headers/footers

Just a quick query. I'm trying to use dynamic headers/footers and I've read
the notes on:
http://docs.iplanet.com/docs/manuals/enterprise/50/ag/essearch.htm#26999
I cant seem to get it to work. Could you send me an example of an obj.conf
file so I can get mine to work?
Many Thanks in Advance,
Mian Amar Ahmad

Thanks. I followed the guidance of the 3 links you provided. I thought what I coded in the obj.conf was working.
<If $uri =~ "^/dynamic/(.*)$">
NameTrans fn="restart" uri="/$1?$query"
</If>
But, I later found that this fails when the method is a GET and the query-string is null and when the method is a POST. I need all GETs and POSTs starting with "/dynamic" to have it stripped and "restarted". So, I modified my original config to make POSTs work. So now I have the following code:
<If $method eq "POST" and $uri =~ "^/dynamic/(.*)$">
NameTrans fn="restart" uri="/$1"
</If>
<If $method eq "GET" and $uri =~ "^/dynamic/(.*)$">
NameTrans fn="restart" uri="/$1?$query"
</If>
Now, I'm left with trying to get it working for GETs where the query-string is null. I'm not quite sure how to do this? Do you have any suggestions? It seems like the code is getting pretty crazy just to perform this functionality, Is there a simplier way that I am not seeing?

Why doesn't iplanet 4.19 recognize a line obj.conf "AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true""?

We add this line for fixing "page can not be displayed" problem we suffer. But After apply it below "<Object name="default">", according to the document. Admin console shows, "Unknown: AuthTrans: match-browser" in red. Can anybody give me advice to this?Thanks.

I have the same problem.
Can anybody help?
Which version of iPlane I need to use following directive in "obj.conf":
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true".
Is there any alternative of this directive for iPlanet 4.1?
Thanks.

[solved] Editing makepkg.conf (x86_64)

Hello everyone,
I just set up my first Arch 64bit-system, so I want get to know its abilities and advantages a bit better for my everyday work.
Before installing any more stuff, I'm actually editing makepkg.conf, because I'd like to have the CPU usage optimzed, though I don't expect any significant performance boost -- I just want to learn about it and then use it. So far I read the specific Wikis Arch, Gentoo, and of course the Arch64 FAQ. -- However, tuning this file would only affect compiling PKGBUILDs from the AUR, or from other sources, because I'll mostly use the precompiled packages as they are, I suppose.
The CPU is a Xeon Kentsfield, looking like an early "quad-core, appearing as a single core" to me:
Wikipedia wrote:Intel released relabeled versions of its quad-core (2x2) Core 2 Quad processor as the Xeon 3200-series (,,,), these models only support single-CPU operation ...
Four processors are found anyway:
# cat /proc/cpuinfo
processor : 0
model name : Intel(R) Xeon(R) CPU X3210 @ 2.13GHz
physical id : 0
siblings : 4
core id : 0
cpu cores : 4
processor : 1
physical id : 0
siblings : 4
core id : 2
cpu cores : 4
processor : 2
physical id : 0
siblings : 4
core id : 1
cpu cores : 4
processor : 3
physical id : 0
siblings : 4
core id : 3
cpu cores : 4
So I wonder: how would this quad-or-no-quad appear or have to be adressed in a (desktop) system monitor -- as 1, 4 or even 2 (as it also a "2x2") CPUs?
The related section of my makepkg.conf actually reads:
CARCH="x86_64"
CHOST="x86_64-unknown-linux-gnu"
CFLAGS="-march=native -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
CXXFLAGS="${CFLAGS}"
#MAKEFLAGS="-j2"
Well, I admit that I'm not sure that I got everything in details. But I guess with this I'd be able to use any PKBGUILD in the AUR (or provide my own that others could use without risk), right?
Last, what about the MAKEFLAGS? The wiki says,
Typically -j2, plus 1 for each additional core/processor is an adequate choice.
If the Xeon is a "real" quad-core (see above), it should rather be
MAKEFLAGS="-j5"
as in this case there are three additional cores, right?
Last edited by cameo (2012-08-19 23:56:24)

I see.
Alternatively, for i686 compiling on this very machine I probably must get to grips with this stuff (if I'm not mixing something up); well, that's a future plan.
Thanks very much anyway.
Hm, regarding that system monitoring matter, I've just a feeling, different programs could just use different hooks for showing the processor loads. I mean if that Xeon is physically a quad, but "acting" like a single, some could maybe show just 1 CPU, and others 4. -- Since my topic here is mainly about editing makepkg.conf, I'd better discuss this in detail in another thread later, if necessary. (But of course, if somebody has got some information about this, please let me know.)
Seems to me, there's nothing more for me to question here then, so I'll mark this as solved.

Confused - obj.conf

I am attempting to configure Web Server 6.1 to support an application that uses HTTP 1.0 and expects a content-length header in the response. The response is generated from a php script (index.php). The php script does not generate the header itself.
Here is my modified obj.conf:
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn=pfx2dir from=/mc-icons dir="/opt/SUNWwbsvr/ns-icons" name="es-internal"
NameTrans fn=document-root root="$docroot"
PathCheck fn=unix-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.php"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service fn="match-browser" browser="*" http-downgrade="1.0" UseOutputStreamSize="8192"
Service fn="php5_execute" type="magnus-internal/x-httpd-php"
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
Service method=TRACE fn=service-trace
Error fn="error-j2ee"
#AddLog fn=flex-log name="access"
AddLog fn=flex-log name="extended"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
What is confusing is:
1. Why do I need the http-downgrade=1.0 twice - once in AuthTrans and once in Service?
2. How come this works at all since the server should stop at the first Service entry, i.e. the match-match browser one and not call the PHP.
3. Why does this only work for GET and not for POST ??????
Any help would be greatly appreciated.

You don't see the UseOutputStreamSize syntax error when you have the AuthTrans directive because only the first match-browser directive to match the browser will actually be executed. I think you should remove your Service fn="match-browser" directive altogether. Instead, you could use the following:<Object name="default">
AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
Service fn="php5_execute" type="magnus-internal/x-httpd-php" UseOutputStreamSize="8192"
</Object>Neither UseOutputStreamSize nor http-downgrade are specific to GET. Both work with POST. If you don't get a Content-length: header on POST responses, it may be because the content is more than 8192 bytes in length. Try changing UseOutputStreamSize="8192" to UseOutputStreamSize="65536".

Editing obj.conf manually

Similar Messages

Maybe you are looking for