Iplanet as Proxy

We want to implement Iplanet as proxy server to IIS.
i.e All HTTP request recevied on Iplanet web server should forwarded to IIS server.
How can we implement this.Any plugins required ?
Iplanet Version 6.0 and above
IIS 5.1 on Windows 2000 Server.
Thanks in advance.

below is complete obj.conf
# Use only forward slashes in pathnames--backslashes can cause
# problems. See the documentation for more information.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn=pfx2dir from=/mc-icons dir="C:/Sun/WebServer6.1/ns-icons" name="es-internal"
NameTrans fn=document-root root="$docroot"
NameTrans fn="assign-name" from="/report(|/*)" name="ServiceProxy"
PathCheck fn=nt-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.html,home.html,index.jsp"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
Service method=(GET|HEAD|POST|PUT) type="*/*" fn="service-passthrough" servers="http://<targetIP>"
Service method=TRACE fn=service-trace
Error fn="error-j2ee"
AddLog fn=flex-log name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="send-compressed">
PathCheck fn="find-compressed"
</Object>
<Object name="compress-on-demand">
Output fn="insert-filter" filter="http-compression"
</Object>
<Object name="ServiceProxy">
Service fn="service-passthrough" servers="http://<targetIP>"
</Object>
if i remove this entry
"Service method=(GET|HEAD|POST|PUT) type="*/*" fn="service-passthrough" servers="http://<targetIP>"
proxy doesn't work it looks for files in $docroot.
Error
"[18/Jul/2005:15:18:00] warning ( 2224): for host 10.50.31.119 trying to GET /report, send-file reports: HTTP4142: can't find C:/Sun/WebServer6.1/docs/report (File not found)"
Thanks

Similar Messages

  • '-1' bytes in log file - iPlanet Web Proxy Server 3.6

    I'm running iPlanet Web Proxy Server 3.6, and getting strange results in log file using extended format. Where the number of bytes should be (c1 - the content-length sent to the client by the proxy).
    I regularly get a '-1' instead of the number of bytes. Anyone tell me where this is coming from and how to stop it?

    Someone in the Web Proxy Server forum might. I guess you accidentally posted in the Web Server forum. However, if your question is time- or business-critical, you should probably contact Sun directly: http://www.sun.com/support

  • IPlanet Web Proxy 3.6 Truncating some web pages

    I am having problems with a few pages that are being truncated by iPlanet Web Proxy Server 3.6. They work fine when not using a proxy and they work fine through the proxy if I download it and then post that page to one of my own servers. Here is an example page here:
    http://store.apple.com/1-800-MY-APPLE/WebObjects/AppleStore.woa/7200605/wo/741F3WQ4MG5p3aLeQyTxEZe9L7S/7.?p=0
    If that changes, you can go to http://store.apple.com and drill down until you are customizing a machine.
    I've been using this server for years and this is the first problem of this nature I've had. Any help would be much appreciated.

    I tested the issue on 3.6 SP8 and it appears to work.

  • Upgrade question (iPlanet Web Proxy Server)

    Hello List,
    What is the procedure for upgrading iPlanet Web Proxy Server 3.6 (beta)
    to iPlanet Web Proxy Server 3.6 on Solaris 2.8?
    Thank you in advance.
    - Andrew Petrov.

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • Oracle iPlanet Web Proxy Server 4.0.14 not getting started.

    bash-3.00# ./start
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    Oracle iPlanet Proxy Server 4.0.14 B06/08/2010 05:46
    failure: CORE3170: Configuration initialization failed: Error running init function load-modules: dlopen of /export/home/Oracle_Proxy/bin/proxy/lib/libj2eeplugin.so failed (ld.so.1: proxyd: fatal: libjvm.so: open failed: No such file or directory)
    bash-3.00# uname -r
    5.10
    bash-3.00# uname -a
    SunOS sunfire-v240 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire-V240
    bash-3.00#
    The web proxy server version is 4.0.14 and the package i used is "Oracle-iPlanet-Web-Proxy-Server-4.0.14-sparc.zip"
    Please help me. If any other information is needed, please let me know.

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • Migrate certificate 3.x to Oracle iPlanet Web Proxy Server 4.0.20

    Hi
    I try to migrate from Sun iPlanet Web Proxy Server(SPWPS) 3.6 to Oracle iPlanet Web Proxy Server(OPWPS) 4.0.20 and I have some problem.
    I have an instance in SPWPS-3.6 with SSL certificate, when I migrate it to OPWPS-4.0.20 using the admin interface, the certificate
    is not migrate with this error message :
    Migrating Keys and Certificates...
    [Error] The password entered for the key is not valid
    Assimilation failed.
    But I am sure to enter the right password.
    After that I manage the new instance in administration interface, and in Security Panel, there is a choice to "Migrate 3.x certificate"
    I try this, but I get this error message
    Incorrect Usage
    The password entered is not valide
    Can somebody help me to resolve this problem ?
    Thanks in advance.

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • Iplanet Web Proxy Server 4.0.19 error 400

    Getting error 400 after upgrading Iplanet Web Proxy 4.0.19
    Message from Iplanet Web Proxy 3.6 - working properly
    Iplanet Web Proxy 3.6 SP12
    202.123.21.57 - - [26/Apr/2013:20:21:05 +0400] "POST /as1.html HTTP/1.1" 200 58 200 58 12 12 309 52 427 19 0 DIRECT FIN FIN DO-NOT-CACHE
    197.226.57.153 - - [26/Apr/2013:20:21:16 +0400] "GET /AA8002.html?^CfSb_AA HTTP/1.1" 200 29 200 29 - - 255 52 370 19 0 DIRECT FIN FIN DO-NOT-CACHE
    197.226.57.153 - - [26/Apr/2013:20:21:16 +0400] "GET /AA8003.html?^CfSb_AA HTTP/1.1" 200 0 200 - - - 255 52 370 19 0 DIRECT FIN FIN DO-NOT-CACHE
    Message from Iplanet Web Proxy 4.0.19
    Iplanet Web Proxy 4.0.19
    202.123.21.57 - - [26/Apr/2013:20:24:57 +0400] "POST /as1.html HTTP/1.1" 200 58 200 58 12 12 315 208 562 19 0 DIRECT FIN FIN DO-NOT-CACHE
    202.123.21.57 - - [26/Apr/2013:20:24:57 +0400] "-" 400 - - - - - - - - - - - - - -
    197.226.57.153 - - [26/Apr/2013:20:25:14 +0400] "-" 400 - - - - - - - - - - - - - -
    197.226.57.153 - - [26/Apr/2013:20:25:14 +0400] "-" 400 - - - - - - - - - - - - - -
    Any help
    Manoven

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • Bug Report: JSSE 1.0.2 & iPlanet-Web-Proxy-Server/3.6

    When tunneling through iPlanet-Web-Proxy-Server/3.6 we get a "Socket Closed" exception during the handshake (right after overlaying the tunnel). I got this problem with HP-UX. My browser works fine with that proxy so the problem isn't the proxy. And my code works fine with every other proxies. This proxy does return HTTP 1.0 so this well known issue isn't related.
    Anyone from Sun can confirm this issue ?
    Anyone else got this bug ?
    Thanks in advance.
    Fran�ois

    Hi all,
    When you say tunnelling, are you referring to code similiar to the code in JavaWorld Tip 111?
    I am currently trying to debug some issues with that code myself. I get similiar errors when tunnelling through a proxy.
    The download works correctly when a HttpsURLConnection is used to connect directly to the same site.
    I am using a squid-cache as my test proxy, so I am not sure if the proxy is the problem. (assuming we are talking about the same issue)
    I have noticed that a V3 site certificate seems to be more likely to fail though. I have not found a site using a V1 certificate where the tunnelling has failed.
    We are also discussing what I think is the same issue in the thread "HTTPS tunneling and V3 certificates".
    I have been trying to get this stuff working for a few months now.

  • IPlanet Web Proxy Server 3.6 and emptying out the cache.

    Hello.
    I'm wanting to empty out our proxy server's cache in an attempt to resolve one of our users help desk problems - a web site they are accessing is not loading correctly when going through the proxy server, bypassing the proxy server works.
    The problem is that the technician who implemented our iPlanet Web Proxy Server 3.6 has left the company and no one else is aware of how to do this. Can anyone advise of what has to be done to achieve it? Thank you.
    Kind regards,
    Jimmey.

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • IPlanet Web Proxy Server 3.6 SP 5 Persistent Connection doesn't work

    I use iPlanet-Web-Proxy-Server/3.6-SP5 on Soloaris. and trying to use persistenet connection functions in forward proxy through setting keep alive to "ON". But I found this functions doesn't work at all. The following trace is the HTTP Header info i got from receiver.
    1. The HTTP Header info without using Proxy Server
    Request headers :
    proxy-authorization: Basic YXBwLWVtcXVzZXI6MTIzNDU2Nzg=
    connection: Keep-Alive
    proxy-connection: Keep-Alive
    server: IBM WebSphere MQ internet pass-thru V1.3.2
    accept: application/octet-stream
    host: 10.1.13.43:1414
    user-agent: 10.1.72.254:1414
    content-type: application/octet-stream
    content-length: 132
    accept-encoding: identity
    2. The HTTP Header info using Proxy Server
    Request headers :
    server: IBM WebSphere MQ internet pass-thru V1.3.2
    accept: application/octet-stream
    host: 10.1.72.254:1414
    user-agent: 10.1.72.254:1414
    content-type: application/octet-stream
    content-length: 132
    accept-encoding: identity
    date: Mon, 06 Sep 2004 18:04:12 GMT
    forwarded: by http://iaccess.mor.cr:8085 (iPlanet-Web-Proxy-Server/3.6-SP5)
    via: 1.1 S1PS,1.1 S1PS
    I found Kepp-Alive information ( "connection: Keep-Alive" and " proxy-connection: Keep-Alive")
    was taken out by proxy server.
    Is a proxy server bug? Can I do something to make it work?
    Regards,
    songtao

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • Migration from iPlanet Web Proxy to ISA 2000

    Hi,
    I'm doing a project to migration from iPlanet Web Proxy 3.5 (AIX based) to ISA 2000 (Windows 2000). Anyone have experience can give me some idea to plan this migration?
    Which file in AIX iPlanet proxy store all the Filter URLs (Black list) ? And which file store all the users, groups with permissions?
    If you can refer me some "How to" documentation, I appreciate your help.
    Vince2008

    sriram already answered this pretty well, but as someone having been in the same situation (migrating from 6.0sp6 to 6.1sp8 a few months ago) I thought I'd chime in.
    obj.conf is not an issue whatsoever, since this file does not change in any way between the versions. This was a very nice discovery, and made our work a lot easier. :)
    magnus.conf is still pretty much the same, and using the migration tool in 6.1 will migrate server.xml and all other files properly, so that is absolutely the easiest way, if you have only a couple of configs. Us, we used it to generate a new template to see all changes, and then updated our internal configuration templates with the new look and generated all files on our own from there.
    You will need to modify magnus.conf manually afterward and update the path to the wlproxy though, since you should use proxy61.dll/so rather than proxy36.
    There are also quite a lot of entries in magnus.conf that are deprecated in 6.1, but still kept by the migration tool. Doesn't really hurt in any way, but that is my current task - cleanup.
    Regarding rollback, that depends on how you migrate. We wanted to use the same ports as well as windows service names (to avoid having to update all scripts), so we had to uninstall 6.0 before installing 6.1. But really, the possibilities you have here are so strictly decided by your network setup, uptime requirements, etc, that it is hard for anyone on the outside to answer.
    Edited by: David.Eriksson on Aug 18, 2008 1:54 AM

  • Is iPlanet Web Proxy Server support OpenLdap authentication ?

    Do you know Is iPlanet Web Proxy Server support OpenLdap authentication ?
    Thanks
    Regards,

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • IE 6.0 seems not compatible with iplanet web proxy server 3.6

    We have Iplanet Web Proxy Server V3.6 on AIX 4.3.3, and is trying to roll out IE browser V6.0. And is experience following problem:
    When first try to access an ACL controlled URL, after enter user name and passwed, it would say "page cannot be found", and user has to click on "Refresh" botton, then it is OK. Subsequent access are all fine.
    It seems to be a bug to me with proxy server. Currently, there are only SP2 for V3.6 available on the download site. However, from the release notes, it does not say it is fixing this specific problem.
    Anyone can advise on this ?

    I think this one is fixed in SP3. Can you try to upgrade and see if the problem still persists.

  • Weblogic 5.1 and iPlanet as proxy server

    Hello!
    We are using Weblogic 5.1 and Netscape's iPlanet as a proxy server. Both
    the machines are running of seperate NT boxes with static IP addresses.
    All the changes which need to made on iPlanet side (i.e. copying
    proxy36.dll, modificatiopn of mime types file, changes to the obj.conf
    file etc.) have been made. Howver I am still not able to get the JSP
    forwarded to Weblogic to get them serviced.
    I had this evironment set up pretty quickly when using Weblogic 4.5.1.
    Any ideas? Anything I might have overlooked. I have pretty much follwed
    all the instructions specified by Weblogic to set up Netscape as a proxy
    server.
    ANy help in resolving this problem would be greatly appreciated.
    Thanks.
    Vijay R

    I have the same setup but it's on one NT box and works OK. Make sure you have the proxy36.dll from Weblogic 5.1 Service Pack 6. Release notes say you MUST have SP6 proxy file to work with iPlanet 4.1
    Sam Fowler
    Vijay Raghavacharian <[email protected]> wrote:
    Hello!
    We are using Weblogic 5.1 and Netscape's iPlanet as a proxy server. Both
    the machines are running of seperate NT boxes with static IP addresses.
    All the changes which need to made on iPlanet side (i.e. copying
    proxy36.dll, modificatiopn of mime types file, changes to the obj.conf
    file etc.) have been made. Howver I am still not able to get the JSP
    forwarded to Weblogic to get them serviced.
    When I try to execute a JSP, I get the "Internal Server Error". On
    analyzing the
    error message sin the log files for iPlanet it reports that it is not
    able to connect to
    Weblogic.
    In order to fix this porblem I just copies the proxy36.dll for Weblogic
    version
    4.5.1 and copied it in the required iPlanet directory. This seems to
    have fixed
    the problem of getting the JSP serviced by Weblogic, but I am wary about
    the solution.
    Am I doing something wrong or is there a new files availabel for
    download. I checked
    the website for BEA and did not find any answers.
    I had this evironment set up pretty quickly when using Weblogic 4.5.1.
    Any ideas? Anything I might have overlooked. I have pretty much follwed
    all the instructions specified by Weblogic to set up Netscape as a proxy
    server.
    Any help in resolving this problem would be greatly appreciated.
    Thanks.
    Vijay R

  • What is the default mapping '/' for in iPlanet Web Proxy

     

    Hi,
    There will be one "pac" file which Map to proxy server. When you enabling reverse proxy you need to delete this. For more info. about this check iPlanet WebProxy server admin guide Chapter 7.
    http://docs.iplanet.com/docs/manuals/proxy/36/adminux/revpxy.htm#1010225
    Regards,
    Dakshin.
    Developer Technical Support
    Sun Microsystems
    http://www.sun.com/developers/support.

Maybe you are looking for