Iplanet web server 6.0 sp 6 with jdk 1.4.2_10 and 1.4.2_10
Hi,
I am using iplanet webserver 6.0 sp 6. At present i am using jdk 1.3. Now i have to install jdk 1.4.2_10 version for my application. But in the release notes of iplanet webserver 6.0 sp 6 it was mentioned that this version is compatable with jdk 1.4.2_02. Any one please help how is it makes difference if i go ahead with jdk 1.4.2_10 version.
Thanks.
The release notes are pointing out that Sun has tested 6.0SP6 with 1.4.2_02. That doesn't mean that 6.0SP6 won't work with 1.4.2_10.
1.4.2_10 is a maintenance release. It should contain only bug fixes over 1.4.2_02. It should work. If it doesn't work, it's a bug in Sun's web server or Sun's JDK. In either case, Sun will need to fix it.
If you're concerned about supportability, please realize that 6.0SP6 itself has been superseded by 6.0SP11. If you do encounter problems, the first thing Sun's technical support staff will tell you to do is to apply SP11.
Similar Messages
-
"Error creating JVM" in iPlanet Web Server 4.1SP7 when configured with JDK
I need to configure iPlanet Web Server 4.1SP7 to execute JSP/Servlets on itself and lookup EJBs kept on IBM Websphere Application Server 4.0.1, both running on different servers with Sun Solaris.
Whenever, I try to configure iPlanet Web Server 4.1 SP7 to use IBM's JDK 1.3.0 (provided with WAS 4.0) to lookup an EJB, iPlanet server stops as soon as it starts, giving:
[07/Feb/2003:11:52:38] info ( 2788): Internal error: unable to create JVM acquire failed1:52:38] info ( 2788): NSServletSession::(late)init - JVMControl:: [07/Feb/2003:11:52:38] failure ( 2788): Failure to load JVM (check your JRE) on(late) NSServletLateInit: unknown error): conf_init: Error running init function
Evenif, I configure it using Sun's JDK 1.4.0.03, iPlanet wS keeps on giving "Exiting JVM" in the error log..
Now, I want to know, which JVMs are supported by iPlanet Web Server 4.1 SP7, that can be used to lookup deployed components (EJBs/Datasource) on Websphere Application Server 4.0.1?
Regards,
Vaibhav
[email protected]I think you are running into this:
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsunone%2F8322&zone_32=-Xrs%2A%20
Thanks
Manish -
Hi,
It is possible, But it has to be done through codes and iPlanet Web Server has nothing to do with it. But if you want to create the word document by ASP you have to install ASP plugin like ChilliASP (from Chilisoft) with iPlanet Web Server.Merging with database can be done through your code.
To know more abt creating word doc through ASP try this link
http://web.ukonline.co.uk/vance/code/aspworddoc.pdf
Regards,
T.Raghulan. -
Any way to capture output from iPlanet Web Server V6 at socket level?
Hi,
I'm wondering if it's possible to configure the iPlanet Web Server (V6) so that I can capture the full request and response of a hit and "log" them to another process. Something like a pipeline of NSAPI modules would be ideal. I've written similar code for Apache, IIS, and Tomcat and am wondering if this is possible for iPlanet?
Thanks.Hi, I was wondering if you ever received a response to your question. If so, can you please share it with me?
Thanks,
Tracy
[email protected] -
Jdeveloper 9i with Sun ONE (iPlanet) Web Server 6.0
Hi,
Has any one working Jdeveloper 9i with Sun ONE (iPlanet) Web Server 6.0 ?
When i add new application server it gives only Oracle App Server and Web Logic.
Thanks
RameshCurrently JDeveloper provides Application server connections to Oracle9iAS and WebLogic, which can be used to deploy J2EE Modules.
JDeveloper allows to create assemble generic J2EE archives from projects which can used to deploy to other application servers.
Check out How-To documents on this topic
http://otn.oracle.com/products/jdev/howtos/content.html
raghu
JDev Team -
Integrating iPlanet Web Server 6.0 with SunOne App Server 7.0
I am experiencing problems integrating iPlanet Web Server 6.0 with SunOne App Server 7.0
My magnus.conf is
#ServerRoot /usr/iplanet/servers/https-test
ServerID https-test
ServerName sulev016.eur.gep.ge.com
ErrorLog /usr/iplanet/servers/https-test/logs/errors
PidLog /usr/iplanet/servers/https-test/logs/pid
User root
MtaHost localhost
DNS off
Security off
ClientLanguage en
AdminLanguage en
DefaultLanguage en
RqThrottle 128
StackSize 131072
CGIWaitPid on
TempDir /tmp/https-test-ab0d7966
Init fn=flex-init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn=load-types mime-types=mime.types
Init fn="load-modules" shlib="/usr/iplanet/servers/bin/https/lib/libNSServletPlugin.so" funcs="NSServletEarlyInit,NSServletLateInit,NSServletNameTrans,NSServletService" shlib_flags="(global|now)"
Init fn="NSServletEarlyInit" EarlyInit=yes
Init fn="NSServletLateInit" LateInit=yes
Init fn="load-modules" shlib="/usr/iplanet/servers/plugins/passthrough/bin/libpassthrough.so" funcs="init-passthrough,auth-passthrough,check-passthrough,service-passthrough" NativeThread="no"
Init fn="init-passthrough"
==========================================
my obj.conf is
<Object name=default>
NameTrans fn="assign-name" from="(/OMS|/OMS/*)" name="passthrough"
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="/usr/iplanet/servers/docs/servlet" name="ServletByExt"
NameTrans fn=pfx2dir from=/mc-icons dir="/usr/iplanet/servers/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/manual" dir="/usr/iplanet/servers/manual/https" name="es-internal"
NameTrans fn=document-root root="$docroot"
PathCheck fn=unix-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.html,home.html"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service type="magnus-internal/jsp" fn="NSServletService"
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
AddLog fn=flex-log name="access"
</Object>
<Object name=cgi>
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="servlet">
ObjectType fn=force-type type=text/html
Service fn="NSServletService"
</Object>
<Object name="jsp092">
ObjectType fn="type-by-extension"
ObjectType fn="change-type" type="magnus-internal/jsp092" if-type="magnus-internal/jsp"
Service fn="NSServletService" type="magnus-internal/jsp092"
</Object>
<Object name="ServletByExt">
ObjectType fn=force-type type=magnus-internal/servlet
Service type="magnus-internal/servlet" fn="NSServletService"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="passthrough">
ObjectType fn="force-type" type="magnus-internal/passthrough" Service type="magnus-internal/passthrough" fn="service-passthrough" servers="http://3.224.68.131:81"
Error reason="Bad Gateway" fn="send-error" uri="$docroot/badgateway.html"
</Object>
The requests are not passing through to the app server when i try to access it through port 80.
Presently I am testing my appln over port 81 on the app server.
Thanks and Regards
Vineet GulianiEach ObjectType and Service directive should begin on a new line. You appear to have placed two directives on a single line.
-
Integrate iPlanet Web server with Weblogic 6.0?
Hi
Like to find out if there is any way I can integrate iPlanet Web Server,
Enterprise Edition to Weblogic 6.0 sp2 . Is there anyway iPlanet could
intergate with Weblogic security realm? Basicly I need to find you if
iPlanet could use Webloigc for security authantication?
thanks
Tong KiatRefer to Weblogic documentation on iPlanet proxy pluging settings
-
Hi Melanie,
In order to run a PERL script under Windows NT the iPlanet Web Server needs to know where to find the PERL interpreter.
follow these steps :
1) Make sure Windows NT knows what a .pl file is. In file Manager click on file and choose associate from the menu. Check the "files with extension" drop-down list for pl - if it exists verify that it is pathed to your perl.exe. If it is not already on the list click the "New Type" button. In the Filetype box put pl. Choose open from the Action drop-down list. In the Command box specify the full path to your perl.exe interpreter (Make sure to use short filenames, rather than long filenames.) Click the OK button. Then click the Close button in the main Associate dialog box. Double click a .pl file to test - it should automatically launch the PERL interpreter and feed it your .pl file.
2) Create a directory to contain your .pl scripts.
~server_root\shell-cgi is a good choice.
or \cgi-bin\
NOTE: Make very sure that this directory is NOT part of the document root, it should have it's own directory (preferably at the same level of the docroot).
3) In the Admin Server select Programs.
4) Choose CGI directory (normally) or WinCGI directory or ShellCGI Directory depending on ur choice from the Programs menu.
5) Put the URL Prefix you would like to map to your Shell-CGI directory into the URL Prefix field.
6) Put the full path to your Shell-CGI directory in the Shell CGI directory field.
7) Click OK.
8) The save and apply changes page will display your changes and give you the opportunity to verify them. If they are correct click the Save and Apply button. If not Click the Undo button and go back to step 4.
(9)You can then call your .pl scripts directly by referencing the directory mapping that you have just created. For example:
http://my.server.whatever/shell-cgi/ myscript.pl
this should work now.
If not Pls Mail me.
regards
T.Raghulan
[email protected] -
IPlanet Web Server 6.0 SP3-4: authenticating succeeds with bogus password
There is a very serious problem with ACL configured to authenticate against the ldap server.
Going through the Global settings, if you configure it to use a Ldap server and then configure the ACL to allow only the authenticated users... however, by typing a bogus password, as long as userid is correct, I can get access to the URL pages.
Previously, I have responded to "Thuan Nguyen" in the subject "Problem authenticating iPlanet Web Server 6.0 SP3 and SP4 with LDAP", regarding authentication to the Ldap with bogus password.
I have emailed and called in to inform SUN of this severe security problem with their Web Server, but I don't even know if this information is getting through.
Isn't there anyone out there who can also confirm this?
And if there is any existing workarounds for this?
Thank you.This is documented in the 6.0 SP5 (and higher)
release notes as fixed problem 4770629, and,
according to the SP5 release notes, "All users of
previous versions of Sun ONE Web Server are strongly
recommended to install this service pack."
Note that the problem only occurs when the LDAP entry
lacks a uid.Thanks for the info. However, the LDAP server I'm using does have the UID value.
Regardless, I will try the SP5 and get back to you.
Thank you. -
Global data in a servlet using iPlanet Web Server
Our configuration is an Applet->Servlet->JNI->C/C++ code.
We have C code that does a number of lengthy mathematical calculations. This C code not only uses its own global variables but, it is also comprised of numerous subroutines that all call each other, reading and writing global C variables as they go. These globals are all isolated to the C code shareable object (.so) library that is included using the LoadLibrary call when the servlet is initialized.
The problem is that in a multi-user environment (3-5 simultaneous users) we need to have each user have their own "copy" of the servlet (and the C code) so that users will not be accessing each other's global data. We can NOT have only one copy of the C code and define it as synchronized because the calculations that are performed can take a very long time and we can not hold off user requests while the firs user finishes.
Our hope is that there is a way to configure the iPlanet Web server such that each new user that starts up a copy of the Applet/Servlet combination will get their own "space" so that they can work independently of any other user. We have at most 20 users of this system and only 3-5 simultaneous users so we should not have a problem with memory or CPU speed.
If anyone has a solution, I would greatly appreciate it!The C library is shareable. But you don't want it to be shared. That's your question summarized, isn't it?
You probably can't prevent it from being shared, so to prevent multiple use of it you would have to queue up the requests to be done one at a time. WynEaston's suggestion of having the servlet implement SingleThreadModel would help, but I believe the servlet spec allows servers to run multiple copies of a servlet that does that (as opposed to running a single copy in multiple threads).
Your other alternative is to rewrite the math in Java, or at least in some object-oriented language where you don't need global variables (which are the source of your problem). All right, I can already hear you saying "But that wouldn't be as fast!" Maybe not, but that isn't everything. Now you have a problem in queueing theory: do you want a single server that's fast, but jobs have to wait for it, or do you want multiple servers that aren't as fast, but jobs don't have to wait? That's a question you would have to evaluate based on the usage of your site, and it isn't an easy one. -
Basically, the latest release of iPlanet Web Server forces the user/group information source to be an LDAP database. Currently, the user accounts are in Active Directory, NT, Oracle and NetWare Directory Service in this heterogeneous environment.
What I am looking for is a meta-directory product which can do two things:
1-Single authentiation point for users in mulitple databases from iPlanet Web Server.
2-Single administration point for all of the databases listed above.
For example, can I add/modify/delete a user account at the meta-directory level and have this propagate to all of the databases listed above reducing the administration to one meta-directory product?With an Virtual Directory solution, you can authenticate Iplanet Web Server against nearly anything including any LDAPv3 Directory Server, Microsoft Active Directory, Windows NT Domains, Oracle RDBMS, IBM DB2 RDBMS, Microsoft SQL, and others.
All of this is done dynamically and doesn't require any heavyweight synchronization process. The Virtual Directory acts as a dynamic schema / DIT / data translation engine for different types of repositories.
OctetString's Virtual Directory Engine is one such example. You can download a 30 day evaluation copy at:
http://www.octetstring.com
It will take you all of 30 minutes to get iPlanet Web Server authenticated against and using groups from things like Oracle RDBMS, Windows NT Domains, or Active Directory. -
Works in Tomcat but not in iPlanet Web server
I have a servlet which first generates a form which has one input field, when user fills in the text field and submits the form it is posted to same servlet. The posted data is processed and redirected to another servlet. Everything works fine on Tomcat3.2 but fails to work on iPlanet web server and throws HTTP Error 500.
Can someone help me with this? What might be the problem?Don't know whey it worked in Tomcat and not in iPlanet, but the reason is because I missed '/' in getRequestDispatcher() methoc
public RequestDispatcher getRequestDispatcher(java.lang.String path)
The pathname must begin with a "/" and is interpreted as relative to the current context root. -
Has anyone tried to port the Plumtree Corporate Portal v5.0.1 portal server component to iPlanet Enterprise Web Server 6.0 (aka SunONE Web Server, v6.0 )? Plumtree doesn't support this, but I am trying to merge a custom SSO authenticator to the Plumtree portal (v5.0.1). The authenticator runs as a plug-in to SunONE Web Server and has been in place on our customer's web site for a long time now.
I have this working great in with SSL turned off, but I am having a difficult time getting past an error when I turn on SSL. I can get the portal server to run fine with SSL turned on through Tomcat on the same machine, using the same certificate and JRE. I can also get the SunONE server to run other servlet applications fine with SSL turned on. However, there appears to be either: (1) an incompatibility between SunONE's NSServlet plug-in that handles servlets and the Plumtree framework classes that set up replies via SSL, or (2) a configuration error in my setup somewhere. I'm hoping that (2) is the real culprit, but I've tried just about everything I can think of, and haven't been able to resolve this problem.
The server starts up fine and I can load non-portal content without a problem. But when I log in, the portal's main community page that should be returned is not being returned to the client. PTSpy (a debugging aid for the Plumtree portal) doesn't indicate any problems, so I know the content is being built by the portal correctly, but the built page is never being sent back to the requesting client.
Here is the error that gets logged to my SunONE server's error log:
[29/Dec/2003:15:05:53] failure ( 2772): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.lang.NoClassDefFoundError: javax/net/ssl/SSLSocket
at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:793)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:702)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:583)
at java.net.URL.openStream(URL.java:960)
at org.apache.xerces.readers.DefaultReaderFactory.createReader(DefaultReaderFactory.java:149)
at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromDocument(DefaultEntityHandler.java:493)
at org.apache.xerces.framework.XMLParser.parseSomeSetup(XMLParser.java:314)
at org.apache.xerces.framework.XMLParser.parse(XMLParser.java:1097)
at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:195)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:124)
at com.plumtree.openfoundation.xml.dom.XPBuilder.LoadDocumentFromURI(XPBuilder.java:203)
at com.plumtree.xpshared.jsutil.JSRegistry.LookupJSComponentVersions(JSRegistry.java:243)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponentVersions(JSRegistry.java:184)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:465)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:444)
at com.plumtree.uiinfrastructure.statichelpers.ConfigHelper.GetCommonJSIncludes(ConfigHelper.java:1330)
at com.plumtree.uiinfrastructure.form.AFormAS.DisplayCommonJavaScript(AFormAS.java:59)
at com.plumtree.portalpages.common.uiparts.PlumtreeAS.DisplayCommonJavaScript(PlumtreeAS.java:88)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.DisplayHead(PlumtreeDP.java:599)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.Display(PlumtreeDP.java:112)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.ProcessDisplayPageOrRedirect(Interpreter.java:816)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.HandleRequest(Interpreter.java:1589)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.DoService(Interpreter.java:448)
at com.plumtree.uiinfrastructure.web.XPPage.service(XPPage.java:141)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.iplanet.server.http.servlet.NSServletRunner.invokeServletService(NSServletRunner.java:919)
at com.iplanet.server.http.servlet.WebApplication.service(WebApplication.java:1061)
at com.iplanet.server.http.servlet.NSServletRunner.ServiceWebApp(NSServletRunner.java:981)It looks like a Java classpath issue, but I've verified (even in the same log file with java debugging turned on) that the SSLSocket class is getting loaded. I've even tried moving the specification of the jar file containing this class (jsse.jar, part of the JRE) to the beginning and end of my classpath setting.
I'm using the same JRE that is bundled with the Tomcat release supplied with my Plumtree 5.0.1 installation (1.4.1_02). I can't get the JRE that came bundled with the SunONE v6.0 release to work at all.
I've posted a similar message on a couple other forums (Java and iPlanet-related, as well as on Plumtree's customer forum) and haven't found an answer yet. Does anyone have any ideas?In case anyone else experiences this, I have apparently stumbled upon an issue with iPlanet's handling a specified JRE/JDK instead of the supplied JDK in iPlanet Web Server v6.0, SP5, though I found a way around it to resolve my problem.
I had been specifying a different JRE to run with through the administrative server manager. However, even though I was specifying to load all the JRE's jar files in my classpath setting, iPlanet was only loading the rt.jar file for my specified JRE. With verbose logging turned on, the error log was indicating that the other classpath specified jar files were being loaded, but apparently they were not being used. The JDK that was released with iPlanet appears to be being used for all other JRE classes outside of those defined in rt.jar. Since the JDK supplied with the iPlanet release didn't contain jsse.jar, which contains SSL support, it was not being loaded and was causing the problem I was seeing.
Instead of specifying the JRE of a different JDK that I was using, I changed the global setting in the administrative server manager to override the entire JDK. This has resolved my problem.
So if you specify a JRE to override the iPlanet supplied JDK/JRE, it appears that only the rt.jar file of the specified JRE will be loaded, and the jar files associated with the iPlanet-supplied JRE will be used for all other classes. Specification of a complete JDK to override the supplied one will resolve this. -
Iplanet web server 6.0 ACL question
Hi,
I am using ACLs to protect some of my URLs in iplanet web server 6.0.
I am getting one problem. Its not a problem actually but would like to know how to avoid authenticating the users 2 times.
In my ACL file, when ever I create an entry for a path, I am getting the following by default.
authenticate (user,group) {
database = "default";
method = "basic";
My entry is like this with the above lines.
acl "path=/www/develop/itsecurity/admin";
authenticate (user,group) {
database = "default";
method = "basic";
allow absolute (all)
(user = "modadmin");
allow absolute (all)
(user = "itsecadm");
deny (all)
(user = "anyone");
Now if the entry is like this with
authenticate (user,group) {
database = "default";
method = "basic";
after the first line, then whenever that particulaar user "itsecadm" tries to access the URL, he gets userid and password dialogue box. After entring into the page, if he tries to access or click any other link, it is asking the userid and password again.If he gives this second time, next time onwards it is not asking userid and password.
But When I remove the lines
authenticate (user,group) {
database = "default";
method = "basic";
from the file for that particular entry, it is not asking 2nd time userid/password.
Could you please tel me why this happening. Why this entry is created whenever I am adding a new one into ACL file?
Is any one facing the similar problem with iplanet web server 6.0 ACL files?
Thanks & Regards
MurthyHi,
Thank you for your suggestion. I have tried with your option also. Still I am getting the second time userid/password dialogue box.
Is there any other solution to avoid the second time user authentication dialogue box?
Do you want to see the ACL file?
Thanks & Regards,
Murthy -
Iplanet web server 7 -how to get more information when a certificate is untrusted ?
Hi
When a client tries to access to iplanet 7.0.15, we only get a line in the errors log with a simple error., for instance SSL_ERROR_UNKOWN_CA_ALERT...
We would like to know if it is possible to configure iplanet to get more information about this request..
iPLANET is receiving requests from a lot of clients and sometime it is difficult to identify the source of a error without more information..
We would like have similar information that access log shows when certificate is valid
We get the same information with log-level = info or finest..
Thanks
UgeHi Uge,
Setting the iPlanet Web Server log level to 'finest' will give you more information, but it is very verbose, and you still might not get the information you are looking for. You might want to try 'fine' or 'finer' first to see if either of those gives you the information you need.
With regards to the above error, SSL_ERROR_UNKOWN_CA_ALERT, this means that the client presented a certificate in the SSL handshake that was signed by a CA that the Web Server doesn't have in it's certificate database. In order to ensure the Web Server is kept upto date with the latest set of public CA certificates, I would recommend you upgrade to the latest version.
If you know that the certificates the clients are using are from an internal CA, you need to ensure the Root CA Certificate from that internal CA is installed in the Web Servers certificate database as a trusted certificate.
regards
Tracey
Maybe you are looking for
-
I have the following issue after renewed the Lync internal and external certificates, Lync Mobile client get the following message when try to connect from internal or external network "can't connect to the server. it may be busy or temporarily unava
-
Is there any way to sync the movies i have in my iphoto 09 library to my iphone 3g?
-
Compatible USB enclosure for hard disk from a 15-inch Aluminum Powerbook
My old Powerbook finally bit the dust, so I dismantled it and removed the hard disk. I want to get an enclosure to use it as a USB drive, but do not know what size or type of enclosure to purchase. I tried to guess, and ended up buying: Connectland C
-
Portal logoff not clearing business objects SSO connection
Is there a way to clear the saved SSO information from the business objects session in the background? The scenerio; On a computer shared by multiple users UserA Logs on to the SAP Enterprise portal, navigates to an iview that uses OpenDocument to ru
-
Problem when trying to install iTunes 7.7
Hi Experts, While trying to install iTunes i get an error message as follows - "Older version of Apple software update cannot be removed. contact your technical support group." Now I cannot even get into iTunes nor does iTunes start automatically whe