Migration from iPlanet Web Proxy to ISA 2000

Hi,
I'm doing a project to migration from iPlanet Web Proxy 3.5 (AIX based) to ISA 2000 (Windows 2000). Anyone have experience can give me some idea to plan this migration?
Which file in AIX iPlanet proxy store all the Filter URLs (Black list) ? And which file store all the users, groups with permissions?
If you can refer me some "How to" documentation, I appreciate your help.
Vince2008

sriram already answered this pretty well, but as someone having been in the same situation (migrating from 6.0sp6 to 6.1sp8 a few months ago) I thought I'd chime in.
obj.conf is not an issue whatsoever, since this file does not change in any way between the versions. This was a very nice discovery, and made our work a lot easier. :)
magnus.conf is still pretty much the same, and using the migration tool in 6.1 will migrate server.xml and all other files properly, so that is absolutely the easiest way, if you have only a couple of configs. Us, we used it to generate a new template to see all changes, and then updated our internal configuration templates with the new look and generated all files on our own from there.
You will need to modify magnus.conf manually afterward and update the path to the wlproxy though, since you should use proxy61.dll/so rather than proxy36.
There are also quite a lot of entries in magnus.conf that are deprecated in 6.1, but still kept by the migration tool. Doesn't really hurt in any way, but that is my current task - cleanup.
Regarding rollback, that depends on how you migrate. We wanted to use the same ports as well as windows service names (to avoid having to update all scripts), so we had to uninstall 6.0 before installing 6.1. But really, the possibilities you have here are so strictly decided by your network setup, uptime requirements, etc, that it is hard for anyone on the outside to answer.
Edited by: David.Eriksson on Aug 18, 2008 1:54 AM

Similar Messages

  • Iplanet Web Proxy Server 4.0.19 error 400

    Getting error 400 after upgrading Iplanet Web Proxy 4.0.19
    Message from Iplanet Web Proxy 3.6 - working properly
    Iplanet Web Proxy 3.6 SP12
    202.123.21.57 - - [26/Apr/2013:20:21:05 +0400] "POST /as1.html HTTP/1.1" 200 58 200 58 12 12 309 52 427 19 0 DIRECT FIN FIN DO-NOT-CACHE
    197.226.57.153 - - [26/Apr/2013:20:21:16 +0400] "GET /AA8002.html?^CfSb_AA HTTP/1.1" 200 29 200 29 - - 255 52 370 19 0 DIRECT FIN FIN DO-NOT-CACHE
    197.226.57.153 - - [26/Apr/2013:20:21:16 +0400] "GET /AA8003.html?^CfSb_AA HTTP/1.1" 200 0 200 - - - 255 52 370 19 0 DIRECT FIN FIN DO-NOT-CACHE
    Message from Iplanet Web Proxy 4.0.19
    Iplanet Web Proxy 4.0.19
    202.123.21.57 - - [26/Apr/2013:20:24:57 +0400] "POST /as1.html HTTP/1.1" 200 58 200 58 12 12 315 208 562 19 0 DIRECT FIN FIN DO-NOT-CACHE
    202.123.21.57 - - [26/Apr/2013:20:24:57 +0400] "-" 400 - - - - - - - - - - - - - -
    197.226.57.153 - - [26/Apr/2013:20:25:14 +0400] "-" 400 - - - - - - - - - - - - - -
    197.226.57.153 - - [26/Apr/2013:20:25:14 +0400] "-" 400 - - - - - - - - - - - - - -
    Any help
    Manoven

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • Migrate certificate 3.x to Oracle iPlanet Web Proxy Server 4.0.20

    Hi
    I try to migrate from Sun iPlanet Web Proxy Server(SPWPS) 3.6 to Oracle iPlanet Web Proxy Server(OPWPS) 4.0.20 and I have some problem.
    I have an instance in SPWPS-3.6 with SSL certificate, when I migrate it to OPWPS-4.0.20 using the admin interface, the certificate
    is not migrate with this error message :
    Migrating Keys and Certificates...
    [Error] The password entered for the key is not valid
    Assimilation failed.
    But I am sure to enter the right password.
    After that I manage the new instance in administration interface, and in Security Panel, there is a choice to "Migrate 3.x certificate"
    I try this, but I get this error message
    Incorrect Usage
    The password entered is not valide
    Can somebody help me to resolve this problem ?
    Thanks in advance.

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • '-1' bytes in log file - iPlanet Web Proxy Server 3.6

    I'm running iPlanet Web Proxy Server 3.6, and getting strange results in log file using extended format. Where the number of bytes should be (c1 - the content-length sent to the client by the proxy).
    I regularly get a '-1' instead of the number of bytes. Anyone tell me where this is coming from and how to stop it?

    Someone in the Web Proxy Server forum might. I guess you accidentally posted in the Web Server forum. However, if your question is time- or business-critical, you should probably contact Sun directly: http://www.sun.com/support

  • Upgrade question (iPlanet Web Proxy Server)

    Hello List,
    What is the procedure for upgrading iPlanet Web Proxy Server 3.6 (beta)
    to iPlanet Web Proxy Server 3.6 on Solaris 2.8?
    Thank you in advance.
    - Andrew Petrov.

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • Bug Report: JSSE 1.0.2 & iPlanet-Web-Proxy-Server/3.6

    When tunneling through iPlanet-Web-Proxy-Server/3.6 we get a "Socket Closed" exception during the handshake (right after overlaying the tunnel). I got this problem with HP-UX. My browser works fine with that proxy so the problem isn't the proxy. And my code works fine with every other proxies. This proxy does return HTTP 1.0 so this well known issue isn't related.
    Anyone from Sun can confirm this issue ?
    Anyone else got this bug ?
    Thanks in advance.
    Fran�ois

    Hi all,
    When you say tunnelling, are you referring to code similiar to the code in JavaWorld Tip 111?
    I am currently trying to debug some issues with that code myself. I get similiar errors when tunnelling through a proxy.
    The download works correctly when a HttpsURLConnection is used to connect directly to the same site.
    I am using a squid-cache as my test proxy, so I am not sure if the proxy is the problem. (assuming we are talking about the same issue)
    I have noticed that a V3 site certificate seems to be more likely to fail though. I have not found a site using a V1 certificate where the tunnelling has failed.
    We are also discussing what I think is the same issue in the thread "HTTPS tunneling and V3 certificates".
    I have been trying to get this stuff working for a few months now.

  • IPlanet Web Proxy Server 3.6 and emptying out the cache.

    Hello.
    I'm wanting to empty out our proxy server's cache in an attempt to resolve one of our users help desk problems - a web site they are accessing is not loading correctly when going through the proxy server, bypassing the proxy server works.
    The problem is that the technician who implemented our iPlanet Web Proxy Server 3.6 has left the company and no one else is aware of how to do this. Can anyone advise of what has to be done to achieve it? Thank you.
    Kind regards,
    Jimmey.

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • IPlanet Web Proxy Server 3.6 SP 5 Persistent Connection doesn't work

    I use iPlanet-Web-Proxy-Server/3.6-SP5 on Soloaris. and trying to use persistenet connection functions in forward proxy through setting keep alive to "ON". But I found this functions doesn't work at all. The following trace is the HTTP Header info i got from receiver.
    1. The HTTP Header info without using Proxy Server
    Request headers :
    proxy-authorization: Basic YXBwLWVtcXVzZXI6MTIzNDU2Nzg=
    connection: Keep-Alive
    proxy-connection: Keep-Alive
    server: IBM WebSphere MQ internet pass-thru V1.3.2
    accept: application/octet-stream
    host: 10.1.13.43:1414
    user-agent: 10.1.72.254:1414
    content-type: application/octet-stream
    content-length: 132
    accept-encoding: identity
    2. The HTTP Header info using Proxy Server
    Request headers :
    server: IBM WebSphere MQ internet pass-thru V1.3.2
    accept: application/octet-stream
    host: 10.1.72.254:1414
    user-agent: 10.1.72.254:1414
    content-type: application/octet-stream
    content-length: 132
    accept-encoding: identity
    date: Mon, 06 Sep 2004 18:04:12 GMT
    forwarded: by http://iaccess.mor.cr:8085 (iPlanet-Web-Proxy-Server/3.6-SP5)
    via: 1.1 S1PS,1.1 S1PS
    I found Kepp-Alive information ( "connection: Keep-Alive" and " proxy-connection: Keep-Alive")
    was taken out by proxy server.
    Is a proxy server bug? Can I do something to make it work?
    Regards,
    songtao

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • Is iPlanet Web Proxy Server support OpenLdap authentication ?

    Do you know Is iPlanet Web Proxy Server support OpenLdap authentication ?
    Thanks
    Regards,

    Hi
    This as per the HTTP/1.1 RFC (RFC2616)
    The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
    The Connection header has the following grammar:
    Connection = "Connection" ":" 1#(connection-token)
    connection-token = token
    HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
    Read the following at
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
    and
    http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
    Regards
    Nagendra HK

  • IE 6.0 seems not compatible with iplanet web proxy server 3.6

    We have Iplanet Web Proxy Server V3.6 on AIX 4.3.3, and is trying to roll out IE browser V6.0. And is experience following problem:
    When first try to access an ACL controlled URL, after enter user name and passwed, it would say "page cannot be found", and user has to click on "Refresh" botton, then it is OK. Subsequent access are all fine.
    It seems to be a bug to me with proxy server. Currently, there are only SP2 for V3.6 available on the download site. However, from the release notes, it does not say it is fixing this specific problem.
    Anyone can advise on this ?

    I think this one is fixed in SP3. Can you try to upgrade and see if the problem still persists.

  • Can iDSIE (Meta-directory) be used as a single authentication point from iPlanet Web Server for multiple databases using direct "or" indirect connectors?

    Basically, the latest release of iPlanet Web Server forces the user/group information source to be an LDAP database. Currently, the user accounts are in Active Directory, NT, Oracle and NetWare Directory Service in this heterogeneous environment.
    What I am looking for is a meta-directory product which can do two things:
    1-Single authentiation point for users in mulitple databases from iPlanet Web Server.
    2-Single administration point for all of the databases listed above.
    For example, can I add/modify/delete a user account at the meta-directory level and have this propagate to all of the databases listed above reducing the administration to one meta-directory product?

    With an Virtual Directory solution, you can authenticate Iplanet Web Server against nearly anything including any LDAPv3 Directory Server, Microsoft Active Directory, Windows NT Domains, Oracle RDBMS, IBM DB2 RDBMS, Microsoft SQL, and others.
    All of this is done dynamically and doesn't require any heavyweight synchronization process. The Virtual Directory acts as a dynamic schema / DIT / data translation engine for different types of repositories.
    OctetString's Virtual Directory Engine is one such example. You can download a 30 day evaluation copy at:
    http://www.octetstring.com
    It will take you all of 30 minutes to get iPlanet Web Server authenticated against and using groups from things like Oracle RDBMS, Windows NT Domains, or Active Directory.

  • Migration from iplanet webserver to Sun Directory Server

    Hi,
    I have Oracle Iplanet WebServer Enterprise edition V6.0 SP2 in my dev environment. I would want to migrate the system to Sun Java System Directory Server V6.0. I have looked up the migration guide for Sun DS V6.0. But i could not find any reference to Iplanet WebServers.
    Can anybody please let me know the migration procedure for migrating from Iplanet Server to Sun Directory server.
    Any help would be appreicated
    Thank you
    Nowfal

    Please ignore this question since we have dropped the plan to migrate, instead set a new DS instance from the beginning

  • IPlanet Web Proxy 3.6 Truncating some web pages

    I am having problems with a few pages that are being truncated by iPlanet Web Proxy Server 3.6. They work fine when not using a proxy and they work fine through the proxy if I download it and then post that page to one of my own servers. Here is an example page here:
    http://store.apple.com/1-800-MY-APPLE/WebObjects/AppleStore.woa/7200605/wo/741F3WQ4MG5p3aLeQyTxEZe9L7S/7.?p=0
    If that changes, you can go to http://store.apple.com and drill down until you are customizing a machine.
    I've been using this server for years and this is the first problem of this nature I've had. Any help would be much appreciated.

    I tested the issue on 3.6 SP8 and it appears to work.

  • Oracle iPlanet Web Proxy Server 4.0.14 not getting started.

    bash-3.00# ./start
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    ld.so.1: parsexml: fatal: relocation error: file parsexml: symbol __RTTI__1nMXMLException_: referenced symbol not found
    Oracle iPlanet Proxy Server 4.0.14 B06/08/2010 05:46
    failure: CORE3170: Configuration initialization failed: Error running init function load-modules: dlopen of /export/home/Oracle_Proxy/bin/proxy/lib/libj2eeplugin.so failed (ld.so.1: proxyd: fatal: libjvm.so: open failed: No such file or directory)
    bash-3.00# uname -r
    5.10
    bash-3.00# uname -a
    SunOS sunfire-v240 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire-V240
    bash-3.00#
    The web proxy server version is 4.0.14 and the package i used is "Oracle-iPlanet-Web-Proxy-Server-4.0.14-sparc.zip"
    Please help me. If any other information is needed, please let me know.

    Your proxy instance should start. The error you are seeing should only be for the admin server. Add the location of where your jvm.so is located to the LD_LIBRARY_PATH. The jvm.so is located under the JDK directory.

  • Migrating from BEA WebLogic 5.1 (Windows 2000) to iAS9

    Hi!
    I am looking for a step-by-step guide for migrating from BEA WebLogic 5.1 (Windows 2000) to iAS9. The guide should contain the detailed information on how to migrate servlets and EJBs.
    Some of my questions are:
    - What do I have to do when I have system startup files from WebLogic? Are there equivalent properties for iAS9?
    # Register a startup class by giving it a virtual name and
    # supplying its full pathname.
    #weblogic.system.startupClass.[virtual_name]=[full_pathname]
    # Add arguments for the startup class
    #weblogic.system.startupArgs.[virtual_name]={argname]=[argvalue]
    - How do I set the system properties?
    Phuoc
    null

    This a response to the specific point of startup/shutdown classes, a whole Migration paper is underway
    Since Servlet 2.2 and EJB containers in 9i AS run within the middle tier database instance,
    the easier way to accompish what you want is to declare those classes as database startup/shutdown triggers (Java stored procedures).
    You can also set session properties using the "modifyprops" command (cf Java Tools Reference)

Maybe you are looking for

  • Java Program with Adapter / Facade Pattern

    Hey All: I'm very new to the Java language and have been given a fairly complicated (to me) program to do for a course I'm taking. The following is the scenario. I'll post code examples I have and any help will be greatly appreciated. Let me apologiz

  • Advice Needed: Optimizating a PBG4 1.67Mhz

    Hello- New to the digital audio/Logic world and am seeking some advice. I'll be using this machine as a primary recording device and would call the demands I'll place on the machine moderate for now. The more optimization, the better. Its a PBG4 17"

  • ECC v6.0 installation error : CJS-30022 and FCO-00011

    Hi All, I enconter the while <u><b>installing ECC 6.0 in windows 2003 server and MSSQL 2005 as the database</b></u>. The error occurs during <u><b>import ABAP phase ( exactly the Job name was SAPSDIC and this is the first job out of 19)</b></u> The s

  • WAD - input locking for selected rows in planning querie!?

    hello guys, i need some ideas - in which way i can lock data entry functionality in IP query for selected rows? some rows in the query have an indicator S (sum) and some  I (input). so  i have a chance for selection, which rows are input rows and whi

  • How do I fix lag on flash player 11.7?

    I go to twitch.tv & Justin.tv I get lag on the video streams while watching my friends cast.. how to fix this problem?