Netscape plugin, pathprepend in obj.conf

Environment - iPlanet 4.1, Weglogic 5.1 sp6 Issue - Is it possible to select the web root directory of iPlanet to be redirected to Weblogic root? Currently, the setting in iPlanet's obj.conf looks like this - Service method="(GET|HEAD|POST|PUT)" type="text/jsp" fn="wl-proxy" WebLogicHost="127.0.0.1" WebLogicPort="7001" PathPrepend="/acx"When executing on Weblogic it's as if the files are in the webroot, while in actuality, they're in webroot/acx. I got around the path issues for images, etc but is it possible to have PathPrepend="/"? This did not work when I tried it.Sam Fowler
          

I also have the same problem. My problem is when the proxy is transferred to weblogic and even if I have the virtual mapping done on the iPlanet WS, the weblogic is looking for my data under the root of the weblogic server.
          Tony Pham
          Sam Fowler wrote:
          > Environment - iPlanet 4.1, Weglogic 5.1 sp6 Issue - Is it possible to select the web root directory of iPlanet to be redirected to Weblogic root? Currently, the setting in iPlanet's obj.conf looks like this - Service method="(GET|HEAD|POST|PUT)" type="text/jsp" fn="wl-proxy" WebLogicHost="127.0.0.1" WebLogicPort="7001" PathPrepend="/acx"When executing on Weblogic it's as if the files are in the webroot, while in actuality, they're in webroot/acx. I got around the path issues for images, etc but is it possible to have PathPrepend="/"? This did not work when I tried it.Sam Fowler
          

Similar Messages

  • Editting the obj.conf of netscape enterprise server 3.6 to map two".so"

    I have netscape enterprise server 3.6 (I know.. but cant go another option now)
    I already have a application running on this server which is accessed by "www.abc.com/Application" (dummy url).
    In the obj.conf file.. it is as below.
    Init fn="load-types" mime-types="mime.types"
    Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/AA.so"
    Init fn="fun1" LateInit="yes" ui_url_prefix="Application"
    This works fine....Now I have a BB.so which I want to be accessed by "www.abc.com/Application1" (dummy url).
    When i edit the config file as below. It doesnt seem to work. Can someone please help.
    Init fn="load-types" mime-types="mime.types"
    Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/AA.so"
    Init fn="fun1" LateInit="yes" ui_url_prefix="Application"
    Init fn="load-types" mime-types="mime.types"
    Init fn="load-modules" funcs="fun1,fun2" shlib="/usr2/abc/home/web/slib/BB.so"
    Init fn="fun1" LateInit="yes" ui_url_prefix="Application2"
    Both AA.so and BB.so in few functionalites, but otherwise are same. And I want both "www.abc.com/Application1" and "www.abc.com/Application2" to work.
    Im new to this.. please excuse my ignorance.

    First - You really, REALLY should be upgrading to Web Server 6.1 or Web Server 7.0 (or Open Web Server). Really.
    Second - You can have multiple SAFs, but you need to make sure that you code them to avoid conflicts with function names, data structures, etc. Good luck.

  • Iplanet 6.0 sp1 plugin - libproxy.so init failure in obj.conf

    hello all -
    iPlanet 6.0, service pack 1 (weblogic plugin desired)
    Solaris 2.8 with latest patchset (including patch 109234-09)
    JDK 1.3.1-04 ... weblogic 5.1, service pack 11
    These simple lines in obj.conf consistently fail :
    Init fn="load-modules" funcs="wl-proxy,wl-init"\
    shlib=/export/home/iplanet60/plugins/lib/libproxy.so
    Init fn="wl-init"
    .. iplanet "errors" log shows these errors when these lines are included :
    complains about server.xml (points back to these lines) .. "line 32, column 15:
    Error processing obj.conf line 3 : init functions are not allowed in the objset"
    . if I pull these lines .. http server starts fine.
    Started to research solaris patches - 109234-09 is installed - this is of interest
    as it contains libproxy.so for apache - tried loading that in but cannot load
    in that file as WLS plugin.
    libproxy.so : definately chmod 777 .. definately in right path.
    any thoughts on what my problem could be?
    thx JR.

    hello all -
    I solved this problem quite easily.
    The BEA docs suggest to put the 'Init fn' calls in the obj.conf file. I found
    if I do not do this but place the calls to 'Init fn' (only) in magnus.conf - all
    works fine. I had repeated failures to start the http server while these 'Init
    fn' calls resided in the obj.conf file.
    On a side note, the solaris patchset supplied libproxy.so is an apache ref file
    and should not be used. I just copied the normal libproxy.so from $WLHOME/lib/solaris.
    Hope this helps someone. JR
    "John Russell" <[email protected]> wrote:
    >
    hello all -
    iPlanet 6.0, service pack 1 (weblogic plugin desired)
    Solaris 2.8 with latest patchset (including patch 109234-09)
    JDK 1.3.1-04 ... weblogic 5.1, service pack 11
    These simple lines in obj.conf consistently fail :
    Init fn="load-modules" funcs="wl-proxy,wl-init"\
    shlib=/export/home/iplanet60/plugins/lib/libproxy.so
    Init fn="wl-init"
    ... iplanet "errors" log shows these errors when these lines are included
    complains about server.xml (points back to these lines) .. "line 32,
    column 15:
    Error processing obj.conf line 3 : init functions are not allowed in
    the objset"
    .. if I pull these lines .. http server starts fine.
    Started to research solaris patches - 109234-09 is installed - this
    is of interest
    as it contains libproxy.so for apache - tried loading that in but cannot
    load
    in that file as WLS plugin.
    libproxy.so : definately chmod 777 .. definately in right path.
    any thoughts on what my problem could be?
    thx JR.

  • Nsapi in cluster (obj.conf file conflict)

    Hi,
              I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
              running with the plugin...
              When I am on non-cluster environment, everything is just fine, but on
              cluster, IPlanet is starting, but I can not see anything on the browser
              (page cannot be displayed), I have attached my obj.conf file. Please let
              me know ASAP what I am doing wrong...
              Regards
              GOD BLESS
              Chris
              ## ------------- BEGIN SAMPLE OBJ.CONF CONFIGURATION ---------
              # (no cluster)
              # The following line locates the NSAPI library for loading at
              # startup, and identifies which functions within the library are
              # NSAPI functions. Verify the path to the library (the value
              # of the shlib=<...> parameter) and that the file is
              # readable, or the server will fail to start.
              Init fn="load-modules" funcs="wl-proxy,wl-init"\
              shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
              Init fn="wl-init"
              # Configure which types of HTTP requests should be handled by the
              # NSAPI module (and, in turn, by WebLogic). This is done
              # with one or more "<Object>" tags as shown below.
              # Here we configure the NSAPI module to pass requests for
              # "/weblogic" to a WebLogic Server listening at port 7011 on
              # the host ags-dtcXXXX.agsolutions.co.uk that is your localhost (e.g:
              ags-dtc1724) .
              <Object name="weblogic" ppath="*/weblogic/*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
              PathTrim="/weblogic"
              </Object>
              # NSAPI's configuration to pass request for any file begining with
              # "WLS" to weblogic server on port 7011.
              <Object name="eutility" ppath="*WLS*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
              PathTrim="/EUtility"
              </Object>
              # NSAPI's configuration to pass request for any file begining with
              # "wls" to weblogic server on port 7011.
              <Object name="eutility1" ppath="*wls*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
              PathTrim="/EUtility"
              </Object>
              # Here we configure the plug-in so that requests that
              # match "/servletimages/" will be handled by the
              # plug-in/WebLogic.
              <Object name="si" ppath="*/servletimages/*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
              </Object>
              # This Object directive works by file extension rather than
              # request path. To use this configuration, you must also add
              # a line to the mime.types file:
              # type=text/jsp exts=jsp
              # This configuration means that any file with the extension
              # ".jsp" will be proxied to WebLogic. Then you must add the
              # Service line for this extension to the Object "default",
              # which should already exist in your obj.conf file:
              <Object name=default>
              NameTrans fn=pfx2dir from=/ns-icons\
              dir="/usr/Netscape/Server4/ns-icons"
              NameTrans fn=pfx2dir from=/mc-icons\
              dir="/usr/Netscape/Server4/ns-icons"
              NameTrans fn="pfx2dir" from="/help" dir=\
              "/usr/netscape/server4/manual/https/ug"
              NameTrans fn=document-root root="/usr/eutilweb"
              Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
              WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011 PathPrepend=/jspfiles
              PathCheck fn=unix-uri-clean
              PathCheck fn="check-acl" acl="default"
              PathCheck fn=find-pathinfo
              PathCheck fn=find-index
              index-names="index.html,index.htm,wls.htm,wls.html,home.html"
              ObjectType fn=type-by-extension
              ObjectType fn=force-type type=text/plain
              Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
              Service method=(GET|HEAD) \
              type=magnus-internal/directory fn=index-common
              Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
              AddLog fn=flex-log name="access"
              </Object>
              # The following directive enables HTTP-tunneling of the
              # WebLogic protocol through the NSAPI plug-in.
              <Object name="tunnel" ppath="*/HTTPClnt*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
              </Object>
              ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
              [att1.html]
              

              Since IPlanet is started ( as per your email) , are you able to access
              index.html page?
              If yes, add the following debug flag in obj.conf and point your browser
              to
              http://[NES-host]:[port]/weblogic/index.html?__WebLogicBridgeConfig (2
              under scores)
              <Object name="weblogic" ppath="*/weblogic/*">
              Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"
              PathTrim="/weblogic" DebugConfigInfo="ON"
              </Object>
              Does the screen shot shows primary & secondary server info?
              what's the build date/time on it?
              PS: Also make sure there aren't any extra spaces in it.. Sometimes NES
              is very much picky..
              Kumar
              starssoul wrote:
              > Hi,
              >
              > I running WLS5.1.0 SP5 on Sun 5.7 Solaris v2.7, with IPlanet4.0SP1,
              > running with the plugin...
              > When I am on non-cluster environment, everything is just fine, but on
              > cluster, IPlanet is starting, but I can not see anything on the
              > browser
              > (page cannot be displayed), I have attached my obj.conf file. Please
              > let me know ASAP what I am doing wrong...
              > Regards
              >
              > GOD BLESS
              > Chris
              >
              >
              >
              >
              > Init fn="load-modules" funcs="wl-proxy,wl-init"\
              > shlib=/usr/netscape/server4/bin/https/lib/libproxy.so
              > Init fn="wl-init"
              >
              > <Object name="weblogic" ppath="*/weblogic/*">
              > Service fn=wl-proxy WebLogicCluster="10.0.4.13:7011,10.0.4.14:7011"\
              > PathTrim="/weblogic"
              > </Object>
              >
              >
              > ## ------------- END SAMPLE OBJ.CONF CONFIGURATION ---------
              [att1.html]
              

  • Configuring wl-proxy for iPlanet obj.conf

    Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension) plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?
              

    The Debug option was added in a fairly recent service pack so make sure you are using the plugin from Service
              Pack 8 (I am assuming WLS 5.1 here...).
              As for Netscape, try putting all of the parameters on one line (with no line continuation characters and no
              white space in the cluster list). Netscape, especially on NT is very sensitive to how the obj.conf file is
              formatted. Try the one attached.
              Hope this helps,
              Robert
              Ganapur Srinivas wrote:
              > Hello,
              >
              > Following is the contents of the obj.conf file, which we are using to set up the
              > iPlanet for clustered environment of Weblogic. With the below settings we are able
              > to access the JSP files, but not able to pass the Servlet request via the Proxy plug-in.
              > Also the Debug=ON option is not working properly. Of the two machines the request
              > is going to only one machine, if that particular machine is not on the net, the request
              > is not directed to the live machine which has weblogic instance running.
              >
              > If somebody already running Weblogic clustering successfully please let us know if
              > the following settings are okay in obj.conf:
              >
              > ====================START of obj.conf
              > # Sun Netscape Alliance - obj.conf
              > # You can edit this file, but comments and formatting changes
              > # might be lost when the admin server makes changes.
              >
              > # Use only forward slashes in pathnames--backslashes can cause
              > # problems. See the documentation for more information.
              >
              > Init fn="load-modules" funcs="wl-proxy,wl-init"\
              > shlib=C:/Netscape/Server4/https-MyMachine/proxy36.dll
              > Init fn="wl-init"
              >
              > Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip%
              > - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status%
              > %Req->srvhdrs.content-length%"
              > Init fn="load-types" mime-types="mime.types"
              > Init disable="yes" fn="dns-cache-init"
              >
              > <Object name="default">
              > NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
              > NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
              > NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
              > NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
              > NameTrans fn="document-root" root="D:/Webserver/examples"
              > Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy\
              > WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001"
              > ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm"
              > Debug=ON
              > PathCheck fn="nt-uri-clean"
              > PathCheck fn="check-acl" acl="default"
              > PathCheck fn="find-pathinfo"
              > PathCheck fn="find-index" index-names="index.html"
              > ObjectType fn="type-by-extension"
              > ObjectType fn="force-type" type="text/plain"
              > Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
              > Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
              > Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
              > AddLog fn="flex-log" name="access"
              > </Object>
              >
              > <Object name="weblogic" ppath="*/weblogic/*">
              > Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001, 10.236.130.47:7001" PathTrim="/weblogic"
              > </Object>
              >
              > <Object name="cgi">
              > ObjectType fn="force-type" type="magnus-internal/cgi"
              > Service fn="send-cgi"
              > </Object>
              >
              > <Object name="es-internal">
              > PathCheck fn="check-acl" acl="es-internal"
              > </Object>
              >
              > ====================END of obj.conf
              >
              > sam nemati <[email protected]> wrote:
              > >Can you please email me a sample iPlanet obj.conf with Weblogic proxy(by file extension)
              > plug-in setting to also inclulde Debug="ON" and ConnectTimeoutSec=20 parameters?
              # Sun Netscape Alliance - obj.conf
              # You can edit this file, but comments and formatting changes
              # might be lost when the admin server makes changes.
              # Use only forward slashes in pathnames--backslashes can cause
              # problems. See the documentation for more information.
              Init fn="load-modules" funcs="wl-proxy,wl-init" shlib="C:/Netscape/Server4/https-MyMachine/proxy36.dll"
              Init fn="wl-init"
              Init fn="flex-init" access="C:/Netscape/Server4/https-MyMachine/logs/access" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
              Init fn="load-types" mime-types="mime.types"
              Init disable="yes" fn="dns-cache-init"
              <Object name="default">
              NameTrans fn="pfx2dir" from="/ns-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
              NameTrans fn="pfx2dir" from="/mc-icons" dir="C:/Netscape/Server4/ns-icons" name="es-internal"
              NameTrans fn="pfx2dir" from="/help" dir="C:/Netscape/Server4/manual/https/ug" name="es-internal"
              NameTrans fn="pfx2dir" from="/manual" dir="C:/Netscape/Server4/manual/https" name="es-internal"
              NameTrans fn="document-root" root="D:/Webserver/examples"
              Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" ErrorPage="d:/Netscape/Server4/https-MyMachine/MyErrorpage.htm" Debug=ON
              PathCheck fn="nt-uri-clean"
              PathCheck fn="check-acl" acl="default"
              PathCheck fn="find-pathinfo"
              PathCheck fn="find-index" index-names="index.html"
              ObjectType fn="type-by-extension"
              ObjectType fn="force-type" type="text/plain"
              Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
              Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-simple"
              Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
              AddLog fn="flex-log" name="access"
              </Object>
              <Object name="weblogic" ppath="*/weblogic/*">
              Service fn=wl-proxy WebLogicCluster="10.236.130.48:7001,10.236.130.47:7001" PathTrim="/weblogic"
              </Object>
              <Object name="cgi">
              ObjectType fn="force-type" type="magnus-internal/cgi" Service fn="send-cgi"
              </Object>
              <Object name="es-internal">
              PathCheck fn="check-acl" acl="es-internal"
              </Object>
              

  • Issue in iPlanet loading obj.conf file in admin console module

    Dear all,
    I have done following chanegs in obj.conf file to block insecure http methods,but whenever I try to access admin module of iPlanet and restart, all manual changes done in obj.conf disappears.
    Only one time it asked me with message that file has been modified manually do you want to load?
    but this is not happening every time.I am using iplanet 9.
    Please let me know if there is any issue with this or I am missing something.
    to just brief, only after trying 20 times it asked me above mentioned message
    ---obj.conf file contents----
    <Object name="WebCon1" ppath="*/WebCon/*">
    *<Client method="(GET|POST)">*
    AuthTrans fn="match-browser" browser="MSIE*" ssl-unclean-shutdown="true"*
    *</Client>*
    *<Client method="(HEAD|PUT|TRACE|TRACK|SEARCH|INDEX|OPTIONS|DELETE|MKDIR|SHOWMETHOD|UNLINK|CHECKIN|TEXTSEARCH|SPACEJUMP|CONNECT|PATCH|PROPFIND|PROPPATCH|MKCOL|COPY|MOVE|LOCK|UNLOCK|CHECKOUT|RMDIR|ACL|VERSION-CONTROL|REPORT|UNCHECKOUT|ORDERPATCH)">*
    *AuthTrans fn="set-variable" remove-headers="transfer-encoding" set-headers="content-length: -1" error="405"*
    *</Client>*
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/cedera/iPlanetServer/Installation/ns-icons" name="es-internal"
    PathCheck fn="unix-uri-clean"
    PathCheck fn="find-pathinfo"
    ObjectType fn="type-by-extension"
    ObjectType fn="force-type" type="text/plain"
    Service method="(GET|POST)" type="image/gif" fn="send-file"
    Service method="(GET|POST)" type="image/jpeg" fn="send-file"
    Service method="(GET|POST)" type="text/css" fn="send-file"
    Service method="(GET|POST)" type="application/x-javascript" fn="send-file"
    Service method="(GET|POST)" type="magnus-internal/imagemap" fn="imagemap"
    Service method="(GET|POST)" type="magnus-internal/directory" fn="send-error" path="/WebCon/WebCon/restrict.htm"
    Service method="(GET|POST)" fn="wl_proxy" WebLogicHost="10.10.61.224" WebLogicPort="444" HungServerRecoverSecs="600" Debug="ALL" DebugConfigInfo="TRUE" RequireSSLHostMatch="FALSE" WLLogFile="/home/cedera/iPlanetServer/Installation/https-webcon2/logs/Log_JSP.txt" PathTrim="/WebCon" PathPrepend="/WebConverter" SecureProxy="ON" URIContainsSpace="true" ErrorPage="/home/cedera/iPlanetServer/Installation/docs/WebCon/WebCon/serviceUnavailable.htm" MaxPostSize="-1" DefaultFileName="WebCon/login.jsp" ConnectTimeoutSecs="10" ConnectRetrySecs="2" WLDNSRefreshInterval="0" TrustedCAFile="/home/cedera/iPlanetServer/Installation/https-webcon2/config/trustedcafile.pem"
    AddLog fn="flex-log" name="access"
    </Object>
    I have added contents marked in bold manually....
    but it was not picking up it from frontend...then suddenly after 20 time, it picked up these changes in admin...
    but now if I am trying to change in <client> tag , but it does not recognise any new changes done manually...it loads same obj.conf...whenever i restart instance from frontend...
    Edited by: sweetvish on Nov 9, 2009 9:26 PM

    After making manual changes in obj.conf, have you tried clicking the 'Apply' link in admin console and then choosing 'Load configuration Changes' option?

  • Obj.conf configuration behaving differently

    hi I have Sun Web Server update 8 installed which will talk to my weblogic server on which I have deployed two applications. The problem is that when I try and access one application from Sun web server it goes fine, however when I try and access the other application I will get a message "Not Found
    The requested object does not exist on this server. The link you followed is either outdated, inaccurate, or the server has been instructed not to let you have it. "
    To mention here, the application which I can access finally goes in to display a gif whereas the one which I am getting this error for goes on to display something like this ../manager/jsp/index.jsp
    In the logs its shows a message like:
    [17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: executing method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service"
    [17/Sep/2010:21:16:56] warning (16244): for host 135.209.101.44 trying to GET /manager, send-file reports: HTTP4142: can't find /opt/app/p1cmt1w1/Sun/SJWebServer7u8/https-p1cmt1w1.bhdc.att.com/docs/manager (File not found)
    [17/Sep/2010:21:16:56] finest (16244): for host 135.209.101.44 trying to GET /manager, func_exec reports: method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file" Directive="Service" returned -1 (REQ_ABORTED)
    The obj.conf definition is like this:
    ==================================
    "obj.conf" 55 lines, 1799 characters
    # Copyright 2008 Sun Microsystems, Inc. All rights reserved.
    # Use is subject to license terms.
    # You can edit this file, but comments and formatting changes
    # might be lost when you use the administration GUI or CLI.
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="assign-name" from="*/Calendar/" name="WLSTEST"
    # Copyright 2008 Sun Microsystems, Inc. All rights reserved.
    # Use is subject to license terms.
    # You can edit this file, but comments and formatting changes
    # might be lost when you use the administration GUI or CLI.
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/app/p1cmt1w1/Sun/SJWebServer7u8/lib/icons" name="es-internal"
    PathCheck fn="uri-clean"
    PathCheck fn="check-acl" acl="default"
    PathCheck fn="find-pathinfo"
    PathCheck fn="find-index-j2ee"
    PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
    ObjectType fn="type-j2ee"
    ObjectType fn="type-by-extension"
    ObjectType fn="force-type" type="text/plain"
    Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
    Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
    Service method="TRACE" fn="service-trace"
    Error fn="error-j2ee"
    AddLog fn="flex-log"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>
    <Object name="cgi">
    ObjectType fn="force-type" type="magnus-internal/cgi"
    Service fn="send-cgi"
    </Object>
    <Object name="send-precompressed">
    PathCheck fn="find-compressed"
    </Object>
    <Object name="compress-on-demand">
    Output fn="insert-filter" filter="http-compression"
    </Object>
    <Object name="Campaign" ppath="*/Campaign/*">
    Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    </Object>
    <Object name="manager" ppath=*/manager/*>
    Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    </Object>
    =================================================================
    The magnus.conf is like this :
    # Copyright 2008 Sun Microsystems, Inc. All rights reserved.
    # Use is subject to license terms.
    Init fn="load-modules" shlib="libj2eeplugin.so"
    Init fn="load-modules" funcs="wl_proxy,wl_init" shlib="/opt/app//Sun/SJWebServer7u8/https-abcd.xyz.net/plugins/lib/libproxy_61.so"
    Init fn="wl_init"
    Please help me someone on this.

    please upgrade to 7.0.9 as it includes fix for potential security vulnerabilities. you can download oracle iplanet web server 7.0.9 * formerly sun one / sun java system web server * from here -http://bit.ly/aPphqr
    this is what you could do
    edit <install-root>/https-<hostname>/config/obj.conf or <install-root>/https-<hostname>/<hostname>-obj.conf (depending on your configuration)
    and add the following
    <Object name="default">
    NameTrans fn="assign-name" from="<context-root-of-app1>" name="app1"
    NameTrans fn="assign-name" from="<context-root-of-app2>" name="app2"
    </Object>
    <Object name="app1">
    Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    </Object>
    <Object name="app2>
    Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    </Object>
    and comment out these existing object configurations.
    #<Object name="Campaign" ppath="/Campaign/">
    #Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    #</Object>
    #<Object name="manager" ppath=/manager/*>
    #Service fn="wl_proxy" WebLogicCluster="weblogic_server:port,weblogic_server2:port" WLTempDir="/opt/app/p1cmt1w1/temp"
    #</Object>
    and now save this file and can either run bin/reconfig (for dynamically reloading the configuration changes without any server downtime) or bin/restart -> for simply restarting the server and verify if this works out for you
    if it does address your concern then you might have to manually pull your manual configuration changes into admin config repository by running
    <install-root>/bin/wadm pull-config --user=admin --config=<hostname> <hostname>
    for more information on what how to configure web server 7, please refer to obj.conf guide.
    http://docs.sun.com/app/docs/doc/819-2630/gbysz?l=en&q=security&a=view
    http://docs.sun.com/app/docs/doc/819-2630/abvar?l=en&q=security&a=view
    http://docs.sun.com/app/docs/doc/819-2630/abuik?l=en&a=view
    http://docs.sun.com/app/docs/doc/819-2630/gdaer?l=en&a=view
    hope this helps

  • Sun One (Netscape) Plugin: Losing HTTP Session Problem

    Hi All,
    We are having some trouble with HTTP sessions. Sometimes our browser will have a session cookie set but will be issued a new session cookie anyways. This seems to occur only one in every 10 attempts, and seems to occur more frequently on certain machines. When this occurs we lose all of the session data that we were previously using.
    Our environment is as follows:
    We have three load balanced Sun One Web Servers fronting 6 mananged 8.1 sp5 web logic instances. We've verified that multicast is working and that we've configured the plugin/application to have a unique cookie name already. We've also set the persistence type to 'replicated'
    Only clue that we have so far comes from our plug-in logs. It seems to be complaining about connection pooling:
    Mon Jan 22 16:04:39 2007 getPooledConn: No more connections in the pool for Host[XXX.XXX.XXX.XXX] Port[8003] SecurePort[8004]
    Mon Jan 22 16:04:39 2007 Connect returns -1, and error no set to 55, msg 'A connect operation on a socket is not complete.'
    Any ideas? Thanks in advance!
    Regards,
    Ray Siu

    Check if your web app has the same cookie name (weblogic.xml) as defined in the obj.conf.
    Jin

  • Using a question mark in a obj.conf redirect

    We seem to have a problem with the following obj.conf entry on iPlanet v6.1 SP4:
    NameTrans fn="redirect" from="/xxxxxxxxx/?" url-prefix="http://www.domain.com/directory/?rid=zzzzzzzzz&"
    The "?" is not recognized by the server so the redirect is never executed. We have also tried:
    NameTrans fn="redirect" from="/xxxxxxxxx/%3f" url-prefix="http://www.domain.com/directory/?rid=zzzzzzzzz&"
    This is also not recognized. Is the "?" a special character for iPlanet configuration?
    Any help would be appreciated in solving this problem. Thanks

    The from parameter specifies a path prefix. Paths don't include query strings (the stuff beginning with "?" in the URL).
    I can't think of any easy way to do what you want in Sun ONE Web Server 6.1. However, the following could be used in Sun Java System Web Server 7.0:
    <If defined $query>
    NameTrans fn="redirect" from="/xxxxxxxxx/" url="http://www.domain.com/directory/?rid=zzzzzzzzz&$query"
    </If>In 6.1, you'll probably need to write some code (Java Servlet, Java Filter, CGI program, or NSAPI plugin) to get the functionality you want.

  • Obj.conf configuration help

    I am creating a profile page and the url in the address bar needs to be http://domain.com/pages/personal/Rajshree.Rath. The page Rajshree.Rath does not exist. I have to get the first name and the last name and create the page dynamically.
    I made this change in obj.conf and it worked exactly I needed. The url prepend gave me the first name and last name and the url did not change in the address bar.The page Details.jsp resides on app server.
    <Object name="weblogic" ppath="*/pages/personal*">
    Service fn="wl_proxy" WebLogicHost="weblogichost" WebLogicPort="weblogicport" PathPrepend="/subdir/Details.jsp?url=" WLProxySSL="ON"
    </Object>
    However, now the requirement has changed. The page Details.jsp needs to be on the web server.
    What configuration I need to add to obj.conf so that the page works on web server ?
    Thanks in Advance,
    Rajshree

    I assume you want to process requests for /pages/personal/user as though they were requests for /subdir/Details.jsp?url=/pages/personal/user, where /subdir/Details.jsp is a JSP running on the same web server. You can do that in Sun Java System Web Server 7.0 using the new restart SAF:<Object ppath="*/pages/personal*">
    NameTrans fn="restart" uri="/subdir/Details.jsp?url=$uri"
    </Object>I'm not aware of any way to do this in earlier versions of Web Server.
    An alternative would be to use normal Servlet <url-pattern> mappings in web.xml to map /pages/personal/* to a particular JSP. If you do that, though, the information about the originally requested path won't appear in the query string, so you'd need to modify the way the JSP figures out which user's page is being requested.

  • Why doesn't iplanet 4.19 recognize a line obj.conf "AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true""?

    We add this line for fixing "page can not be displayed" problem we suffer. But After apply it below "<Object name="default">", according to the document. Admin console shows, "Unknown: AuthTrans: match-browser" in red. Can anybody give me advice to this?Thanks.

    I have the same problem.
    Can anybody help?
    Which version of iPlane I need to use following directive in "obj.conf":
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true".
    Is there any alternative of this directive for iPlanet 4.1?
    Thanks.

  • Firefox says I need plugin updates Plugins are listed as Netscape plugins am I supposed to use these for Firefox

    Firefox says my plugins need updating. When I look at the plugin update page it says these
    are Netscape plugins. Do I need to use these with Firefox? I have 3.6 installed.
    == This happened ==
    Just once or twice
    == Today

    Your plugins list shows outdated plugin(s) with known security and stability risks.
    # Java Plug-in 1.5.0_06 for Netscape Navigator (DLL Helper)
    Update the [[Java]] plugin to the latest version.
    See http://java.sun.com/javase/downloads/index.jsp#jdk (you need JRE)

  • Confused - obj.conf

    I am attempting to configure Web Server 6.1 to support an application that uses HTTP 1.0 and expects a content-length header in the response. The response is generated from a php script (index.php). The php script does not generate the header itself.
    Here is my modified obj.conf:
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn=pfx2dir from=/mc-icons dir="/opt/SUNWwbsvr/ns-icons" name="es-internal"
    NameTrans fn=document-root root="$docroot"
    PathCheck fn=unix-uri-clean
    PathCheck fn="check-acl" acl="default"
    PathCheck fn=find-pathinfo
    PathCheck fn=find-index index-names="index.php"
    ObjectType fn=type-by-extension
    ObjectType fn=force-type type=text/plain
    Service fn="match-browser" browser="*" http-downgrade="1.0" UseOutputStreamSize="8192"
    Service fn="php5_execute" type="magnus-internal/x-httpd-php"
    Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
    Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
    Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
    Service method=TRACE fn=service-trace
    Error fn="error-j2ee"
    #AddLog fn=flex-log name="access"
    AddLog fn=flex-log name="extended"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="cgi">
    ObjectType fn=force-type type=magnus-internal/cgi
    Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>
    <Object name="send-compressed">
    PathCheck fn="find-compressed"
    </Object>
    <Object name="compress-on-demand">
    Output fn="insert-filter" filter="http-compression"
    </Object>
    What is confusing is:
    1. Why do I need the http-downgrade=1.0 twice - once in AuthTrans and once in Service?
    2. How come this works at all since the server should stop at the first Service entry, i.e. the match-match browser one and not call the PHP.
    3. Why does this only work for GET and not for POST ??????
    Any help would be greatly appreciated.

    You don't see the UseOutputStreamSize syntax error when you have the AuthTrans directive because only the first match-browser directive to match the browser will actually be executed. I think you should remove your Service fn="match-browser" directive altogether. Instead, you could use the following:<Object name="default">
    AuthTrans fn="match-browser" browser="*" http-downgrade="1.0"
    Service fn="php5_execute" type="magnus-internal/x-httpd-php" UseOutputStreamSize="8192"
    </Object>Neither UseOutputStreamSize nor http-downgrade are specific to GET. Both work with POST. If you don't get a Content-length: header on POST responses, it may be because the content is more than 8192 bytes in length. Try changing UseOutputStreamSize="8192" to UseOutputStreamSize="65536".

  • PPATH directive ignored in obj.conf

    I just upgraded to 7.0 u3 from 6.1 sp3. Now it appears as if my ppath directives are ignored. This is supposed to use basic authentication. It works in 6.1 but not in 7.0. below is what my obj.conf looks like. Any help would be greatly appreciated.
    <Object name="reverseproxyspeller">
    ObjectType fn="force-type" type="magnus-internal/passthrough"
    Service fn="service-passthrough" servers="http://prod-fs.alumniconnections.com:8080"
    </Object>
    <Object name="default">
    <Client uri="*olclogin.app">
    AuthTrans fn="set-variable" keep-alive="disabled" http-downgrade="1.0"
    </Client>
    AuthTrans fn="olc-cookie-auth"
    AuthTrans fn="nsOLCauth"
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="assign-name" from="*/aspell_setup.php" name="reverseproxyspeller"
    NameTrans fn="assign-name" from="*/spell-check-logic.php" name="reverseproxyspeller"
    NameTrans fn="assign-name" from="*/spell-check-savedicts.php" name="reverseproxyspeller"
    NameTrans fn="nsOLCsetrc"
    NameTrans fn="strip-params"
    NameTrans fn="nsOLCrestrict"
    NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/app.sph/mydirectory.app"
    NameTrans fn="substring-replace" replace="/directory.cgi" search="/app.sph/old.app"
    NameTrans fn="substring-replace" replace="/memberupdate.cgi" search="/app.sph/memberupdate.app"
    NameTrans fn="substring-replace" replace="/networking.cgi" search="/app.sph/networking.app"
    NameTrans fn="substring-replace" replace="/olclogin.cgi" search="/app.sph/olclogin.app"
    NameTrans fn="substring-replace" replace="/mycontacts.cgi" search="/mydirectory.cgi"
    NameTrans fn="substring-replace" replace="/directory.cgi" search="/old.cgi"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/WWW/ns-home/lib/icons" name="es-internal"
    PathCheck fn="uri-clean"
    PathCheck fn="check-acl" acl="default"
    PathCheck fn="find-pathinfo"
    PathCheck fn="find-index-j2ee"
    PathCheck fn="find-index" index-names="index.html,index.htm,index.cgi,index.jsp,home.html"
    ObjectType fn="type-j2ee"
    ObjectType fn="type-by-extension"
    ObjectType fn="force-type" type="text/plain"
    Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
    Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
    Service fn="send-cgi" type="magnus-internal/cgi" user="$user" group="$group" dir="$dir" chroot="$chroot" nice="$nice"
    Service fn="shtml_send" type="magnus-internal/parsed-html" method="(GET|HEAD)" opts="noexec"
    Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
    Service fn="sapphire-form" method="(GET|POST)" type="magnus-internal/sapphire"
    Error fn="error-j2ee"
    Error reason="Unauthorized" fn="query-handler" path="/usr/olc/cgi-bin/invalidlogin.cgi"
    Error reason="Server Error" fn="query-handler" path="/WWW/olc/cgi-bin/servererrorhandler01.cgi"
    Error reason="Not Found" fn="send-error" path="/WWW/ns-home/docs/errorpages/notfound.html"
    AddLog fn="flex-log"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="cgi">
    ObjectType fn="force-type" type="magnus-internal/cgi"
    Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>
    <Object name="send-compressed">
    PathCheck fn="find-compressed"
    </Object>
    <Object name="compress-on-demand">
    Output fn="insert-filter" filter="http-compression"
    </Object>
    <Object ppath="/WWW/ns-home/docs/olc/pub/*">
    PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
    </Object>
    <Object ppath="/WWW/ns-home/docs/olc/admin/*">
    PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
    </Object>
    <Object ppath="/WWW/ns-home/docs/olc/admin/*">
    PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
    </Object>
    <Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
    PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
    </Object>
    <Object ppath="/WWW/ns-home/docs/olc/membersonly/*">
    PathCheck realm="Alumni Connections Community" fn="require-auth" auth-type="basic"
    </Object>

    Add in default object as the first PathCheck directive (just above PathCheck fn="uri-clean")
    <If $ppath =~ "/WWW/ns-home/docs/olc/pub/" or $ppath =~ "/WWW/ns-home/docs/olc/membersonly/" or $ppath =~ "/WWW/ns-home/docs/olc/admin/">
    PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
    </If>Assuming your Web Server document root is "/WWW/ns-home/docs/" you can try this as well:
    <If $uri =~ "/olc/pub/" or $uri =~ "/olc/membersonly/" or $uri =~ "/olc/admin/">
    PathCheck fn="require-auth" realm="Alumni Connections Community" auth-type="basic"
    </If>Edited by: mv on Oct 10, 2008 8:13 AM

  • $doc root Variable use in obj.conf file of iPlanet6 SP2

    Is there any way I can build expressions in obj.conf file using $docroot variable?
    I have the following configured in the obj.conf now:
    <<Object name="default">
    NameTrans fn="NSServletNameTrans" name="servlet"
    NameTrans fn="pfx2dir" from="/servlet" dir="/home/ns6.0SP2/https-site/docs/servlet" name="ServletByExt"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
    NameTrans fn="pfx2dir" from="/cgi-bin" dir="/home/ns-home/https-site/cgi-bin" name="cgi"
    NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
    NameTrans fn="document-root" root="$docroot"
    </Object>
    I would like to have something like this:
    <Object name="default">
    NameTrans fn="NSServletNameTrans" name="servlet"
    NameTrans fn="pfx2dir" from="/servlet" dir="$docroot/servlet" name="ServletByExt"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/home/ns6.0SP2/ns-icons" name="es-internal"
    NameTrans fn="pfx2dir" from="/cgi-bin" dir="$docroot/../cgi-bin" name="cgi"
    NameTrans fn="pfx2dir" from="/manual" dir="/home/ns6.0SP2/manual/https" name="es-internal"
    NameTrans fn="document-root" root="$docroot"
    </Object>
    I have tried the code above but unfortunatelly it does not work - I get "Not Found
    The requested object does not exist on this server." error.
    I need this to specify different $docroot-s for different URLs but keep the same default object for all of them.
    Is there any other way to implement this?
    Thank you very much for your cooperation!
    Sasha

    Yes, this technique does work.
    However, in your example, the NameTrans fn="pfx2dir" from="/cgi-bin" directive will probably not work as you expect. This is because the PathTrans fn="unix-uri-clean" directive (which is written to all obj.conf files iWS creates) will reject all paths that contain "..". For more information on the unix-uri-clean SAF, refer to the NSAPI Programmer's Guide at http://docs.iplanet.com/docs/manuals/enterprise/50/nsapi/03_direc.htm#18613

Maybe you are looking for