Partial SSL implementation for iplanet web server

Hi,
I would like to make a web server SSL enabled partially.
Say something like this
https://mysite:8080/htmlfiles/log.html
Only the above url should be SSL protected.
Other urls like http://mysite:8080/entryservlet shouldnt be SSL enabled
Thanks in advance
Regards
Thameem

iWS4.x:
Create two instances - one on Port 80 and runs without SSL, and one on Port 443 that uses SSL. Configure your docs roots such that htmlfiles/log.html is not part of the doc-root for the insecure instance.
iWS/S1WS6.x:
Create a single instance with two listen sockets and two virtual servers. Otherwise the same as above.

Similar Messages

SSL implementation on iplanet web server 6.0

Hi,
we've successfully implemented verisign SSL certificate on iplanet web server 6.0 and we have configured the a parent directory to non-ssl class and the a sub directory to the ssl-class. when we tried to run a JSP page, we are getting an error that the page is not found.
if both are configured for the same directory (ie.. the parent directory then its working fine)....
can anybody tell me what went wrong with the implementation...
thanks in advance,
regards
Ramachandran

How did you configure one directory use ssl and another director not? Are you using only one listener?
I would like to configure my iws to work like this:
a directory like server/app uses ssl3
another directory like server/appler uses ssl3 without client authentication. Important: I�m not able to create another listener. I must use listerners already created.

How to find out version of patch for iPlanet Web Server 6.1 on Win2000

I have a iPlanet Web Server 6.1 SP1 running on Windows 2000. Can I find out what patches has been installed for my iPlanet Web Server?
Thanks in advance for any information.

n/m, read version, not patches.
Edited by: David.Eriksson on Jun 30, 2008 8:12 AM

Need SP 9 for iPlanet web server

We're running an iPlanet web server, vers 4.1 on HP Unix. I have an issue which someone has indicated was fixed by SP 9. Where can I download this service pack?

The evaluation copy of latest service pack release(4.1sp13) is available here:
http://wwws.sun.com/software/download/products/3f8472da.html
PS: 4.1 is going to reach end of support life soon, may be you want to plan an upgrade to 6.1 version.
Thanks
Manish

Query on Support of IPLANET WEB SERVER

Hi
Kindly note that as in Download section I am not able to see the IPLANET WEB SERVER in WEB SERVER CATEGORY. As when i click on Sun One web Server in some of the location it shows that "formerly iplanet web server" As I have one doubt regarding that whether Now the support & Newer version for IPLANET WEB SERVER has been dropped from Sun ? If I want to download Iplane web server 6.0 from where I can get it ?

At first it is iPlanet web server, then Sun ONE web server. Now it is called Sun Java System Web Server. 7.0 is the current version.
Check this web page for support related questions:
http://www.sun.com/software/products/web_srvr/lifecycle.xml
Download the last known release of Sun ONE web server 6.0 from:
http://www.sun.com/download/products.xml?id=43a84f89

To Download iPlanet Web Server 6.0 SP2

Hi,
I tried to download iPlanet WS 6.0 SP2 from the following URL http://wwws.sun.com/software/download/download/5126.html from the direct connected internet machine. But i couldn't download the same. So could you please tell me http mirror sites & ftp mirror sites from where i can download iPlanet WS 6.0 SP2 for Windows Platform?
Thanks in advance,
Mani

Hi,
I tried to download iPlanet WS 6.0 SP2 from the
m the following URL
http://wwws.sun.com/software/download/download/5126.ht
l from the direct connected internet machine. But i
couldn't download the same. So could you please tell
me http mirror sites & ftp mirror sites from where i
can download iPlanet WS 6.0 SP2 for Windows
Platform?
Thanks in advance,
ManiHi Mani,
I also am looking for iPlanet Web Server 6.0 SP2 for Solaris. Were you succesful in finding a mirror http or frp site?
Thanks,
Vincent

Can iDSIE (Meta-directory) be used as a single authentication point from iPlanet Web Server for multiple databases using direct "or" indirect connectors?

Basically, the latest release of iPlanet Web Server forces the user/group information source to be an LDAP database. Currently, the user accounts are in Active Directory, NT, Oracle and NetWare Directory Service in this heterogeneous environment.
What I am looking for is a meta-directory product which can do two things:
1-Single authentiation point for users in mulitple databases from iPlanet Web Server.
2-Single administration point for all of the databases listed above.
For example, can I add/modify/delete a user account at the meta-directory level and have this propagate to all of the databases listed above reducing the administration to one meta-directory product?

With an Virtual Directory solution, you can authenticate Iplanet Web Server against nearly anything including any LDAPv3 Directory Server, Microsoft Active Directory, Windows NT Domains, Oracle RDBMS, IBM DB2 RDBMS, Microsoft SQL, and others.
All of this is done dynamically and doesn't require any heavyweight synchronization process. The Virtual Directory acts as a dynamic schema / DIT / data translation engine for different types of repositories.
OctetString's Virtual Directory Engine is one such example. You can download a 30 day evaluation copy at:
http://www.octetstring.com
It will take you all of 30 minutes to get iPlanet Web Server authenticated against and using groups from things like Oracle RDBMS, Windows NT Domains, or Active Directory.

Add request header for a iplanet web server instance

Hello
Does any one know how can I add a request header for a iplanet web server instance?

I believe you want to add request header :
Adding request header :
AuthTrans fn="set-variable" $headers{"myheader1"}="myheadervalue"
Adding response header
Output fn="set-variable" $srvhdrs{"myresphdr"}="myresphdrvalue"

Need IPlanet Web Server, Enterprise edition v4.1 for WinNT

Does anybody have a copy of the IPlanet Web Server, Enterprise edition v4.1 for WinNT? I need it to build a developement environment for the company I'm consulting for.

Try this link http://www.sun.com/download/products.xml?id=4000473e
It's called Sun ONE Web Server 4.1

Global data in a servlet using iPlanet Web Server

Our configuration is an Applet->Servlet->JNI->C/C++ code.
We have C code that does a number of lengthy mathematical calculations. This C code not only uses its own global variables but, it is also comprised of numerous subroutines that all call each other, reading and writing global C variables as they go. These globals are all isolated to the C code shareable object (.so) library that is included using the LoadLibrary call when the servlet is initialized.
The problem is that in a multi-user environment (3-5 simultaneous users) we need to have each user have their own "copy" of the servlet (and the C code) so that users will not be accessing each other's global data. We can NOT have only one copy of the C code and define it as synchronized because the calculations that are performed can take a very long time and we can not hold off user requests while the firs user finishes.
Our hope is that there is a way to configure the iPlanet Web server such that each new user that starts up a copy of the Applet/Servlet combination will get their own "space" so that they can work independently of any other user. We have at most 20 users of this system and only 3-5 simultaneous users so we should not have a problem with memory or CPU speed.
If anyone has a solution, I would greatly appreciate it!

The C library is shareable. But you don't want it to be shared. That's your question summarized, isn't it?
You probably can't prevent it from being shared, so to prevent multiple use of it you would have to queue up the requests to be done one at a time. WynEaston's suggestion of having the servlet implement SingleThreadModel would help, but I believe the servlet spec allows servers to run multiple copies of a servlet that does that (as opposed to running a single copy in multiple threads).
Your other alternative is to rewrite the math in Java, or at least in some object-oriented language where you don't need global variables (which are the source of your problem). All right, I can already hear you saying "But that wouldn't be as fast!" Maybe not, but that isn't everything. Now you have a problem in queueing theory: do you want a single server that's fast, but jobs have to wait for it, or do you want multiple servers that aren't as fast, but jobs don't have to wait? That's a question you would have to evaluate based on the usage of your site, and it isn't an easy one.

Plumtree portal server (v5.0.1) hosted on iPlanet Web Server (v6.0)

Has anyone tried to port the Plumtree Corporate Portal v5.0.1 portal server component to iPlanet Enterprise Web Server 6.0 (aka SunONE Web Server, v6.0 )? Plumtree doesn't support this, but I am trying to merge a custom SSO authenticator to the Plumtree portal (v5.0.1). The authenticator runs as a plug-in to SunONE Web Server and has been in place on our customer's web site for a long time now.
I have this working great in with SSL turned off, but I am having a difficult time getting past an error when I turn on SSL. I can get the portal server to run fine with SSL turned on through Tomcat on the same machine, using the same certificate and JRE. I can also get the SunONE server to run other servlet applications fine with SSL turned on. However, there appears to be either: (1) an incompatibility between SunONE's NSServlet plug-in that handles servlets and the Plumtree framework classes that set up replies via SSL, or (2) a configuration error in my setup somewhere. I'm hoping that (2) is the real culprit, but I've tried just about everything I can think of, and haven't been able to resolve this problem.
The server starts up fine and I can load non-portal content without a problem. But when I log in, the portal's main community page that should be returned is not being returned to the client. PTSpy (a debugging aid for the Plumtree portal) doesn't indicate any problems, so I know the content is being built by the portal correctly, but the built page is never being sent back to the requesting client.
Here is the error that gets logged to my SunONE server's error log:
[29/Dec/2003:15:05:53] failure ( 2772): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.lang.NoClassDefFoundError: javax/net/ssl/SSLSocket
at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:793)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:702)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:583)
at java.net.URL.openStream(URL.java:960)
at org.apache.xerces.readers.DefaultReaderFactory.createReader(DefaultReaderFactory.java:149)
at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromDocument(DefaultEntityHandler.java:493)
at org.apache.xerces.framework.XMLParser.parseSomeSetup(XMLParser.java:314)
at org.apache.xerces.framework.XMLParser.parse(XMLParser.java:1097)
at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:195)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:124)
at com.plumtree.openfoundation.xml.dom.XPBuilder.LoadDocumentFromURI(XPBuilder.java:203)
at com.plumtree.xpshared.jsutil.JSRegistry.LookupJSComponentVersions(JSRegistry.java:243)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponentVersions(JSRegistry.java:184)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:465)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:444)
at com.plumtree.uiinfrastructure.statichelpers.ConfigHelper.GetCommonJSIncludes(ConfigHelper.java:1330)
at com.plumtree.uiinfrastructure.form.AFormAS.DisplayCommonJavaScript(AFormAS.java:59)
at com.plumtree.portalpages.common.uiparts.PlumtreeAS.DisplayCommonJavaScript(PlumtreeAS.java:88)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.DisplayHead(PlumtreeDP.java:599)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.Display(PlumtreeDP.java:112)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.ProcessDisplayPageOrRedirect(Interpreter.java:816)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.HandleRequest(Interpreter.java:1589)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.DoService(Interpreter.java:448)
at com.plumtree.uiinfrastructure.web.XPPage.service(XPPage.java:141)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.iplanet.server.http.servlet.NSServletRunner.invokeServletService(NSServletRunner.java:919)
at com.iplanet.server.http.servlet.WebApplication.service(WebApplication.java:1061)
at com.iplanet.server.http.servlet.NSServletRunner.ServiceWebApp(NSServletRunner.java:981)It looks like a Java classpath issue, but I've verified (even in the same log file with java debugging turned on) that the SSLSocket class is getting loaded. I've even tried moving the specification of the jar file containing this class (jsse.jar, part of the JRE) to the beginning and end of my classpath setting.
I'm using the same JRE that is bundled with the Tomcat release supplied with my Plumtree 5.0.1 installation (1.4.1_02). I can't get the JRE that came bundled with the SunONE v6.0 release to work at all.
I've posted a similar message on a couple other forums (Java and iPlanet-related, as well as on Plumtree's customer forum) and haven't found an answer yet. Does anyone have any ideas?

In case anyone else experiences this, I have apparently stumbled upon an issue with iPlanet's handling a specified JRE/JDK instead of the supplied JDK in iPlanet Web Server v6.0, SP5, though I found a way around it to resolve my problem.
I had been specifying a different JRE to run with through the administrative server manager. However, even though I was specifying to load all the JRE's jar files in my classpath setting, iPlanet was only loading the rt.jar file for my specified JRE. With verbose logging turned on, the error log was indicating that the other classpath specified jar files were being loaded, but apparently they were not being used. The JDK that was released with iPlanet appears to be being used for all other JRE classes outside of those defined in rt.jar. Since the JDK supplied with the iPlanet release didn't contain jsse.jar, which contains SSL support, it was not being loaded and was causing the problem I was seeing.
Instead of specifying the JRE of a different JDK that I was using, I changed the global setting in the administrative server manager to override the entire JDK. This has resolved my problem.
So if you specify a JRE to override the iPlanet supplied JDK/JRE, it appears that only the rt.jar file of the specified JRE will be loaded, and the jar files associated with the iPlanet-supplied JRE will be used for all other classes. Specification of a complete JDK to override the supplied one will resolve this.

Iplanet web server 7 -how to get more information when a certificate is untrusted ?

Hi
When a client tries to access to iplanet 7.0.15, we only get a line in the errors log with a simple error., for instance SSL_ERROR_UNKOWN_CA_ALERT...
We would like to know if it is possible to configure iplanet to get more information about this request..
iPLANET is receiving requests from a lot of clients and sometime it is difficult to identify the source of a error without more information..
We would like have similar information that access log shows when certificate is valid
We get the same information with log-level = info or finest..
Thanks
Uge

Hi Uge,
Setting the iPlanet Web Server log level to 'finest' will give you more information, but it is very verbose, and you still might not get the information you are looking for. You might want to try 'fine' or 'finer' first to see if either of those gives you the information you need.
With regards to the above error, SSL_ERROR_UNKOWN_CA_ALERT, this means that the client presented a certificate in the SSL handshake that was signed by a CA that the Web Server doesn't have in it's certificate database. In order to ensure the Web Server is kept upto date with the latest set of public CA certificates, I would recommend you upgrade to the latest version.
If you know that the certificates the clients are using are from an internal CA, you need to ensure the Root CA Certificate from that internal CA is installed in the Web Servers certificate database as a trusted certificate.
regards
Tracey

IPlanet Web Server & Glassfish not takeover session from stoped instance?

I have 3 Physical Machine
1> server hostname is 'linuxgf175'(192.168.1.175) main cluster control (DAS) and Install iPlanet Webserver with gflb-configurator
2> server hostname is 'linuxgf170'(192.168.1.170) server for node1(n1) has Instance1 (i1)
3> server hostname is 'linuxgf180'(192.168.1.180) server for node2(n2) has Instance2 (i2)
1. I was install iPlanet Web Server to same DAS machine. (192.168.1.175)
2. And create Server Certificates request.
Certificate Details
Nickname cert-linuxgf175
Subject CN=linuxgf175
Issuer Self Signed
Key Type RSA
Key Size (bits) 1024
Valid From April 18, 2011 7:30:09 PM ICT
Valid Till April 18, 2012 7:30:09 PM ICT
Fingerprint CE:D8:5E:97:DB:56:89:00:56:A7:0F:EB:0D:D4:4A:06
Serial Number 00:94:26:11:AB
Server Name linuxgf175
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
3. And create new http-listenser (SSL for communicate with DAS port 8082 )
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
4. And import cert file(s1as.rfc) to glassfish-lbconfigurator wizard. (run lb-configure command #java -jar glassfish-lbconfigulator.jar )
I was exported that file like this command :
keytool -export -rfc -alias s1as -keystore /usr/glassfish3/glassfish/domains/domain1/config/keystore.jks -file ./s1as.rfc
5. Create and Apply http-lb to DAS domain success !! :)
asadmin> create-http-lb devicehost linuxgf175 deviceport 8082 --target c1 cluster_lb
Enter admin user name> admin
Enter admin password for user "admin">
Command create-http-lb executed successfully.
asadmin>
asadmin> apply-http-lb-changes cluster_lb
Enter admin user name> admin
Enter admin password for user "admin">
Command apply-http-lb-changes executed successfully.
6. Deploy "clusterjsp.ear" Application to Cluster c1 with avalibilityenable=true
deploy success
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
7.try to open application , use browser open to iPlanet webserver success
http://192.168.1.175:80/clusterjsp
## But, It can not handle session between instance (i1) and Instance 2 (i2)
i input some data session into instance (i1)
HttpSession Information:
Served From Server: 192.168.1.175
Server Port Number: 80
Executed From Server: linuxgf170
Executed Server IP Address: 127.0.0.1
Session ID: 3ed17253ef55fb5d37203a738e2b
Session Created: Thu Apr 21 00:20:08 ICT 2011
Last Accessed: Thu Apr 21 00:20:08 ICT 2011
Session will go inactive in 1800 seconds
INPUT : test1 = test1
INPUT : test2 = test2
after that try to stop Instance (i1) linuxgf170
come back to browser and refesh button. It's change route display to instance i2 (linuxgf180)
HttpSession Information:
Served From Server: 192.168.1.175
Server Port Number: 80
Executed From Server: linuxgf180
Executed Server IP Address: 127.0.0.1
Session ID: 3ee66ddd60498d68660a55fadcc5
Session Created: Thu Apr 21 00:21:34 ICT 2011
Last Accessed: Thu Apr 21 00:21:34 ICT 2011
Session will go inactive in 1800 seconds
BUT INPUT DATA is not display ?? I loss...session.
Please sir.... please see image url and help clarify T_T
Can direct contect to me for more help Thank you very much for best support.
[email protected]
skype : mr_lalit

More iPlanet startup log....
[root@linuxgf175 webserver7]# cd admin-server/
[root@linuxgf175 admin-server]# cd bin/
[root@linuxgf175 bin]# ./startserv
Oracle iPlanet Web Server 7.0.9 B07/04/2010 01:31
info: CORE3016: daemon is running as super-user
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_20] from [Sun Microsystems Inc.]
info: WEB0100: Loading web module in virtual server [admin-server] at [admingui]
info: WEB0100: Loading web module in virtual server [admin-server] at [jmxconnector]
info: HTTP3072: admin-ssl-port: https://linuxgf175:8989 ready to accept requests
info: CORE3274: successful server startup
[root@linuxgf175 bin]# cd ../../
[root@linuxgf175 webserver7]# pwd
/usr/glassfish3/webserver7
[root@linuxgf175 webserver7]# cd https-linuxgf175/
[root@linuxgf175 https-linuxgf175]# cd bin/
[root@linuxgf175 bin]# ./startserv
Oracle iPlanet Web Server 7.0.9 B07/04/2010 01:31
info: reports: Initializing lbplugin BuildId: GlassFish 3.1 load-balancer plugin b05
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_20] from [Sun Microsystems Inc.]
config: , name-trans-passthrough reports: init-passthrough has not been called
config: , name-trans-passthrough reports: init-passthrough has not been called
config: , name-trans-passthrough reports: init-passthrough has not been called
warning: reports: lb.configurator: XML_VALIDATOR_WARNING: Cookies will not be rewritten by web server. All cookie updates will be handled by application server. If you are using older version of application server, then failover will not work.
warning: reports: lb.configurator: Preferred failover instance feature is enabled.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf170:28080 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf170:28181 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf180:28080 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf180:28181 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf170:28081 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf170:28182 has been intialized.
info: HTTP3072: http-listener-1: http://linuxgf175:80 ready to accept requests
info: HTTP3072: http-listener-ssl: https://linuxgf175:8090 ready to accept requests
info: CORE3274: successful server startup
[root@linuxgf175 bin]#

FW: iPlanet Web Server 4.x Advisory

All--
A message from iPlanet about iWS:
Recommend Immediate Patch/Upgrade
We are writing to inform you of an important upgrade recommendation. iPlanet
has identified a security vulnerability in the iPlanet Web Server Enterprise
Edition 4.x products. This problem does not affect any Web Server releases
prior to the 4.x versions, however it does affect all iPlanet applications
operating on the Web Server platform.
A patch and implementation instructions to address the problem are now
available on the iPlanet.com Tech Support site at
http://www.iplanet.com/support/. Without this patch/upgrade, the problem
will persist and affect your site's data security, potentially leading to a
data corruption event.
iPlanet urges all iPlanet Web Server customers to upgrade immediately to
prevent any potential data security risks, and we apologize for any
inconvenience that this may cause you.
If you have additional technical questions, please call your technical
support contact.
Sincerely,
Annelies Habermacher
Vice President, Worldwide Customer Support
iPlanet E-Commerce Solutions
See the following links for more information:
http://atstake.com/research/advisories/2001/index.html#041601-1
http://www.kb.cert.org/vuls/id/276767
The iPlanet JATO Team

Can you provide the error logs file of the instance which fails to start?
Thanks

Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout).

Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout). It is as if the server has decided that the client has timed out during the file upload. The default setting is 30 seconds for AcceptTimeout in the magnus.conf file. This should be ample to get the file across, even increasing this to 2 minutes just produces the same error after 2 minutes. Any help appreciated. Apologies if this is not the correct forum for this, I couldn't see one for iPlanet and Web, many thanks, Kieran.

Hi,
You didnt mention which version of IWS. follow these steps.
(1)Goto Web Server Administration Server, select the server you want to manage.
(2)Select Preference >> Perfomance Tuning.
(3)set HTTP Persistent Connection Timeout to your choice (eg 180 sec for three minutes)
(4) Apply changes and restart the server.
*Setting the timeout to a lower value, however, may prevent the transfer of large files as timeout does not refer to the time that the connection has been idle. For example, if you are using a 2400 baud modem, and the request timeout is set to 180 seconds, then the maximum file size that can be transferred before the connection is closed is 432000 bits (2400 multiplied by 180)
Regards
T.Raghulan
[email protected]

Partial SSL implementation for iplanet web server

Similar Messages

Maybe you are looking for