Proxy server DN map

We have a Notes server with Groups at the root of the tree( base = "") I have a DN mapping rule to map ou=groups,dc=example,dc=com. This works fine for a search of the groups container, however when I try to retrieve a object such as cn=test,ou=groups,dc=example,dc=com, the DN is not rewritten.
In the access log I see base="" when search base is "ou=groups,dc=example,dc=com" but "cn=test,ou=groups,dc=example,dc=com" when search is "cn=test,ou=groups,dc=example,dc=com" where it should be "cn=test".
Any suggestions?
Config below:
./dpconf get-ldap-data-view-prop Notes-groups-view
alternate-search-base-dn : -
attr-name-mappings : none
base-dn : ou=groups,dc=example,dc=com
connect-to-parent : -
contains-shared-entries : false
custom-distribution-algorithm : none
description :
distribution-algorithm : none
dn-join-rule : none
dn-mapping-attrs : cn
dn-mapping-attrs : entrydn
dn-mapping-attrs : member
dn-mapping-attrs : uniquemember
dn-mapping-source-base-dn : ""
excluded-subtrees : -
filter-join-rule : none
filter-primary-join-rule : none
is-enabled : true
is-read-only : true
is-routable : true
ldap-data-source-pool : Notes-only-pool
lexicographic-attrs : all
lexicographic-lower-bound : none
lexicographic-upper-bound : none
non-viewable-attr : none
non-writable-attr : none
numeric-attrs : all
numeric-default-data-view : false
numeric-lower-bound : none
numeric-upper-bound : none
pattern-matching-base-dn-regular-expression : all
pattern-matching-base-object-search-filter : all
pattern-matching-dn-regular-expression : all
pattern-matching-one-level-search-filter : all
pattern-matching-subtree-search-filter : all
process-bind : -
replication-role : master
viewable-attr : all except non-viewable-attr
writable-attr : all except non-writable-attr

Hello,
This is probably a bug as handling of null/empty suffix is managed in a special way by the proxy.
Feel free to contact Oracle support.
-Sylvain

Similar Messages

How to configure SharePoint HNSC with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.

Could you please let me know how SharePoint HNSC can be configured with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
In normal path based site collections/web applications, reverse proxy configuration can be done using alternate access mappings with Public URL = "proxy URL", internal = "HNSC Share Point URL" so that share point sends response back
to Public URL = "proxy URL".
In Host Named Site Collections, alternate access mappings are not supported. Each HNSC is designed to have only one URL in each zone. Zone is one of the five zones(Default,Intranet,Internet,Custom,Extranet) with each of which only one alternate
URL is associated. This is what we are able to get using power shell command "Set-SPSiteUrl", but this will not help us to get the response back to proxy URL after a request sent to share point because we could not find any mechanism in share
point HNSC to respond to a different URL(proxy URL). Consequently, Share Point URLs are exposed to external users.
Below share point article in MSDN blog is symmetrical to what we are observing with Share Point 2013 and Proxy Server. It mentions that internal HNSC URLs can’t be hidden using any proxy server. If hiding the internal Share Point URLS is a requirement,
it suggests to use a web application instead of host named site collections.
Though I’m also observing the same behavior with Share Point 2013 HNSC, Could you please confirm my understanding is correct.
http://blogs.msdn.com/b/kaevans/archive/2012/03/27/what-every-sharepoint-admin-needs-to-know-about-host-named-site-collections.aspx
Excerpt from above article-
"Host Named Site Collections Only Use One Host Name
Continuing on the discussion on AAMs and host named site collections, you cannot use multiple host names to address a site collection in SharePoint 2010. Because host-named site collections have a single URL, they do not support alternate access mappings and
are always considered to be in the Default zone. This is important if you are using a reverse proxy to provide access to external users. Products like Unified Access Gateway 2010 allow external users to authenticate to your gateway and access a site
as http://uag.sharepoint.com and forward the call to http://portal.sharepoint.com. Remember that URL rewriting is not permitted. Further, a site collection can only respond to one host name. This means if you are using a reverse proxy, it must forward the
calls to the same URL. If your networking team has a policy against exposing internal URLs externally, you must instead use web applications and extend the web application using an alternate access mapping."<u5:p></u5:p>

Hi Satish,
You are right that only one URL is allowed for each zone of the host-name site collections in both SharePoint 2010 and SharePoint 2013.
It is by design that each host-name site collection only support one URL for each zone.
The article below is about RTM version of SharePoint, and it is the same for SharePoint 2013 with the latest CU.
https://support.microsoft.com/en-us/kb/2826457
So to make the URL of HNSC not exposed to external users is not supported, you need to use path-based sites instead.
Best regards.
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

How to properly terminate SSL at Sun Proxy Server?

Hi:
Client is using Sun Proxy Server (4.0.x) as a reverse proxy to a host with Sun Application Server Enterprise Edition with Access Manager / Portal / Identity Manager deployed as J2EE apps.
For access through proxy with http, it is properly seen by AM as an http URL. But for access through proxy with https, it is seen by AM as an https URL.
My suspicion is that the Proxy Server is not properly configured to terminate SSL at the proxy. However, I do not have enough experience with Sun Proxy Server to confirm. Below is the configuration file.
Any ideas? My novice theory is that the multiple mapping rules are causing some sort of conflict. Perhaps the connect rule for port 443? All of the examples I have been able to find for mapping rules are from http to http or a local file, NOT https to http and vice-versa. Are these rules correct?
Any help is greatly appreciated!
Thanks,
Gerald
--- (start: obj.conf) --
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init fn="flex-init" access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->vars.p2c-cl% %Req->vars.remote-status% %Req->vars.r2p-cl% %Req->headers.content-length% %Req->vars.p2r-cl% %Req->vars.c2p-hl% %Req->vars.p2c-hl% %Req->vars.p2r-hl% %Req->vars.r2p-hl% %Req->vars.xfer-time%"
Init fn="init-proxy" timeout="300" timeout-2="15"
<Object name="default">
AuthTrans fn="match-browser" browser=".*MSIE.*" ssl-unclean-shutdown="true"
NameTrans fn="reverse-map" from="http://pcmdv2.client.net:5111/idm" to="https://offlinebusiness.client.net:25002/idm" rewrite-location="true" rewrite-content-location="true"
NameTrans fn="reverse-map" from="http://localhost:35007/deas" to="https://offlinebusiness.client.net:25002/deas" rewrite-location="true" rewrite-content-location="true"
NameTrans fn="reverse-map" from="http://pcmdv2.client.net:5111" to="https://offlinebusiness.client.net:25002" rewrite-location="true" rewrite-content-location="true"
NameTrans fn="map" from="https://offlinebusiness.client.net:25002" to="http://pcmdv2.client.net:5111" rewrite-host="true"
NameTrans fn="map" from="https://offlinebusiness.client.net:25002/deas" to="http://localhost:35007/deas" rewrite-host="true"
NameTrans fn="map" from="https://offlinebusiness.client.net:25002/idm" to="http://pcmdv2.client.net:5111/idm" rewrite-host="true"
NameTrans fn="map" from="/deas" to="http://localhost:35007/deas" rewrite-host="true"
NameTrans fn="map" from="/idm" to="http://pcmdv2.client.net:5111/idm" rewrite-host="true"
NameTrans fn="map" from="/" to="http://pcmdv2.client.net:5111" rewrite-host="true"
PathCheck fn="url-check"
ObjectType fn="forward-ip" hdr="Proxy-ip"
Service fn="deny-service"
AddLog fn="flex-log" name="access"
</Object>
<Object name="file">
PathCheck fn="unix-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve" method="*"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
Service fn="connect" method="CONNECT"
</Object>
--- (end: obj.conf) --

Isn't there two overlapping rules? Perhaps that confuses the SWPS?
NameTrans fn="map" from="https://offlinebusiness.client.net:25002" to="http://pcmdv2.client.net:5111" rewrite-host="true"
NameTrans fn="reverse-map" from="http://pcmdv2.client.net:5111" to="https://offlinebusiness.client.net:25002" rewrite-location="true" rewrite-content-location="true"
and
NameTrans fn="map" from="https://offlinebusiness.client.net:25002/idm" to="http://pcmdv2.client.net:5111/idm" rewrite-host="true"
NameTrans fn="reverse-map" from="http://pcmdv2.client.net:5111/idm" to="https://offlinebusiness.client.net:25002/idm" rewrite-location="true" rewrite-content-location="true"
covers the same URLs

Sync Java Proxy Server response in XML

Hi !
We've this scenario: File1 <-> XI <-> Java Proxy <-> File2
Using a BPM, we made a Async/Sync workflow. It works ok. It uses a SYNC Java Proxy Server.
The problem is that inside the java proxy, we query an http source that returns already XML formated data. We need this data to be mapped from the java proxy response message type to the File2 message type.
We know that we can parse the XML data inside the java proxy and fill the response message type structures (creating items, and array items for nested records), or directly code the mapping here.
But, is there any alternative to pass the received XML from the HTTP directly to XI, and map that XML structure with the File2 message type using graphical mapping ? instead of programming the xml parsing and creating the response structure?
If we create a message type for the response of the java proxy, as 1 field that contains the whole XML code, then we would not map it....Is there any way to complete or to add something to the received XML code, to convert it to the XI message format..so XI could interpret it as a true XI message and map it transparently via graphical mapping?
Thanks,
Matias

Hi Akshay !
That's exactly what I don't know how to do it.
Inside the java proxy function I have a string variable, let's call it xmlResponse, that contains:
<customer>
<name>Matias</name>
<country>China</country>
</customer>
I also have a message type created in XI (let's call it MT_Response), that has the same fields as the above message structure. And my java proxy function is declared something like this:
public MT_Response.Type myFunction(MT_Request.Type myRequest) {
String xmlResponse="";
// http connection code goes here..
xmlResponse = httpConnection.getResponse();
return ??????? what ????
I don't want to parse the xmlResponse variable in order to fill the MT_Response structure. I need a more direct way, because the content of xmlResponse is already XML !
Thanks.

Web Proxy Server Load Balancing

I deployed Sun Jave Web Proxy Server 4.0 as a Reverse Proxy. I would also like to use it as a load balancer. As per the instructions, I configured the obj.conf file as shown below
Route fn="set-origin-server" server="https://xx.xx.xx.xx" server="https:yy.yy.yy.yy" sticky-cookie="JSESSIONID" sticky-param="jsessionid" route-hdr="Proxy-jroute" route-cookie="JROUTE" rewrite-host="true" rewrite-location="true" rewrite-content-location="true"
But, it is not doing load balancing. It always sends to the first server (xx.xx.xx.xx). I guess that is because I used mapping as follows:
NameTrans fn="reverse-map" from="https:xx.xx.xx.xx" to="https://server.net" rewrite-location="true" rewrite-content-location="true"
NameTrans fn="redirect" from="http://server" url="https://xx.xx.xx.xx"
NameTrans fn="map" from="https://server" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1" NameTrans fn="map" from="/" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1"PathCheck fn="url-check"ObjectType fn="block-ip"
ObjectType fn="cache-enable" cache-auth="1" cache-https="1" query-maxlen="0" min-size="0" Service fn="proxy-retrieve"
I don't understand how routing and mapping work togother. Any help in this regard is appreciated.

Motor,
the following is from the Web Proxy Sever Administration guide. Please, check the last paragraph for the explanation. Any how, the problem is simple. I am using the Proxy Server as the Reverse proxy. And at the same time, I would like to use two origin servers (for load balancing) instead of one. How do I make both load balancing and reverse proxy functions work together?
Thanks
To Create Regular or Reverse Mapping
Access the Server Manager, and click the URLs tab.
Click the Create Mapping link.
The Create Mapping page is displayed.
In the page that appears, provide the source prefix and source destination for the regular mapping,
for example,
Source prefix: http://proxy.site.com
Source destination: http://http.site.com/
Click OK.
Return to the page and create the reverse mapping, for example,
Reverse mapping:
Source prefix: http://http.site.com/
Source destination: http://proxy.site.com/
To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional mappings. To see the mappings, click the lView/Edit Mappings link. Additional mappings would be in the following format:
from: /
to: http://http.site.com/
These additional automatic mappings are for users who connect to the reverse proxy as a normal server. The first mapping is to catch users connecting to the reverse proxy as a regular proxy. The �/� mapping is added only if the user doesn't change the contents of the Map Source Prefix text box provided automatically by the Administration GUI. Depending on the setup, usually the second mapping is the only one required, but the extra mapping does not cause problems in the proxy.

Basic auth in proxy server breaks managed server form auth

Hi,
I have a proxy server configured in front of 2 managed servers.
The managed servers have secure pages and are using form auth and the
proxy server is working properly. In other words, I point my browser
at the proxy and I end up being services by one of the managed servers.
If I attempt to access a secure page via the proxy I am sent to the form
login page via the proxy.
Now for the problem:
If I configure the proxy server to use basic auth, and secure all
pages in the proxy, I must provide my userid/password to the proxy
server (this is working fine) before I can get to one of the managed
servers. I can get to the welcome page of the managed server (which is
not secure) There is a link to a secure page on the welcome page. When
I click on the link to the secure page, I am sent to the form auth by
the managed server. I authenticate, but I can never see the secure
page. I end up being redirected to the form login page endlessly.
Both the proxy server and the managed server are usign the default
JSESSIONID.
Here is a section of the web.xml for the proxy server:
<servlet>
<servlet-name>HttpClusterServlet</servlet-name>
<servlet-class>weblogic.servlet.proxy.HttpClusterServlet</servlet-class>
<init-param>
<param-name>WebLogicCluster</param-name>
<param-value>${ProxyConfig}</param-value>
</init-param>
<init-param>
<param-name>SecureProxy</param-name>
<param-value>ON</param-value>
</init-param>
<init-param>
<param-name>Debug</param-name>
<param-value>ON</param-value>
</init-param>
<init-param>
<param-name>DebugConfigInfo</param-name>
<param-value>ON</param-value>
</init-param>
<init-param>
<param-name>CookieName</param-name>
<param-value>JSESSIONID</param-value>
</init-param>
<init-param>
<param-name>CookieName</param-name>
<param-value>wlauthcookie_</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>gcmgui/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>applauncher/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>ssoadmin/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>default/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>domainadmin/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>gsc/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>psr/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>broadcastclient/*</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>HttpClusterServlet</servlet-name>
<url-pattern>nra/*</url-pattern>
</servlet-mapping>
Here is the proxy debug:
<Fri Jul 11 14:40:07 EDT 2003>: ===New Request===GET
/applauncher/jsp/AppLaunche
r.jsp HTTP/1.1
<Fri Jul 11 14:40:07 EDT 2003>: Found cookie: Sf4VoFtpQwG]dTNEh9Yq
<Fri Jul 11 14:40:07 EDT 2003>: #### Trying to connect with server
-213061352!10
.68.10.87!1080!10443
<Fri Jul 11 14:40:07 EDT 2003>: Remove idle for '30' secs:
ProxyConnection(isSec
ureProxy=true): 10.68.10.87:10443, keep-alive='30'secs
<Fri Jul 11 14:40:07 EDT 2003>: Create connection:
ProxyConnection(isSecureProxy
=true): 10.68.10.87:10443, keep-alive='30'secs
<Fri Jul 11 14:40:07 EDT 2003>: In-bound headers:
<Fri Jul 11 14:40:07 EDT 2003>: Accept: image/gif, image/x-xbitmap,
image/jpeg,
image/pjpeg, application/vnd.ms-excel, application/msword,
application/vnd.ms-po
werpoint, */*
<Fri Jul 11 14:40:07 EDT 2003>: Accept-Language: en-us
<Fri Jul 11 14:40:07 EDT 2003>: Accept-Encoding: gzip, deflate
<Fri Jul 11 14:40:07 EDT 2003>: User-Agent: Mozilla/4.0 (compatible;
MSIE 6.0; W
indows NT 4.0; H010818)
<Fri Jul 11 14:40:07 EDT 2003>: Host: localhost:18002
<Fri Jul 11 14:40:07 EDT 2003>: Connection: Keep-Alive
<Fri Jul 11 14:40:07 EDT 2003>: Cookie:
JSESSIONID=1PEosMJQ9ZJrewjj1t5nZfNtYe1e5
pWYbjyBGvZ1ExEY8YoueKTG!-213061352!NONE;
wlauthcookie_=Sf4VoFtpQwG]dTNEh9Yq
<Fri Jul 11 14:40:07 EDT 2003>: Authorization: Basic
cmFwcGVsYmE6b3V0Mmx1bmNo
<Fri Jul 11 14:40:07 EDT 2003>: HTTP/1.1 302 Moved Temporarily
<Fri Jul 11 14:40:07 EDT 2003>: Out-bound headers:
<Fri Jul 11 14:40:07 EDT 2003>: Date: Fri, 11 Jul 2003 18:40:07 GMT
<Fri Jul 11 14:40:07 EDT 2003>: Location:
https://localhost:18002/applauncher/un
restricted/jsp/FormLogin.jsp
<Fri Jul 11 14:40:07 EDT 2003>: Server: WebLogic WebLogic Server 8.1
Thu Mar 20
23:06:05 PST 2003 246620
<Fri Jul 11 14:40:07 EDT 2003>: Transfer-Encoding: Chunked
<Fri Jul 11 14:40:07 EDT 2003>: ===New Request===GET
/applauncher/unrestricted/j
sp/FormLogin.jsp HTTP/1.1
<Fri Jul 11 14:40:07 EDT 2003>: Found cookie: UZ]OrXsBP6uEEa[0veSz
<Fri Jul 11 14:40:07 EDT 2003>: Request successfully processed
<Fri Jul 11 14:40:07 EDT 2003>: #### Trying to connect with server
-213061352!10
.68.10.87!1080!10443
<Fri Jul 11 14:40:07 EDT 2003>: Requeue connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
<Fri Jul 11 14:40:07 EDT 2003>: Recycle connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
<Fri Jul 11 14:40:07 EDT 2003>: Request successfully processed
<Fri Jul 11 14:40:07 EDT 2003>: In-bound headers:
<Fri Jul 11 14:40:07 EDT 2003>: Accept: image/gif, image/x-xbitmap,
image/jpeg,
image/pjpeg, application/vnd.ms-excel, application/msword,
application/vnd.ms-po
werpoint, */*
<Fri Jul 11 14:40:07 EDT 2003>: Accept-Language: en-us
<Fri Jul 11 14:40:07 EDT 2003>: Accept-Encoding: gzip, deflate
<Fri Jul 11 14:40:07 EDT 2003>: User-Agent: Mozilla/4.0 (compatible;
MSIE 6.0; W
indows NT 4.0; H010818)
<Fri Jul 11 14:40:08 EDT 2003>: Host: localhost:18002
<Fri Jul 11 14:40:08 EDT 2003>: Connection: Keep-Alive
<Fri Jul 11 14:40:08 EDT 2003>: Authorization: Basic
cmFwcGVsYmE6b3V0Mmx1bmNo
<Fri Jul 11 14:40:08 EDT 2003>: Cookie:
JSESSIONID=1PEHvo1gQIbwOMuVsU9pJnnvlGBSP
74ZUcSHwazE7domCL8UlVA2!-937872307; wlauthcookie_=UZ]OrXsBP6uEEa[0veSz
<Fri Jul 11 14:40:08 EDT 2003>: HTTP/1.1 200 OK
<Fri Jul 11 14:40:08 EDT 2003>: Out-bound headers:
<Fri Jul 11 14:40:08 EDT 2003>: Date: Fri, 11 Jul 2003 18:40:08 GMT
<Fri Jul 11 14:40:08 EDT 2003>: Server: WebLogic WebLogic Server 8.1
Thu Mar 20
23:06:05 PST 2003 246620
<Fri Jul 11 14:40:08 EDT 2003>: Content-Length: 4238
<Fri Jul 11 14:40:08 EDT 2003>: Set-Cookie:
JSESSIONID=1PEIxJ21oT5H3Z2ilQjPqpq1V
kdOhEnNbbz9wviTtTTZj6IBp29b!-213061352!NONE; path=/
<Fri Jul 11 14:40:08 EDT 2003>: Request successfully processed
<Fri Jul 11 14:40:08 EDT 2003>: Requeue connection:
ProxyConnection(isSecureProx
y=true): 10.68.10.87:10443, keep-alive='30'secs
<Fri Jul 11 14:40:08 EDT 2003>: Request successfully processed
<Fri Jul 11 14:40:44 EDT 2003>: Trigger remove idle for '35' secs:
ProxyConnecti
on(isSecureProxy=true): 10.68.10.87:10443, keep-alive='30'secs
Thanks,
Rob

I typically have used Apache Commons HttpClient for anything but trivial URL connections, and especially when combining both basic auth and proxy auth. When you use it, be aware of the "preemptive authentication" flag. One server I worked with didn't send the correct parameters back on particular requests, so I had to turn on this flag to get it to work.

Socks services errors in web proxy server

Using SunOne web proxy server 3.6+sp1, the socks service frequently out of service. Sometime its process is still alive , but can't response the client request; sometime the process is gone! The following is the errors log:
[25/Oct/2002:11:18:06] 8269 debug: io_loop: killing tunnel after rollover, lastactivity == 1966619898,PR_IntervalNow says 2026622109
[25/Oct/2002:11:20:31] 8269 debug: io_loop: killing tunnel after rollover, lastactivity == 1981101717,PR_IntervalNow says 2041102282
[25/Oct/2002:11:20:48] 754 error: unknown request type 0x47 from 10.160.8.159:30 83
[25/Oct/2002:11:41:07] 14946 debug: ACCEPT RETURNED NULL! io_total = 63 dead =-1
Any infomation is welcome!

what's the software name of socks? how i can download it?
you mean it's not good?
And the following is the issue in detail:
The socks service frequently out of service. Sometime its process is still alive , but
can't response the client request; sometime the process is gone.It occurs once a
day, and after restart, its go away. And the last issue about must reconnect the gameroom
is gone now, and was identified as the network's problem.
mangus.conf:
#ServerRoot /iPlanet/proxy/proxy-proxy-proxy
ServerName proxy
ServerID proxy-proxy
Address 10.160.1.14
Port 8080
User root
LoadObjects obj.conf
RootObject default
ErrorLog /iPlanet/proxy/proxy-proxy-proxy/logs/errors
LDAPConnPool 5
SearchDepth 30
Dyngroups ON
SearchTimeLimit 30
BindTimeLimit 15
LdapCheckUp 30
CertificateChecking OFF
PidLog /iPlanet/proxy/proxy-proxy-proxy/logs/pid
MaxProcs 1024
ProcessLife 128
DNS on
Security off
Ciphers rc4,rc4export,+rc2,+rc2export,+des,+desede3
SSL3Ciphers
rsa_rc4_128_md5,rsa_3des_sha,+rsa_des_sha,+rsa_rc4_40_md5,+rsa_rc2_40
md5,-rsanull_md5
ACLFile /iPlanet/proxy/httpacl/generated.proxy-proxy-proxy.acl
obj.conf
# Netscape Communications Corporation - obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init funcs="icp-init,icp-route" shlib="/iPlanet/proxy/plugins/icp/icp.so" fn="load-
modules"
Init funcs="pa-init-proxy-array,pa-init-parent-array,pa-enforce-internal-routing,pa-set-
parent-route,pa-set-member-status"
shlib="/iPlanet/proxy/plugins/parray/parray.so" fn="load-modules"
Init fn="load-types" mime-types="mime.types"
Init access="/iPlanet/proxy/proxy-proxy-proxy/logs/access" format.access="%
Ses->client.ip% - %Req->vars.pauth-user% [%SYSDATE%] \"%Req->reqpb.proxy-
request%\" %Req->srvhdrs.clf-status% %Req->vars.p2c-cl%" fn="flex-init"
Init fn="init-proxy" timeout="300" timeout-2="15"
Init fn="init-dns-cache" status="on" dir="/tmp" semas="4" size="4096"
expire="28800"
Init fn="init-cache" status="on" ndirs="256" dir="/iPlanet/proxy/cache"
Init fn="init-partition" status="on" name="p1" dir="/iPlanet/proxy/cache/p1" max-
size="8000" min-avail="5"
Init status="on" dir="/iPlanet/proxy/cache/p2" name="p2" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p3" name="p3" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p4" name="p4" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p5" name="p5" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p6" name="p6" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p7" name="p7" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p8" name="p8" max-size="8000" min-
avail="5" fn="init-partition"
Init fn="init-urldb" status="on" dir="/iPlanet/proxy/cache/urldb"
Init fn="init-batch-update" status="off" dir="/tmp" conf-file="bu.conf"
Init status="on" dir="/tmp" hash-size="17191" table-size="85955" expire="3600"
fn="init-pauth-cache"
Init config_file="icp.conf" status="off" fn="icp-init"
Init set-status-fn="pa-set-member-status" file="/iPlanet/proxy/proxy-proxy-
proxy/config/parray.pat" status="off" fn="pa-init-proxy-array"
Init set-status-fn="pa-set-member-status" file="/iPlanet/proxy/proxy-proxy-
proxy/config/parent.pat" status="off" fn="pa-init-parent-array"
<Object name="default">
NameTrans fn="map" from="file:" to="ftp:" cont="yes"
NameTrans fn="pfx2dir" from="/ns-icons" dir="/iPlanet/proxy/ns-icons" name="file"
NameTrans fn="pac-map" from="/" to="/iPlanet/proxy/proxy-proxy-
proxy/pac/proxy.pac" name="file"
PathCheck fn="url-check"
PathCheck fn="check-acl" acl="proxy-proxy-proxy_formgen-READ-ACL_deny-
5619"
PathCheck fn="check-acl" acl="proxy-proxy-proxy_formgen-WRITE-ACL_deny-
5619"
Service fn="deny-service"
AddLog fn="flex-log" name="access" iponly="1"
AddLog fn="urldb-record"
</Object>
<Object name="file">
PathCheck fn="unix-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="21600"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="7200" lm-factor="0.100"
Service fn="proxy-retrieve"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="14400"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
Service fn="connect" method="CONNECT"
</Object>
socks5.conf
# Netscape Communications Corporation - socks5.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
auth 10.160.0.0/255.255.224.0 - -
auth - - u
permit u,- - - - - - -
set SOCKS5_BINDPORT 1080
set SOCKS5_LOGFILE /iPlanet/proxy/proxy-proxy-proxy/logs/socks5.log
set SOCKS5_DEBUG 1
set SOCKS5_WORKERS 100
set SOCKS5_ACCEPTS 5
set SOCKS5_NOIDENT
set SOCKS5_NOREVERSEMAP
socks5.log
[19/Nov/2002:11:31:14] 830 debug: request from 10.162.169.176:2305
[19/Nov/2002:11:31:15] 830 debug: auth: userpass
[19/Nov/2002:11:31:15] 830 debug: authentication type 2 successful for hs
[19/Nov/2002:11:31:15] 830 debug: request 1 to jason314.3322.org:21
[19/Nov/2002:11:31:15] 830 request: hs 5 connect: ok 10.162.169.176:2305 ->
jason314.3322.org:21
[19/Nov/2002:11:31:15] 831 debug: request from 10.162.169.176:2306
[19/Nov/2002:11:31:15] 831 debug: auth: userpass
[19/Nov/2002:11:31:15] 831 debug: authentication type 2 successful for hs
[19/Nov/2002:11:31:15] 831 debug: request 1 to jason314.3322.org:21
[19/Nov/2002:11:31:15] 831 request: hs 5 connect: ok 10.162.169.176:2306 ->
jason314.3322.org:21
access
10.160.115.222 - scy-tl [19/Nov/2002:11:32:33 +0800] "GET
http://www.eefoo.com/c
ommunity/images/bbs0gg.gif HTTP/1.0" 200 146
10.160.115.79 - whh-tl [19/Nov/2002:11:32:33 +0800] "GET
http://fayhoo.com/image
/blank HTTP/1.0" 404 276
10.160.19.151 - lhb [19/Nov/2002:11:32:33 +0800] "POST HTTP://rich-bj.stockstar.
com:8892/1 HTTP/1.0" 200 81
10.160.160.130 - gsp-ld [19/Nov/2002:11:32:33 +0800] "GET
http://images.sohu.com
/cs/button/sony/12060.swf?clickthru=http://goto.sohu.com/goto.php3?code=sony-
sh2
40-fr12050 HTTP/1.0" 200 8302
10.160.23.141 - wyn [19/Nov/2002:11:32:33 +0800] "POST HTTP://rich-
bj.stockstar.
com:8891/1 HTTP/1.0" 200 81
10.161.159.40 - - [19/Nov/2002:11:32:33 +0800] "PUT http://204.177.92.204/w/getc
lientid?srv=china_sex&ver=0,0,0,62 HTTP/1.0" 407 271
10.160.17.108 - weizc [19/Nov/2002:11:32:33 +0800] "GET
http://www.guosen.com/cg
i-bin/RHStockGraphics.dll?GetTLine?code=10000001&cx=150&cy=70&am=0
HTTP/1.0" 200
1004
10.161.130.3 - czy-ykj [19/Nov/2002:11:32:34 +0800] "GET http://ad4.sina.com.cn/
btn/dbtel-tlhp.swf HTTP/1.0" 304 -
10.161.159.40 - - [19/Nov/2002:11:32:34 +0800] "PUT http://204.177.92.204/w/getc
lientid?srv=china_sex&ver=0,0,0,62 HTTP/1.0" 407 271
errors
[19/Nov/2002:11:33:13] failure: for host 10.160.80.148 trying to GET http://myjh
xp.com/bbs/forums.cgi?forum=4, retrieve-exit-routine reports: proxy retrieve fai
led: Proxy server's network connection was refused by the server: myjhxp.com.
The server may not be accepting connections or may be busy. Try connecting
agai
n later.
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 03:51:01 2002
[19/Nov/2002:11:33:13] failure: for host 10.160.80.148 trying to GET http://myjh
xp.com/bbs/forums.cgi?forum=4, retrieve-exit-routine reports: proxy retrieve fai
led: Proxy server's network connection was refused by the server: myjhxp.com.
The server may not be accepting connections or may be busy. Try connecting
agai
n later.
[19/Nov/2002:11:33:13] failure: for host 10.162.101.73 trying to GET ftp://202.1
15.144.37/software/special/WinPE-9down.rar, retrieve-exit-routine reports: proxy
retrieve failed: Proxy server's network connection was refused by the server:
202.115.144.37. The server may not be accepting connections or may be busy. Tr
y connecting again later.
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 18:21:00 2002
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 03:51:01 2002
The logs is so large, i only can give you some of them typically.
and the types of log's record when problem occurs i have supplied to you, also i
pasted here
[25/Oct/2002:11:18:06] 8269 debug: io_loop: killing tunnel after rollover, lastactivity
== 1966619898,PR_IntervalNow says 2026622109
[25/Oct/2002:11:20:31] 8269 debug: io_loop: killing tunnel after rollover, lastactivity
== 1981101717,PR_IntervalNow says 2041102282
[25/Oct/2002:11:20:48] 754 error: unknown request type 0x47 from
10.160.8.159:30 83
[25/Oct/2002:11:41:07] 14946 debug: ACCEPT RETURNED NULL! io_total = 63
dead =-1
------------------------------------------------------------------

Sun Java System Web Proxy Server (4.0.2) - manage server will not start

In short here's the scenario and main problem.
a. Proxy admin server start - no problem
b. Create a new manage server (no proxying - just testing it) using different port. It just won't start. No logs produced either.
Here's the server.xml for the new manage server.
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE SERVER PUBLIC "-//Sun Microsystems Inc.//DTD Sun Java System Web Proxy Server 4.0//EN" "file:///E:/Sun/ProxyServer40/bin/proxy/dtds/sun-web-proxy-server_4_0.dtd">
<SERVER>
    <PROPERTY name="accesslog" value="E:/Sun/ProxyServer40/proxy-server3/logs/access"/>
    <LS id="ls1" port="8083" servername="cbaob-b3-csddb1.adp1.cibc.pte"/>
    <MIME id="mime1" file="mime.types"/>
    <ACLFILE id="acl1" file="E:/Sun/ProxyServer40/httpacl/generated.proxy-server3.acl"/>
    <USERDB id="default"/>
    <FILECACHE enabled="true" maxage="30" mediumfilesizelimit="537600" mediumfilespace="10485760" smallfilesizelimit="2048" smallfilespace="1048576" transmitfile="false" maxfiles="1024" hashinitsize="0"/>
    <CACHE enabled="true" cachecapacity="2000" cachedir="E:/Sun/ProxyServer40/proxy-server3/cache">
        <PARTITION partitionname="part1" partitiondir="E:/Sun/ProxyServer40/proxy-server3/cache" maxsize="100" minspace="5" enabled="true"/>
<GC enabled="true" gchimargin="80" gclomargin="70" gcleavefsfull="60" gcextramargin="30"/>
    </CACHE>
    <LOG file="E:/Sun/ProxyServer40/proxy-server3/logs/errors" loglevel="finest"/>
</SERVER>
Nothing seems to be wrong with this. The XML format follows the specified DTD.
Would appreciate any help.
Thanks.

Thanks for your reply. Yes. This is really odd.
Anyway to make the whole story short, i uninstall this proxy server 4.0.2 on this server (say server1) and try to reinstall a new proxy 4.0.13 but having odd problem (i have administration rights)
Here it goes.
a. CMD java -version is 1.4.2_XX
b. Double click the proxy 4.0.13 setup.exe - nothing happen.
c. CMD setup --javahome c:\jdk1.6_XX - nothing happen
Here retrying.
a. Login to server2 and map conection to server1
b. Double click the proxy 4.0.13 setup.exe on server1 (while on server2) - setup.exe runs. This proves the proxy setup.exe on server1 is good.
c. Make a copy of proxy 4.0.13 on server2
d. Login to server1 and map connection to server2
e. Double click the proxy 4.0.13 setup.exe on server2 (while on server1) - setup.exe did not run.
Both servers are on the same domain and i'm using same ID to access both servers
Again, no logs on the windows events (security, application, system)
This is becoming mind a boggling mystery.
Any idea what's going on?
Thanks.

Problem on Setting up a Reverse Proxy on Web Proxy Server 4.0.1

After you setup a reverse proxy using Web Proxy Server 4.0.1, if you get the following error --
Proxy denies fulfilling the request
Your client is not allowed to access the requested object.You probably forget to add a regular mapping from: / to: http://http.site.com/. The information provided in 4.0.1 Administration guide is misleading. You will have to add it NOW manually. (Note: in 3.6 it will be added automaticly)
You will have to do the following step manually, what provided in the manual is misleading --
Sun Java� System Web Proxy Server 4 .0.1 Administration Guide 2005Q4
Chapter 14 Using a Reverse Proxy
"Setting up a Reverse Proxy"
5. To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional
mappings. To see the mappings, click the link called View/Edit Mappings.
Additional mappings would be in the following format:
from: /
to: http://http.site.com/

thanks, will verify and update the docs.
rahul.

Single-point failure of proxy server??

Three questions regarding using the proxy server for WLS clustering:
          1. What happen if the proxy server fails? The entire cluster won't be
          accessible?
          If so, is there a implication of having "meta-configuration" for
          proxy server failover?
          2. Does the term "in-memory persistence" clustering (over JDBC) does
          imply
          the session data is "shared" in memory between the primary &
          secondary
          servers, or they are compleleted replicated in each server??
          3. How bad is it in terms of performance using the JDBC session
          persistence
          and the in-memory replication? Any one has experimented it??
          Any thoughts and comments are helpful and appreciated??
          Frank Wang


Frank,
          If using File/JDBC persistence, it doesn't matter which server gets the request
          because all servers have access to every session's data.
          When you assign a hostname "to the cluster" and map that hostname to the IP
          address of each server in the cluster, this sets up something called DNS
          round-robining. What this does is round-robin which IP address is returned when
          the cluster hostname is resolved. Unfortunately, DNS is not very good at
          detecting failed machines so it may continue to hand out IP addresses of failed
          machines.
          A better way to do this is with a hardware router that is made for this purpose
          (e.g., LocalDirector). The router can detect a failed machine and redirect the
          request to another machine in the cluster. Unlike the in-memory replication
          case, it doesn't matter which server gets each request so no proxy is required.
          Hope this helps,
          Robert
          Frank Wagn wrote:
          > Hi, Robert,
          >
          > Thank you for the answers !!
          >
          > It is still not very clear to me when using the File/JDBC session
          > persistence.
          > Since there is no such a "coordinating" proxy server who knows how to
          > load balancing among the servers in the cluster (based on the specified
          > algorithm in the proxy server properties file), how does the load balancing
          > (and failover) work, when the requests are directed to a "mask" of cluster IP
          >
          > (virtual proxy) which in terms broadcast to all the servers??
          >
          > Frank
          >
          > Robert Patrick wrote:
          >
          > > Hi Frank,
          > >
          > > Frank Wang wrote:
          > >
          > > > Three questions regarding using the proxy server for WLS clustering:
          > > >
          > > > 1. What happen if the proxy server fails? The entire cluster won't be
          > > > accessible?
          > > > If so, is there a implication of having "meta-configuration" for
          > > > proxy server failover?
          > >
          > > If you have a single proxy server, this is correct in that it is a single
          > > point of failure. A common configuration is to use multiple proxy
          > > servers (with something like LocalDirector sitting in front to do routing
          > > and load balancing to the proxy servers) that proxy requests to a cluster
          > > of WLS servers.
          > >
          > > > 2. Does the term "in-memory persistence" clustering (over JDBC) does
          > > > imply
          > > > the session data is "shared" in memory between the primary &
          > > > secondary
          > > > servers, or they are compleleted replicated in each server??
          > >
          > > HttpSession state can be shared across the servers in a cluster in one of
          > > three ways.
          > >
          > > 1.) Using File-based persistence (i.e., serialization) - This requires a
          > > shared file system across all of the servers in the cluster. In this
          > > configuration, all servers are equal and can access the session state.
          > > As you might imagine, this approach is rather expensive since file I/O is
          > > involved.
          > >
          > > 2.) Using JDBC-based persistence - This requires that all servers in the
          > > cluster be configured with the same JDBC connection pool. As with method
          > > 1, all servers are equal and can access the session state. As you might
          > > imagine, this approach is rather expensive since database I/O is
          > > involved.
          > >
          > > 3.) In-memory replication (not really persistence) - This scheme uses a
          > > primary-secondary replication scheme so that each session object is kept
          > > on only two machines in the cluster (which two machines vary depending on
          > > the particular session instance). In this scheme, we need a proxy server
          > > sitting in front of the cluster that can route the requests to the server
          > > with the primary copy of the session for each request (or to the
          > > secondary if the primary has failed). The location information is
          > > encoded in the session id and the proxy knows how to decode this
          > > information and route the requests accordingly (because the proxy is
          > > using code supplied by BEA -- the NSAPI or ISAPI plugins or the
          > > HttpClusterServlet).
          > >
          > > > 3. How bad is it in terms of performance using the JDBC session
          > > > persistence
          > > > and the in-memory replication? Any one has experimented it??
          > >
          > > JDBC session persistence performance is highly dependent on the
          > > underlying DBMS. In my experience in doing benchmarks with WLS,
          > > in-memory replication (of a reasonably small amount of session data) does
          > > not add any measurable overhead. Of course, the key words here are
          > > "reasonably small amount of session data". The more data you stuff into
          > > the HttpSession, the more data that needs to be serialized between
          > > servers, more performance will be impacted.
          > >
          > > Just my two cents,
          > > Robert

How to bind ppp0 interface (PPTP) as 'external' in proxy server?

Hi!
I'm trying to bind ppp0 interface (PPTP VPN) as 'external' interface in proxy server (Tinyproxy). Unfortunately it does not work.
Using route add -net default gw 10.9.0.1 I can make all the traffic go via VPN but this is not what I want.
My routes after ppp0 is up:
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
10.9.0.1 * 255.255.255.255 UH 0 0 0 ppp0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
216-18-212-218. 192.168.1.1 255.255.255.255 UGH 0 0 0 eth0
ifconfig:
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.100 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::21d:60ff:fe25:7ad6 prefixlen 64 scopeid 0x20<link>
ether 00:1d:60:25:7a:d6 txqueuelen 1000 (Ethernet)
RX packets 47533 bytes 31947804 (30.4 MiB)
RX errors 0 dropped 1 overruns 0 frame 0
TX packets 44946 bytes 6618945 (6.3 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 16436
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 0 (Local Loopback)
RX packets 13167 bytes 1604741 (1.5 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 13167 bytes 1604741 (1.5 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1496
inet 10.9.34.125 netmask 255.255.255.255 destination 10.9.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 1088 bytes 568896 (555.5 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1328 bytes 167081 (163.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Do I need to add some other, specific route? What IP Tinyproxy 'external' should be bound to (I've tried both gw and peer)?

In your bpel.xml you will find a mapping of the "client" partnerlink to the wsdl.
It's structure will look like this:
<partnerLinkBindings>
<partnerLinkBinding name="client">
<property name="wsdlLocation">defaultWSDLFile.wsdl</property>
</partnerLinkBinding>
</partnerLinkBindings>
This will map to the .bpel file as follows:
<partnerLinks>
<partnerLink myRole="..." name="client" partnerLinkType="..."/>
</partnerLinks>
In your first BPEL activity (can be a receive or onMessage activity. But will have the create instance checkbox checked), the operation used maps to the wsdl:
<receive name="Receive_Message" partnerLink="client" portType="..." operation="..." variable="Receive_Message_InputVariable" createInstance="yes"/>
So to change the wsdl, you must first change your descriptor (bpel.xml) and after this your .bpel file so it will use the operation defined in the new .wsdl file.
A good convention is that the .bpel file and the .wsdl file have the same name.
Good luck!
Melvin

Cisco Proxy Server/ CSCP?

What is the different between Cisco SIP Proxy Server and Cisco CSCP-Edge Proxy?
Can Cisco SPS work with presence server.

The Cisco? SIP Proxy Server is a software application that provides call-routing services in an IP telephony network. Using the Cisco SIP Proxy Server, service providers and enterprises can create large-scale, highly reliable packet voice networks.
Cisco CSCP-Edge Proxy (CSCP-EP) provides the edge adaptation of SIP signaling for diverse access networks, enabling seamless interoperability between multiple access locations and core network services and resources. The CSCP-EP provides user authentication, signaling compression, QoS signaling for access networks, security, STUN for Network Address Translation (NAT)/Firewall traversal and other adaptation functions. The CSCP-EP maps to the Proxy CSCF (P-CSCF) in the 3GPP IMS specification.
try these links:
http://www.cisco.com/en/US/products/sw/voicesw/ps2157/products_data_sheet0900aecd800f3968.html
http://www.cisco.com/en/US/products/ps6562/products_data_sheet0900aecd80396990.html

Web Proxy Server

an body explain me what is web proxy server ?

Motor,
the following is from the Web Proxy Sever Administration guide. Please, check the last paragraph for the explanation. Any how, the problem is simple. I am using the Proxy Server as the Reverse proxy. And at the same time, I would like to use two origin servers (for load balancing) instead of one. How do I make both load balancing and reverse proxy functions work together?
Thanks
To Create Regular or Reverse Mapping
Access the Server Manager, and click the URLs tab.
Click the Create Mapping link.
The Create Mapping page is displayed.
In the page that appears, provide the source prefix and source destination for the regular mapping,
for example,
Source prefix: http://proxy.site.com
Source destination: http://http.site.com/
Click OK.
Return to the page and create the reverse mapping, for example,
Reverse mapping:
Source prefix: http://http.site.com/
Source destination: http://proxy.site.com/
To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional mappings. To see the mappings, click the lView/Edit Mappings link. Additional mappings would be in the following format:
from: /
to: http://http.site.com/
These additional automatic mappings are for users who connect to the reverse proxy as a normal server. The first mapping is to catch users connecting to the reverse proxy as a regular proxy. The �/� mapping is added only if the user doesn't change the contents of the Map Source Prefix text box provided automatically by the Administration GUI. Depending on the setup, usually the second mapping is the only one required, but the extra mapping does not cause problems in the proxy.

DNS Resolution - Reverse Proxy Server

Hi,
I am deploying Reverse Proxy Server using ARR for publishing Lync 2013. I have added following servers in server farms:-
1. dialin.domain.com
2. meet.domain.com
3. lyncdiscover.domain.com
4. lyncweb.domain.com
5. wacsrv.domain.com (office web apps server)
I am confused over the following:-
1. My internal domain is .local, i.e. my front end server is fes.domain.local. In this case, how my reverse proxy server will resolve my internal server names? do I need to add static mapping using host file?
2. Will dialin, meet, lyncdiscover, lyncweb point to Front End Server?

Yes, you will use a host file or DNS zone on the internal DNS server (split DNS) to resolve the IP of the Front End from your IIS ARR box.
You will point dialin, meet, lyncdiscover to the front end server.
On the Front End server in topology builder override the External FQDN on the Lync Web Services to use the external name. (most likely lyncweb.domain.com or whatever you choose)
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

SAP reverse Proxy Server Configuration

Hi All,
We wanted to configure reverse proxy in our landscape, I will explain how we have through of implementing it.
The request over the internet will be recieved by Our EP Server AAA which will act as a reverse proxy server and the request will be mapped to the Production EP server BBB which will serve the request.
I have found few links on the internet explaining the concept of DMZ but still I dont have much clear Idea about this.
If anyone can share any relevant link on, how this can be implemented will be really great.
Thanks,
Sharib Tasneem

Hi Sharib
Check the link below , may be useful
http://help.sap.com/saphelp_nwce10/helpdata/en/d8/00413549394a85b28bae68b715e6cb/content.htm
833960 - supported Application Gateway Configurations
1577357 - How To Change the URL Used to Access the Portal on NetWeaver 7.30
Regards
Pyari

Proxy server DN map

Similar Messages

Maybe you are looking for