SSL implementation on iplanet web server 6.0

Hi,
we've successfully implemented verisign SSL certificate on iplanet web server 6.0 and we have configured the a parent directory to non-ssl class and the a sub directory to the ssl-class. when we tried to run a JSP page, we are getting an error that the page is not found.
if both are configured for the same directory (ie.. the parent directory then its working fine)....
can anybody tell me what went wrong with the implementation...
thanks in advance,
regards
Ramachandran

How did you configure one directory use ssl and another director not? Are you using only one listener?
I would like to configure my iws to work like this:
a directory like server/app uses ssl3
another directory like server/appler uses ssl3 without client authentication. Important: I�m not able to create another listener. I must use listerners already created.

Similar Messages

Partial SSL implementation for iplanet web server

Hi,
I would like to make a web server SSL enabled partially.
Say something like this
https://mysite:8080/htmlfiles/log.html
Only the above url should be SSL protected.
Other urls like http://mysite:8080/entryservlet shouldnt be SSL enabled
Thanks in advance
Regards
Thameem

iWS4.x:
Create two instances - one on Port 80 and runs without SSL, and one on Port 443 that uses SSL. Configure your docs roots such that htmlfiles/log.html is not part of the doc-root for the insecure instance.
iWS/S1WS6.x:
Create a single instance with two listen sockets and two virtual servers. Otherwise the same as above.

Global data in a servlet using iPlanet Web Server

Our configuration is an Applet->Servlet->JNI->C/C++ code.
We have C code that does a number of lengthy mathematical calculations. This C code not only uses its own global variables but, it is also comprised of numerous subroutines that all call each other, reading and writing global C variables as they go. These globals are all isolated to the C code shareable object (.so) library that is included using the LoadLibrary call when the servlet is initialized.
The problem is that in a multi-user environment (3-5 simultaneous users) we need to have each user have their own "copy" of the servlet (and the C code) so that users will not be accessing each other's global data. We can NOT have only one copy of the C code and define it as synchronized because the calculations that are performed can take a very long time and we can not hold off user requests while the firs user finishes.
Our hope is that there is a way to configure the iPlanet Web server such that each new user that starts up a copy of the Applet/Servlet combination will get their own "space" so that they can work independently of any other user. We have at most 20 users of this system and only 3-5 simultaneous users so we should not have a problem with memory or CPU speed.
If anyone has a solution, I would greatly appreciate it!

The C library is shareable. But you don't want it to be shared. That's your question summarized, isn't it?
You probably can't prevent it from being shared, so to prevent multiple use of it you would have to queue up the requests to be done one at a time. WynEaston's suggestion of having the servlet implement SingleThreadModel would help, but I believe the servlet spec allows servers to run multiple copies of a servlet that does that (as opposed to running a single copy in multiple threads).
Your other alternative is to rewrite the math in Java, or at least in some object-oriented language where you don't need global variables (which are the source of your problem). All right, I can already hear you saying "But that wouldn't be as fast!" Maybe not, but that isn't everything. Now you have a problem in queueing theory: do you want a single server that's fast, but jobs have to wait for it, or do you want multiple servers that aren't as fast, but jobs don't have to wait? That's a question you would have to evaluate based on the usage of your site, and it isn't an easy one.

Plumtree portal server (v5.0.1) hosted on iPlanet Web Server (v6.0)

Has anyone tried to port the Plumtree Corporate Portal v5.0.1 portal server component to iPlanet Enterprise Web Server 6.0 (aka SunONE Web Server, v6.0 )? Plumtree doesn't support this, but I am trying to merge a custom SSO authenticator to the Plumtree portal (v5.0.1). The authenticator runs as a plug-in to SunONE Web Server and has been in place on our customer's web site for a long time now.
I have this working great in with SSL turned off, but I am having a difficult time getting past an error when I turn on SSL. I can get the portal server to run fine with SSL turned on through Tomcat on the same machine, using the same certificate and JRE. I can also get the SunONE server to run other servlet applications fine with SSL turned on. However, there appears to be either: (1) an incompatibility between SunONE's NSServlet plug-in that handles servlets and the Plumtree framework classes that set up replies via SSL, or (2) a configuration error in my setup somewhere. I'm hoping that (2) is the real culprit, but I've tried just about everything I can think of, and haven't been able to resolve this problem.
The server starts up fine and I can load non-portal content without a problem. But when I log in, the portal's main community page that should be returned is not being returned to the client. PTSpy (a debugging aid for the Plumtree portal) doesn't indicate any problems, so I know the content is being built by the portal correctly, but the built page is never being sent back to the requesting client.
Here is the error that gets logged to my SunONE server's error log:
[29/Dec/2003:15:05:53] failure ( 2772): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.lang.NoClassDefFoundError: javax/net/ssl/SSLSocket
at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:793)
at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:702)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:583)
at java.net.URL.openStream(URL.java:960)
at org.apache.xerces.readers.DefaultReaderFactory.createReader(DefaultReaderFactory.java:149)
at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromDocument(DefaultEntityHandler.java:493)
at org.apache.xerces.framework.XMLParser.parseSomeSetup(XMLParser.java:314)
at org.apache.xerces.framework.XMLParser.parse(XMLParser.java:1097)
at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:195)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:124)
at com.plumtree.openfoundation.xml.dom.XPBuilder.LoadDocumentFromURI(XPBuilder.java:203)
at com.plumtree.xpshared.jsutil.JSRegistry.LookupJSComponentVersions(JSRegistry.java:243)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponentVersions(JSRegistry.java:184)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:465)
at com.plumtree.xpshared.jsutil.JSRegistry.GetJSComponent(JSRegistry.java:444)
at com.plumtree.uiinfrastructure.statichelpers.ConfigHelper.GetCommonJSIncludes(ConfigHelper.java:1330)
at com.plumtree.uiinfrastructure.form.AFormAS.DisplayCommonJavaScript(AFormAS.java:59)
at com.plumtree.portalpages.common.uiparts.PlumtreeAS.DisplayCommonJavaScript(PlumtreeAS.java:88)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.DisplayHead(PlumtreeDP.java:599)
at com.plumtree.portalpages.common.uiparts.PlumtreeDP.Display(PlumtreeDP.java:112)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.ProcessDisplayPageOrRedirect(Interpreter.java:816)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.HandleRequest(Interpreter.java:1589)
at com.plumtree.portaluiinfrastructure.activityspace.Interpreter.DoService(Interpreter.java:448)
at com.plumtree.uiinfrastructure.web.XPPage.service(XPPage.java:141)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.iplanet.server.http.servlet.NSServletRunner.invokeServletService(NSServletRunner.java:919)
at com.iplanet.server.http.servlet.WebApplication.service(WebApplication.java:1061)
at com.iplanet.server.http.servlet.NSServletRunner.ServiceWebApp(NSServletRunner.java:981)It looks like a Java classpath issue, but I've verified (even in the same log file with java debugging turned on) that the SSLSocket class is getting loaded. I've even tried moving the specification of the jar file containing this class (jsse.jar, part of the JRE) to the beginning and end of my classpath setting.
I'm using the same JRE that is bundled with the Tomcat release supplied with my Plumtree 5.0.1 installation (1.4.1_02). I can't get the JRE that came bundled with the SunONE v6.0 release to work at all.
I've posted a similar message on a couple other forums (Java and iPlanet-related, as well as on Plumtree's customer forum) and haven't found an answer yet. Does anyone have any ideas?

In case anyone else experiences this, I have apparently stumbled upon an issue with iPlanet's handling a specified JRE/JDK instead of the supplied JDK in iPlanet Web Server v6.0, SP5, though I found a way around it to resolve my problem.
I had been specifying a different JRE to run with through the administrative server manager. However, even though I was specifying to load all the JRE's jar files in my classpath setting, iPlanet was only loading the rt.jar file for my specified JRE. With verbose logging turned on, the error log was indicating that the other classpath specified jar files were being loaded, but apparently they were not being used. The JDK that was released with iPlanet appears to be being used for all other JRE classes outside of those defined in rt.jar. Since the JDK supplied with the iPlanet release didn't contain jsse.jar, which contains SSL support, it was not being loaded and was causing the problem I was seeing.
Instead of specifying the JRE of a different JDK that I was using, I changed the global setting in the administrative server manager to override the entire JDK. This has resolved my problem.
So if you specify a JRE to override the iPlanet supplied JDK/JRE, it appears that only the rt.jar file of the specified JRE will be loaded, and the jar files associated with the iPlanet-supplied JRE will be used for all other classes. Specification of a complete JDK to override the supplied one will resolve this.

Iplanet web server 7 -how to get more information when a certificate is untrusted ?

Hi
When a client tries to access to iplanet 7.0.15, we only get a line in the errors log with a simple error., for instance SSL_ERROR_UNKOWN_CA_ALERT...
We would like to know if it is possible to configure iplanet to get more information about this request..
iPLANET is receiving requests from a lot of clients and sometime it is difficult to identify the source of a error without more information..
We would like have similar information that access log shows when certificate is valid
We get the same information with log-level = info or finest..
Thanks
Uge

Hi Uge,
Setting the iPlanet Web Server log level to 'finest' will give you more information, but it is very verbose, and you still might not get the information you are looking for. You might want to try 'fine' or 'finer' first to see if either of those gives you the information you need.
With regards to the above error, SSL_ERROR_UNKOWN_CA_ALERT, this means that the client presented a certificate in the SSL handshake that was signed by a CA that the Web Server doesn't have in it's certificate database. In order to ensure the Web Server is kept upto date with the latest set of public CA certificates, I would recommend you upgrade to the latest version.
If you know that the certificates the clients are using are from an internal CA, you need to ensure the Root CA Certificate from that internal CA is installed in the Web Servers certificate database as a trusted certificate.
regards
Tracey

IPlanet Web Server & Glassfish not takeover session from stoped instance?

I have 3 Physical Machine
1> server hostname is 'linuxgf175'(192.168.1.175) main cluster control (DAS) and Install iPlanet Webserver with gflb-configurator
2> server hostname is 'linuxgf170'(192.168.1.170) server for node1(n1) has Instance1 (i1)
3> server hostname is 'linuxgf180'(192.168.1.180) server for node2(n2) has Instance2 (i2)
1. I was install iPlanet Web Server to same DAS machine. (192.168.1.175)
2. And create Server Certificates request.
Certificate Details
Nickname cert-linuxgf175
Subject CN=linuxgf175
Issuer Self Signed
Key Type RSA
Key Size (bits) 1024
Valid From April 18, 2011 7:30:09 PM ICT
Valid Till April 18, 2012 7:30:09 PM ICT
Fingerprint CE:D8:5E:97:DB:56:89:00:56:A7:0F:EB:0D:D4:4A:06
Serial Number 00:94:26:11:AB
Server Name linuxgf175
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
3. And create new http-listenser (SSL for communicate with DAS port 8082 )
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
4. And import cert file(s1as.rfc) to glassfish-lbconfigurator wizard. (run lb-configure command #java -jar glassfish-lbconfigulator.jar )
I was exported that file like this command :
keytool -export -rfc -alias s1as -keystore /usr/glassfish3/glassfish/domains/domain1/config/keystore.jks -file ./s1as.rfc
5. Create and Apply http-lb to DAS domain success !! :)
asadmin> create-http-lb devicehost linuxgf175 deviceport 8082 --target c1 cluster_lb
Enter admin user name> admin
Enter admin password for user "admin">
Command create-http-lb executed successfully.
asadmin>
asadmin> apply-http-lb-changes cluster_lb
Enter admin user name> admin
Enter admin password for user "admin">
Command apply-http-lb-changes executed successfully.
6. Deploy "clusterjsp.ear" Application to Cluster c1 with avalibilityenable=true
deploy success
(Picture : http://s138.photobucket.com/albums/q262/madoatz/?action=view&current=iPl... )
7.try to open application , use browser open to iPlanet webserver success
http://192.168.1.175:80/clusterjsp
## But, It can not handle session between instance (i1) and Instance 2 (i2)
i input some data session into instance (i1)
HttpSession Information:
Served From Server: 192.168.1.175
Server Port Number: 80
Executed From Server: linuxgf170
Executed Server IP Address: 127.0.0.1
Session ID: 3ed17253ef55fb5d37203a738e2b
Session Created: Thu Apr 21 00:20:08 ICT 2011
Last Accessed: Thu Apr 21 00:20:08 ICT 2011
Session will go inactive in 1800 seconds
INPUT : test1 = test1
INPUT : test2 = test2
after that try to stop Instance (i1) linuxgf170
come back to browser and refesh button. It's change route display to instance i2 (linuxgf180)
HttpSession Information:
Served From Server: 192.168.1.175
Server Port Number: 80
Executed From Server: linuxgf180
Executed Server IP Address: 127.0.0.1
Session ID: 3ee66ddd60498d68660a55fadcc5
Session Created: Thu Apr 21 00:21:34 ICT 2011
Last Accessed: Thu Apr 21 00:21:34 ICT 2011
Session will go inactive in 1800 seconds
BUT INPUT DATA is not display ?? I loss...session.
Please sir.... please see image url and help clarify T_T
Can direct contect to me for more help Thank you very much for best support.
[email protected]
skype : mr_lalit

More iPlanet startup log....
[root@linuxgf175 webserver7]# cd admin-server/
[root@linuxgf175 admin-server]# cd bin/
[root@linuxgf175 bin]# ./startserv
Oracle iPlanet Web Server 7.0.9 B07/04/2010 01:31
info: CORE3016: daemon is running as super-user
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_20] from [Sun Microsystems Inc.]
info: WEB0100: Loading web module in virtual server [admin-server] at [admingui]
info: WEB0100: Loading web module in virtual server [admin-server] at [jmxconnector]
info: HTTP3072: admin-ssl-port: https://linuxgf175:8989 ready to accept requests
info: CORE3274: successful server startup
[root@linuxgf175 bin]# cd ../../
[root@linuxgf175 webserver7]# pwd
/usr/glassfish3/webserver7
[root@linuxgf175 webserver7]# cd https-linuxgf175/
[root@linuxgf175 https-linuxgf175]# cd bin/
[root@linuxgf175 bin]# ./startserv
Oracle iPlanet Web Server 7.0.9 B07/04/2010 01:31
info: reports: Initializing lbplugin BuildId: GlassFish 3.1 load-balancer plugin b05
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_20] from [Sun Microsystems Inc.]
config: , name-trans-passthrough reports: init-passthrough has not been called
config: , name-trans-passthrough reports: init-passthrough has not been called
config: , name-trans-passthrough reports: init-passthrough has not been called
warning: reports: lb.configurator: XML_VALIDATOR_WARNING: Cookies will not be rewritten by web server. All cookie updates will be handled by application server. If you are using older version of application server, then failover will not work.
warning: reports: lb.configurator: Preferred failover instance feature is enabled.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf170:28080 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf170:28181 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf180:28080 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf180:28181 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon http://linuxgf170:28081 has been intialized.
warning: reports: lb.runtime: RNTM2019: Daemon https://linuxgf170:28182 has been intialized.
info: HTTP3072: http-listener-1: http://linuxgf175:80 ready to accept requests
info: HTTP3072: http-listener-ssl: https://linuxgf175:8090 ready to accept requests
info: CORE3274: successful server startup
[root@linuxgf175 bin]#

FW: iPlanet Web Server 4.x Advisory

All--
A message from iPlanet about iWS:
Recommend Immediate Patch/Upgrade
We are writing to inform you of an important upgrade recommendation. iPlanet
has identified a security vulnerability in the iPlanet Web Server Enterprise
Edition 4.x products. This problem does not affect any Web Server releases
prior to the 4.x versions, however it does affect all iPlanet applications
operating on the Web Server platform.
A patch and implementation instructions to address the problem are now
available on the iPlanet.com Tech Support site at
http://www.iplanet.com/support/. Without this patch/upgrade, the problem
will persist and affect your site's data security, potentially leading to a
data corruption event.
iPlanet urges all iPlanet Web Server customers to upgrade immediately to
prevent any potential data security risks, and we apologize for any
inconvenience that this may cause you.
If you have additional technical questions, please call your technical
support contact.
Sincerely,
Annelies Habermacher
Vice President, Worldwide Customer Support
iPlanet E-Commerce Solutions
See the following links for more information:
http://atstake.com/research/advisories/2001/index.html#041601-1
http://www.kb.cert.org/vuls/id/276767
The iPlanet JATO Team

Can you provide the error logs file of the instance which fails to start?
Thanks

Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout).

Hi, I am using HP11 and iPlanet web server. When trying to upload files over HTTP using FORM ENCTYPE="multipart/form-data" that are bigger than a few Kilobytes i get a 408 error. (client timeout). It is as if the server has decided that the client has timed out during the file upload. The default setting is 30 seconds for AcceptTimeout in the magnus.conf file. This should be ample to get the file across, even increasing this to 2 minutes just produces the same error after 2 minutes. Any help appreciated. Apologies if this is not the correct forum for this, I couldn't see one for iPlanet and Web, many thanks, Kieran.

Hi,
You didnt mention which version of IWS. follow these steps.
(1)Goto Web Server Administration Server, select the server you want to manage.
(2)Select Preference >> Perfomance Tuning.
(3)set HTTP Persistent Connection Timeout to your choice (eg 180 sec for three minutes)
(4) Apply changes and restart the server.
*Setting the timeout to a lower value, however, may prevent the transfer of large files as timeout does not refer to the time that the connection has been idle. For example, if you are using a 2400 baud modem, and the request timeout is set to 180 seconds, then the maximum file size that can be transferred before the connection is closed is 432000 bits (2400 multiplied by 180)
Regards
T.Raghulan
[email protected]

Can iDSIE (Meta-directory) be used as a single authentication point from iPlanet Web Server for multiple databases using direct "or" indirect connectors?

Basically, the latest release of iPlanet Web Server forces the user/group information source to be an LDAP database. Currently, the user accounts are in Active Directory, NT, Oracle and NetWare Directory Service in this heterogeneous environment.
What I am looking for is a meta-directory product which can do two things:
1-Single authentiation point for users in mulitple databases from iPlanet Web Server.
2-Single administration point for all of the databases listed above.
For example, can I add/modify/delete a user account at the meta-directory level and have this propagate to all of the databases listed above reducing the administration to one meta-directory product?

With an Virtual Directory solution, you can authenticate Iplanet Web Server against nearly anything including any LDAPv3 Directory Server, Microsoft Active Directory, Windows NT Domains, Oracle RDBMS, IBM DB2 RDBMS, Microsoft SQL, and others.
All of this is done dynamically and doesn't require any heavyweight synchronization process. The Virtual Directory acts as a dynamic schema / DIT / data translation engine for different types of repositories.
OctetString's Virtual Directory Engine is one such example. You can download a 30 day evaluation copy at:
http://www.octetstring.com
It will take you all of 30 minutes to get iPlanet Web Server authenticated against and using groups from things like Oracle RDBMS, Windows NT Domains, or Active Directory.

Using iPlanet Web Server 6.0 (with ASP or JSP), is it possible to create a StarOffice, Word or Acrobat document using a template and merging it with data from a database (say Oracle)?

Hi,
It is possible, But it has to be done through codes and iPlanet Web Server has nothing to do with it. But if you want to create the word document by ASP you have to install ASP plugin like ChilliASP (from Chilisoft) with iPlanet Web Server.Merging with database can be done through your code.
To know more abt creating word doc through ASP try this link
http://web.ukonline.co.uk/vance/code/aspworddoc.pdf
Regards,
T.Raghulan.

Works in Tomcat but not in iPlanet Web server

I have a servlet which first generates a form which has one input field, when user fills in the text field and submits the form it is posted to same servlet. The posted data is processed and redirected to another servlet. Everything works fine on Tomcat3.2 but fails to work on iPlanet web server and throws HTTP Error 500.
Can someone help me with this? What might be the problem?

Don't know whey it worked in Tomcat and not in iPlanet, but the reason is because I missed '/' in getRequestDispatcher() methoc
public RequestDispatcher getRequestDispatcher(java.lang.String path)
The pathname must begin with a "/" and is interpreted as relative to the current context root.

Iplanet web server 6.0 ACL question

Hi,
I am using ACLs to protect some of my URLs in iplanet web server 6.0.
I am getting one problem. Its not a problem actually but would like to know how to avoid authenticating the users 2 times.
In my ACL file, when ever I create an entry for a path, I am getting the following by default.
authenticate (user,group) {
database = "default";
method = "basic";
My entry is like this with the above lines.
acl "path=/www/develop/itsecurity/admin";
authenticate (user,group) {
database = "default";
method = "basic";
allow absolute (all)
(user = "modadmin");
allow absolute (all)
(user = "itsecadm");
deny (all)
(user = "anyone");
Now if the entry is like this with
authenticate (user,group) {
database = "default";
method = "basic";
after the first line, then whenever that particulaar user "itsecadm" tries to access the URL, he gets userid and password dialogue box. After entring into the page, if he tries to access or click any other link, it is asking the userid and password again.If he gives this second time, next time onwards it is not asking userid and password.
But When I remove the lines
authenticate (user,group) {
database = "default";
method = "basic";
from the file for that particular entry, it is not asking 2nd time userid/password.
Could you please tel me why this happening. Why this entry is created whenever I am adding a new one into ACL file?
Is any one facing the similar problem with iplanet web server 6.0 ACL files?
Thanks & Regards
Murthy

Hi,
Thank you for your suggestion. I have tried with your option also. Still I am getting the second time userid/password dialogue box.
Is there any other solution to avoid the second time user authentication dialogue box?
Do you want to see the ACL file?
Thanks & Regards,
Murthy

Oracle iPlanet Web Server 7 - Configuration Failed

Hi There,
Installing Oracle iPlanet Web Server
|-1%--------------25%-----------------50%-----------------75%--------------100%|
Installation Summary
Product Status Information
1. Oracle iPlanet Web Server Configuration Failed View log file
1. View log file
2. Done
Jul 5, 2011 4:29:16 AM com.sun.web.installer.common.dialogs.
CustomDirectorySelectionPanel isDisplayComplete
INFO: Installing Oracle iPlanet Web Server 7.0.9
Jul 5, 2011 4:30:19 AM com.sun.web.installer.web.actions.PostInstall_core
install
INFO: Start core server configuration
Jul 5, 2011 4:30:19 AM com.sun.web.installer.web.actions.PostInstall_core
installJDK
SEVERE: JDK copy failed
Jul 5, 2011 4:52:36 AM com.sun.web.installer.common.dialogs.
CustomDirectorySelectionPanel isDisplayComplete
INFO: Installing Oracle iPlanet Web Server 7.0.9
Jul 5, 2011 4:55:00 AM com.sun.web.installer.web.actions.PostInstall_core
install
INFO: Start core server configuration
Jul 5, 2011 4:57:07 AM com.sun.web.installer.web.actions.PostInstall_core
configureServer
INFO: Invoking the server configuration script
Jul 5, 2011 4:57:08 AM com.sun.web.installer.web.actions.PostInstall_core
configureServer
WARNING: The backend configurator failed
Jul 5, 2011 5:15:10 AM com.sun.web.installer.common.dialogs.
CustomDirectorySelectionPanel isDisplayComplete
INFO: Installing Oracle iPlanet Web Server 7.0.9
Jul 5, 2011 5:15:46 AM com.sun.web.installer.common.dialogs.
CustomDirectorySelectionPanel isDisplayComplete
INFO: Installing Oracle iPlanet Web Server 7.0.9
Jul 5, 2011 5:16:43 AM com.sun.web.installer.common.dialogs.
CustomDirectorySelectionPanel isDisplayComplete
INFO: Installing Oracle iPlanet Web Server 7.0.9
Jul 5, 2011 5:21:37 AM com.sun.web.installer.web.actions.PostInstall_core
install
What could be the problem?

[root@local java]$ ls
default jdk1.6.0_02 jdk1.6.0_20 jdk1.6.0_26 latest
[root@local java]# ./setup --javahome /usr/java/jdk1.6.0_26
Product : Oracle iPlanet Web Server
Location : /opt/oracle/webserver7
Disk Space : 231.37 MB
Administration Command Line Interface
Server Core
Start Administration Server [yes/no] [yes] {"<" goes back, "!" exits}:
Ready to Install
1. Install Now
2. Start Over
3. Exit Installation
What would you like to do [1] {"<" goes back, "!" exits}? 1
Installing Oracle iPlanet Web Server
|-1%--------------25%-----------------50%-----------------75%--------------100%|
Installation Summary
Product Status Information
1. Oracle iPlanet Web Server Configuration Failed View log file
1. View log file
2. Done
What would you like to do [2] {"!" exits}?
I can not see the option.

Is there a restriction on length of Http request posted to a Iplanet Web Server ?

I am submitting an Http Request by POST method to my server. The request will be received and forwarded by Iplanet Web Server to a clustered Weblogic environment, which will then be handled by Java Servlets. The problem I am facing is that when the length of the request shoots up to around 2000 bytes, NES doesn't receive and forward the request to Weblogic. There is no fixed cut-off for the length, it keeps fluctuating.
I observed the following after hitting the server hundreds of times with Http Requests that vary in length.
1) If length of Request is below 1500 bytes, request always goes through successfully.
2) In a range of 1500 bytes to 2000 bytes, request fails most of the times. (Around 80 %)
3) Requests with length above 2000K invariably fail, though it just worked for a 2.4K request on one occasion (out of some 100 hits)
Note that by "length of request", I mean the data I post through Http Request (I just have a single parameter in Http request having the literal "XML" as key and a well formed XML document as value. That is equivalent to submitting a HTML form just having a text area called "XML" containing a XML document. )
I presume that the length of actual Http Request is slightly greater than that of XML (probably by around 100 bytes).
My Iplanet documentation says that the upper limit on the length of a POST Http Request is 64 K, which is way above the value (2-3 K) at which I am facing the problem.

Hi Ganesh
Did you check the HTTP Persistent timeout of your server? Check the value which has been set up by default. Try increasing the timeout value and try again.
follow these steps it might solve your problem:
(1)Goto Web Server Administration Server, select the server you want to manage.
(2)Select Preference >> Perfomance Tuning.
(3)set HTTP Persistent Connection Timeout to your choice (eg 180 sec for three minutes)(note : if you are posting large amount of data or file increase the value accordingly)
(4) Apply changes and restart the server.
*Setting the timeout to a lower value, however, may prevent the transfer of large files as timeout does not refer to the time that the connection has been idle. For example, if you are using a 2400 baud modem, and the request timeout is set to 180 seconds, then the maximum file size that can be transferred before the connection is closed is 432000 bits (2400 multiplied by 180)
If this doesnot solve your problem notify me
regards
T.Raghulan
[email protected]

Connection timeout when using iPlanet web-server uses Weblogic 6.1 proxy server to proxy requests to an HTTP server

Hi all,
My configuration is as follows: I have an iPlanet web-server that uses a WebLogic
6.1 (sp1) server to proxy requests to another HTTP server. The HTTP request runs
for 120 seconds. This causes Weblogic to timeout after a while. The error I get
is as follows:
<Aug 25, 2003 3:37:09 PM GMT+00:00> <Warning> <HttpClient> <Couldn't open connection
java.net.ConnectException: Connection timed out
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:320)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:133)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:120)
at java.net.Socket.<init>(Socket.java:273)
at java.net.Socket.<init>(Socket.java:127)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:194)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:254)
at weblogic.net.http.HttpClient.<init>(HttpClient.java:117)
at weblogic.net.http.HttpClient.New(HttpClient.java:149)
at weblogic.net.http.HttpURLConnection.connect(HttpURLConnection.java:109)
at com.db.gmr.dcm.DebtIssueServlet.getVectorFromConnection(DebtIssueServle
t.java:285)
at com.db.gmr.dcm.IssuesUSThread.run(IssuesUSThread.java:29)
>
I get the same error when I added the following plug-in configuration parameters
(in obj.conf):
ConnectTimeoutSecs="170" ConnectRetrySecs="170".
What do I need to do to extend this timeout? Any help you can provide will be
greatly appreciated..
Thanks
Manish

Hi all,
My configuration is as follows: I have an iPlanet web-server that uses a WebLogic
6.1 (sp1) server to proxy requests to another HTTP server. The HTTP request runs
for 120 seconds. This causes Weblogic to timeout after a while. The error I get
is as follows:
<Aug 25, 2003 3:37:09 PM GMT+00:00> <Warning> <HttpClient> <Couldn't open connection
java.net.ConnectException: Connection timed out
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:320)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:133)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:120)
at java.net.Socket.<init>(Socket.java:273)
at java.net.Socket.<init>(Socket.java:127)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:194)
at weblogic.net.http.HttpClient.openServer(HttpClient.java:254)
at weblogic.net.http.HttpClient.<init>(HttpClient.java:117)
at weblogic.net.http.HttpClient.New(HttpClient.java:149)
at weblogic.net.http.HttpURLConnection.connect(HttpURLConnection.java:109)
at com.db.gmr.dcm.DebtIssueServlet.getVectorFromConnection(DebtIssueServle
t.java:285)
at com.db.gmr.dcm.IssuesUSThread.run(IssuesUSThread.java:29)
>
I get the same error when I added the following plug-in configuration parameters
(in obj.conf):
ConnectTimeoutSecs="170" ConnectRetrySecs="170".
What do I need to do to extend this timeout? Any help you can provide will be
greatly appreciated..
Thanks
Manish

SSL implementation on iplanet web server 6.0

Similar Messages

Maybe you are looking for