Oracle® iPlanet Web Server

Release Notes

Release 7.0.27

E18789-23

October 2017

Oracle iPlanet Web Server Release Notes, Release 7.0.27

E18789-23

Copyright © 2016, 2017, Oracle and/or its affiliates. All rights reserved.

Primary Author:  Trupthi NT

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Contents

List of Tables

Preface

- Revision History

- Documentation Accessibility

- Conventions

1 Oracle iPlanet Web Server Release 7.0.27 Release Notes

- New Features or Enhancements in Oracle iPlanet Web Server Release 7.0.27

- Issues Resolved in Oracle iPlanet Web Server Release 7.0.27

- Hardware and Software Requirements

- Product Patches

- Supported Platforms

- Supported JDKs

- System Virtualization Support

- Operating System Patches

- Solaris Patches

- Solaris 10 (SPARC and x86) Patches

- AIX Patches

- Linux 6.x Patch

- Supported Browsers

- Deprecation Notices

- Installation, Migration, and Upgrade Notes

- Installation Notes

- Standalone Installation

- Java ES Installation

- Migration Notes

- Upgrade Notes

2 Known Issues

- Web Server Administration Issues

- Web Server Core Issues

- Web Server FastCGI Issues

- Web Server Installation Issues

- Web Server Migration and Upgrade Issues

- Web Server Sample Applications Issues

- Web Server Search Issues

- Web Server Security Issues

- Web Server Session Replication Issues

- Web Server Web Container Issues

- Web Server Localization Issues

- Web Server Sun Java Enterprise System Issues

3 Product Documentation

- Web Server Documentation Set

- Documentation Corrections, Enhancements, and Issues Resolved

- Updating a Certificate Chain

- Corrections to the Procedure for Gathering Debug Data on a Hung or Unresponsive Web Server Process

- Clarification About Unit of Time Used for the%duration% Log Parameter

- Additional Information About Configuring a Web Application for Session Replication

- Information About timeout Parameter of http-client-config

- Introducing exclude-escape-chars Parameter in http-client-config

- PID File Disappears in Red Hat Linux

- Token Name

- Using SMF on Solaris 10

- Problem with set-cookie Header

- Information About Securing a URI Using an Authentication Database

- Correction to JVM Option Example

- Correction to Default Number of Keep-Alive Threads

- Clarification About the Limit Queue Length Shown in the perfdump Report

- TLS Communication Through Certain Load Balancers Breaks in 7.0.13 and Later Releases

- Search Collections Does Not Support PDF 9.0

- Information about the htpasswd Command

- Create .noStartOnBoot File to Control Autostart

- Invalid Information About the Parameter max-procs

- The Button to Copy the Configuration is called Duplicate not Copy

- Information on the Sticky Cookie Parameter

- Unable to Create an ACL Based on the Incoming Referrer Header

- New Configuration Option to Get/Set Properties in the auth-db

- Components for Use with Custom Log Format

- Information about the io-timeout Element for HTTP Settings

- Information about the NetWriteTimeout Parameter

- Default Value of ssl3-tls-cipher Suite

- Tab to Change Pre-compressed Settings is Content Handling tab not Content Management tab

- Documentation, Support, and Training

A Features and Enhancements in Previous Web Server 7.0 Releases

- Features and Enhancements in 7.0.26

- Features and Enhancements in 7.0.25

- Features and Enhancements in 7.0.24

- Features and Enhancements in 7.0.23

- Features and Enhancements in 7.0.22

- Features and Enhancements in 7.0.21

- Support for Network Security Services 3.17.2

- Support for TLS Protocols

- Default welcome-file-list

- Features and Enhancements in 7.0.20

- Features and Enhancements in 7.0.19

- Features and Enhancements in 7.0.18

- Features and Enhancements in 7.0.17

- Features and Enhancements in 7.0.16

- Features and Enhancements in 7.0.15

- Features and Enhancements in 7.0.14

- Features and Enhancements in 7.0.13

- Features and Enhancements in 7.0.12

- Security Component Upgradation

- Introducing exclude-escape-chars parameter in http-client-config SAF

- Introducing httponly-session-cookie property in servlet-container element

- Features and Enhancements in 7.0.11

- Updated JDK Version

- Features and Enhancements in 7.0.10

- Maximum Length of Group Line in htaccess Authentication Group File Increased

- JDK Updated to 1.6.0_22

- NSS Updated to 3.12.8

- Features and Enhancements in 7.0.9

- Resolution of SSL/TLS Vulnerability CVE-2009-3555

- Support for JDT Java Compiler

- Support for Oracle JRockit JDK

- Ability to Change Session ID on Authentication

- For Large Applications, --directory Option of add-webapp Deprecated

- Features and Enhancements in 7.0 Update 8

- Features and Enhancements in 7.0 Update 7

- Deprecated Platforms

- SSL/TLS Vulnerability Fix (CVE-2009-3555)

- Features and Enhancements in 7.0 Update 6

- Features and Enhancements in 7.0 Update 5

- Binary Logging

- Features and Enhancements in 7.0 Update 4

- REQUEST_URI and SCRIPT_FILENAME Support

- default-sun-web.xml Support

- OpenSolaris 2008.11 Support

- Features and Enhancements in 7.0 Update 3

- AIX Platform Support

- Autodeploying Web Applications

- Features and Enhancements in 7.0 Update 2

- PKCS11 Bypass Support

- Service Management Facility (SMF) Support

- Asynchronous Accelerator Cache Support

- Enhanced Web Container

- Improved Administration Experience

- Red Hat 4.0 64-bit Support

- NetBeans 6.5 IDE Support

- Features and Enhancements in 7.0 Update 1

- Java Servlet 2.5 and JavaServer Pages (JSP) 2.1 Support

- JavaServer Pages Standard Tag Library 1.2 and JavaServer Faces 1.2 Support

- Accelerator Cache Technology

- Administration Support for Configuring FastCGI

- NetBeans Support

- Admin Console Support for Configuring Regular Expressions

- GUI and CLI Support for Pattern Matching

- Features and Enhancements in 7.0

- JMX-Based Management Infrastructure

- Redesigned Administration Server Interface

- Command-Line Interface Support

- Sun N1 Service Provisioning System Support

- Consolidated Configuration Files

- JNDI Support

- Java Database Connectivity and Connection Pooling Support

- Enhanced Hardware Accelerator Encryption Support

- Integrated Java Web Services Developer Pack 2.0 Technologies

- Lightweight Session Replication Support

- URL Redirection and Rewriting with Regular Expressions

- Extensive Real-Time Monitoring Support

- Integrated Reverse Proxy

- Enhanced Security

- Elliptic Curve Cryptography Support

- Oracle Java Studio Enterprise Support

- Localization Support

B Issues Resolved in Previous Web Server Releases

- Issues Resolved in 7.0.26

- Issues Resolved in 7.0.25

- Issues Resolved in 7.0.24

- Issues Resolved in 7.0.23

- Issues Resolved in 7.0.22

- Issues Resolved in 7.0.21

- Issues Resolved in 7.0.20

- Issues Resolved in 7.0.19

- Issues Resolved in 7.0.18

- Issues Resolved in 7.0.17

- Issues Resolved in 7.0.16

- Issues Resolved in 7.0.15

- Issues Resolved in 7.0.14

- Issues Resolved in 7.0.13

- Issues Resolved in 7.0.12

- Issues Resolved in 7.0.11

- Issues Resolved in 7.0.10

- Issues Resolved in 7.0.9

- Issues Resolved in 7.0 Update 8

- Issues Resolved in 7.0 Update 7

- Issues Resolved in 7.0 Update 6

- Issues Resolved in 7.0 Update 5

- Issues Resolved in 7.0 Update 4

- Issues Resolved in 7.0 Update 3

- Issues Resolved in 7.0 Update 2

- Issues Resolved in 7.0 Update 1

List of Tables

- 2-1 Known Issues in Administration

- 2-2 Known Issues in Core

- 2-3 Known Issues in FastCGI

- 2-4 Known Issues in Installation

- 2-5 Known Issues in Migration and Upgrade

- 2-6 Known Issues in Sample Applications

- 2-7 Known Issues in Search

- 2-8 Known Issues in Security

- 2-9 Known Issues in Session Replication

- 2-10 Known Issues in Web Container

- 2-11 Known Issues in Localization

- 2-12 Known Issues in Java ES

- 3-1 Web Server Documentation

Preface

Welcome to Oracle iPlanet Web Server Release Notes.

Oracle iPlanet Web Server (often referred to as Web Server in this document) is a multi-process, multi-threaded, secure web server built on industry standards. It provides high performance, reliability, scalability, and manageability for medium to large enterprises.

The information in this document is organized as follows:

- Oracle iPlanet Web Server Release 7.0.27 Release Notes contains information about the features, enhancements, and issues resolved in the current release; the hardware and software requirements; and installation, migration, and upgrade notes.

- Known Issues lists the important known issues and limitations at the time of the current release.

- Product Documentation presents an overview of the Web Server documentation; describes the documentation corrections, enhancements, and issues resolved; and provides information about how to access documentation, support, and training resources.

- Features and Enhancements in Previous Web Server 7.0 Releases describes the features and enhancements in previous releases of the product.

- Issues Resolved in Previous Web Server Releases lists the issues resolved in previous releases of the product.

Revision History

Date

Description

October 2017

Updated for the Oracle iPlanet Web Server 7.0.27 release

April 2017

Updated for the Oracle iPlanet Web Server 7.0.26 release

January 2017

Updated for the Oracle iPlanet Web Server 7.0.25 release

October 2016

Updated for the Oracle iPlanet Web Server 7.0.24 release

April 2016

Updated for the Oracle iPlanet Web Server 7.0.23 release

July 2015

Updated for the Oracle iPlanet Web Server 7.0.22 release

April 2015

Updated for the Oracle iPlanet Web Server 7.0.21 release

July 2014

Updated for the Oracle iPlanet Web Server 7.0.20 release

January 2014

Updated for the Oracle iPlanet Web Server 7.0.19 release

October 2013

Updated for the Oracle iPlanet Web Server 7.0.18 release

April 2013

Updated for the Oracle iPlanet Web Server 7.0.17 release

October 2012

Updated for the Oracle iPlanet Web Server 7.0.16 release

May 2012

Updated for the Oracle iPlanet Web Server 7.0.15 release

February 2012

Updated for the Oracle iPlanet Web Server 7.0.14 release

December 2011

Updated for the Oracle iPlanet Web Server 7.0.13 release

August 2011

Updated for the Oracle iPlanet Web Server 7.0.12 release

February 2011

Updated for the Oracle iPlanet Web Server 7.0.11 release

December 2010

Updated for the Oracle iPlanet Web Server 7.0.10 release

July 2010

Initial publication, for the Oracle iPlanet Web Server 7.0.9 release

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Oracle iPlanet Web Server Release 7.0.27 Release Notes

This document contains information about new features and enhancements, installation notes, and known issues in Oracle iPlanet Web Server Release 7.0.27.

This document contains the following sections:

- New Features or Enhancements in Oracle iPlanet Web Server Release 7.0.27

- Issues Resolved in Oracle iPlanet Web Server Release 7.0.27

- Hardware and Software Requirements

- Installation, Migration, and Upgrade Notes

New Features or Enhancements in Oracle iPlanet Web Server Release 7.0.27

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.27

For information about features and enhancements in previous Oracle iPlanet Web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Issues Resolved in Oracle iPlanet Web Server Release 7.0.27

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.27. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

26393550

Update web server version to 7.0.27.

26711637

Since NSS no longer supports PKCS 11 allow-bypass, the allow-bypass support must be removed from Webserver.

26393470

NSS upgraded to 3.30.2 for Oracle iPlanet Web Server 7.0.27.

For information about issues resolved in previous Oracle iPlanet Web Server Release 7.0 releases, seeIssues Resolved in Previous Web Server Releases.

Hardware and Software Requirements

This section provides information about the hardware and software requirements of Oracle iPlanet Web Server Release 7.0.27, including the following topics:

- Product Patches

- Supported Platforms

- Supported JDKs

- System Virtualization Support

- Operating System Patches

- Supported Browsers

- Deprecation Notices

Product Patches

Patches for Oracle iPlanet Web Server Release 7.0.27 are available on the My Oracle Support site at http://support.oracle.com.

The following table lists issue IDs related to different platforms.

Platform

Issue ID

Oracle Solaris on SPARC (32-bit)

26664500

Oracle Solaris on x86 (32-bit)

26664500

Linux x86

26664500

Linux x86-64

26664500

IBM AIX on POWER Systems (32-bit)

26664500

Microsoft Windows (32-bit)

26664500

Supported Platforms

Complete information about supported operating environments and hardware for Oracle iPlanet Web Server Release 7.0.27 is available in Oracle iPlanet Web Server Release 7.0.9+ Certification Matrix, which is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

Memory and Disk Space Requirements

- Minimum recommended disk space: 550 MB

- Minimum required memory

- For Red Hat Enterprise Linux: 768 MB

- For all other operating systems: 512 MB

Runtime Library Requirement

The Oracle iPlanet Web Server 7.0.27 Windows patch requires the Microsoft VC9 runtime libraries.

Supported JDKs

From release 7.0.9 onward, Oracle iPlanet Web Server is supported only on Java SE 6, not on Java SE 5.

From Web Server 7.0.17 and higher, Java SE 7 is supported on Solaris, Linux and Windows platforms.

For information about the supported operating systems, see the Oracle iPlanet Web Server 7.0.9+ Certification Matrix spreadsheet, the link to which is available on the following page:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

Note:

JDK 7 is packaged with Oracle iPlanet Web Server 7.0.18, for all the operating systems that are listed in the supported platforms spreadsheet, except HP-UX and AIX.

System Virtualization Support

System virtualization is a technology that enables multiple operating system instances to execute independently on shared hardware. Functionally, software deployed to an operating system hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Oracle tests its products on selected system virtualization and operating system combinations to help validate that Oracle products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems.

For information about support for Oracle products in virtualized environments, see:

http://www.oracle.com/technetwork/middleware/ias/oracleas-supported-virtualization-089265.html

Operating System Patches

Update your operating system with the latest applicable patches. Required patches are listed in the following sections.

Solaris Patches

x86 or SPARC users of Solaris 10 should have the latest patch cluster installed. The patch cluster is available on the My Oracle Support site at:

http://support.oracle.com

Note:

On a 32-bit Solaris (SPARC) platform, install SUNWlibC and SUNWlibCx packages, in addition to the patches listed in this section.

The Oracle iPlanet Web Server 7.0 installer determines whether the required patches are installed on your system; without them, the installation fails. The following patches are required for successful installation and functioning of Oracle iPlanet Web Server 7.0 on a supported platform.

Note:

If the patches available at http://support.oracle.com are obsolete, download the most recent version of these patches because they include the latest bug fixes and product enhancements.

Note:

To know the Solaris version installed on your system, see the /etc/release file.

The /etc/release file contains Solaris version information in the following format:

Solaris 10 6/06 s10x_u2wos_08 X86
Copyright 2006 Sun Microsystems, Inc.  All Rights Reserved.
Use is subject to license terms.
Assembled 02 May 2006

Solaris 10 (SPARC and x86) Patches

- SPARC
119963-26 — Shared library patch for C++

- x86
119964-26 — Shared library patch for C++

AIX Patches

- AIX 5.3: 5300-08-01-0819 or later

- AIX 6.1: 6100-00-04-0815 or later

Linux 6.x Patch

compat-libstdc++-33.x86_64 rpm

glibc-2.12-1.80.el6.i686 rpm

Supported Browsers

Information about the supported web browsers for Oracle iPlanet Web Server Release 7.0.27  is available in the Oracle iPlanet Web Server Release 7.0 Certification Matrix, which is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

Deprecation Notices

Uncertified Operating System Versions

As of Oracle iPlanet Web Server Release  7.0.27, the following operating system versions are not certified:

- Microsoft Windows XP

- Microsoft Window Server 2003 Enterprise Edition, Service Pack 2

- Microsoft Windows 2000 Server and Windows 2000 Advanced Server

- Solaris 9 Update 9 SPARC (32- and 64-bit)

- Solaris 9 Update 8 x86 (32-bit)

- Solaris 8

- OpenSolaris

- HP-UX 11.11

- Novell SUSE Linux Enterprise Server 9

- Red Hat Enterprise Linux Advanced Server 3

Uncertified Web Browser Versions

As of Oracle iPlanet Web Server Release  7.0.27, the following web browser versions are not certified:

- Firefox 2

- Microsoft Internet Explorer 6

- Mozilla (all versions)

Installation, Migration, and Upgrade Notes

This section includes notes about installing, migrating, and upgrading Web Server. For detailed information about these topics, review the information in Oracle iPlanet Web Server Installation and Migration Guide.

For known issues as of Oracle iPlanet Web Server Release 7.0.27, see Known Issues.

Installation Notes

You cannot install Web Server to a directory that contains an earlier major version of Web Server. You can, however, migrate the existing installation after installing Web Server to a new directory.

Web Server can be installed as part of Java Enterprise System or as a standalone version.

Standalone Installation

In a standalone installation, all the necessary shared components such as NSS and NSPR are packaged with the Web Server installation files.

Java ES Installation

Java ES patches for Oracle iPlanet Web Server 7.0 were provided up to release 7.0.12. The information in this section is applicable only to release 7.0.12 and earlier releases.

If you are installing Oracle iPlanet Web Server as part of the Java ES suite, the Java ES installer installs all the shared components such as NSS and NSPR as separate packages and Web Server specific binaries as separate OS-dependent packages.

Download and install the latest Java ES component patches for your operating system from http://support.oracle.com.

Note:

Oracle iPlanet Web Server will not start successfully without installing the latest NSS and NSPR patches on your system. Therefore, before installing the latest update of Oracle iPlanet Web Server, look in the patch README for the appropriate NSS patch available for your system.

Migration Notes

Web Server 6.0 and 6.1 configurations can be migrated. Direct migration from a Web Server release earlier than 6.0 is not supported. Earlier releases such as Web Server 4.0 must first be migrated to Web Server 6.1, then to Web Server 7.0. For information about migrating from Web Server 4.0 or later to Web Server 6.1, see Sun Java System Web Server Installation and Migration Guide and Sun Java System Web Server 6.1 Release Notes at:

http://docs.oracle.com/cd/E19857-01/index.html

For more information about migrating from Web Server 4.1 to Web Server 7.0, and from all versions of Web Server 6.0 to Web Server 7.0, see Oracle iPlanet Web Server Installation and Migration Guide.

Upgrade Notes

When you install the latest update of Oracle iPlanet Web Server 7.0 over an existing 7.0 installation, the installer automatically performs the upgrade.

If Oracle iPlanet Web Server 7.0 is already installed, point the installer (pertaining to the latest update) to the location of the existing 7.0 installation, and then upgrade.

For more information about upgrading from Web Server 7.0 to Web Server 7.0 Update 5, see Oracle iPlanet Web Server Installation and Migration Guide.

Compatibility Issues

1. Web Server 7.0 supports JavaServer Faces 1.2 technology. Most JavaServer Faces 1.1 applications are expected to work with Web Server 7.0 without any modifications. However, there are some compatibility issues that might be encountered when migrating applications to JavaServer Faces 1.2 applications and such applications require modifications.
The changes are documented in the JavaServer Faces release notes at:

https://javaserverfaces.dev.java.net/rlnotes/1.2_04/issues.html

2. Sun Java System Portal Server 7.1 provided with Java ES 5 is not compatible with Web Server 7.0 Update 1. If you have deployed Sun Java System Portal Server 7.1 along with Web Server 7.0, you need to upgrade both servers rather than only Web Server 7.0.
The required Sun Java System Portal Server 7.1 upgrade is available with Java ES 5 Update 1 or with the following patches at:

http://support.oracle.com

- 124301 (SPARC)

- 124302 (x86)

- 124303 (Linux)

If you are using a localized version of Web Server, install the following Portal Server localization patches:

- 125301 (Solaris SPARC, Solaris x86 localization)

- 125302 (Linux localization)

2 Known Issues

This chapter describes known issues and limitations in Oracle iPlanet Web Server 7.0 release.

The issues are grouped under the following sections:

- Web Server Administration Issues

- Web Server Core Issues

- Web Server FastCGI Issues

- Web Server Installation Issues

- Web Server Migration and Upgrade Issues

- Web Server Sample Applications Issues

- Web Server Search Issues

- Web Server Security Issues

- Web Server Session Replication Issues

- Web Server Web Container Issues

- Web Server Localization Issues

- Web Server Sun Java Enterprise System Issues

Web Server Administration Issues

Table 2-1 lists the known issues in the administration of Web Server.

Table 2-1 Known Issues in Administration

Problem ID

Description

6944873

On AIX with IBM JDK 6, user authentication fails if the UID contains double quotation marks and Web Server is configured to use the LDAP realm.

This issue arises due to a bug in the IBM JDK.

6364924

A node can be registered to multiple administration servers, which may cause a configuration conflict.

It is possible to register a node to a second administration server without canceling the registration with the first administration server. However, this leads to the nodes being inaccessible to both the administration servers.

Workaround:

On each registration, restart the administration node. The administration node will be available to the most recent administration server, to which it is registered.

6379125

wadm command allows connecting to a node, shows a certificate and then throws an 'HTTP 400' error.

When an administration node receives a connection, it does not check that the connection is from the administration server before proceeding. It not only prints an inappropriate error message, but also prompts the user to enter the password.

6327352

Session replication enabled instances does not come up normally if other instances in the cluster are not started.

6393534

After migrating the Java keystore keycerts using the migrate-jks-keycert command, trying to list the migrated jks keycerts using the list-certs command, displays the CN, org and other information instead of the certificate nickname.

6407486

While setting the SSL property using the wadm set-ssl-prop command, the server-cert-nickname property accepts any certificate nickname, instead of accepting only the server certificate nickname.

6443742

The set-session-replication-prop CLI command does not work if the 'node' option is provided with a qualified domain name.

Workaround:

Use the output of the list-nodes command for the valid names of the nodes in the set-session-replication-prop command.

6468570

Specifying "yes" at the wadm prompt terminates the CLI.

6469676

When you try to connect to the administration server after the administration certificates have expired, an incorrect error message is displayed.

6480600

The register-node command gives an incorrect error message when the administration server runs out of disk space.

6495446

If no disk space is available on the device, wadm throws an incorrect error message "Unable to communicate with the administration server".

6502800

Executing the migrate-server command with both "--all" and "--instance" options does not result in an error.

A warning or an error message should be displayed indicating that the user is attempting to set mutually exclusive options.

6416328

The Start Instances button in the Admin Console is enabled for an instance that is already running.

The buttons should be enabled or disabled based on the status of the instance.

6418312

wadm allows you to define duplicate user properties.

Adding duplicate user properties does not show an error message; however, a new user property is not created.

6421740

There is no provision to create an access control list (ACL) file using the Admin Console or the CLI.

6423432

On Windows, using an existing configuration, repeating the process of adding and removing the registered nodes causes validation failure.

6430417

MIME types allows MIME value with multibyte characters.

6442081

Text in the Access Control List page is not formatted.

6442172

User can be switched between `available' and `selected' lists in ACE even though the user is deleted from the authentication database.

6446162

No warning is issued before the deletion of key or the digest file authentication database.

6448421

The administration interface allows you to create a user with multibyte user ID in the key-file authentication database.

6455827

User and Group table in the Admin Console displays the entire result in a single page.

6461101

Labeling of the Request Certificate and Install buttons on the Create Self-Signed Certificate page of the Admin Console needs to be revised.

6462057

Add and Remove buttons are enabled in new ACE window even if no items are present in the `Available' list.

6464891

Admin Console truncates the display of server logs at 50 lines or 2 pages.

6465382

No validation exist to check the entry of wrong country code in the certificate request wizard.

6465421

In the Admin Console, no text field description is provided for virtual-server, authdb, dav collection, and event fields .

6466336

Admin Console shows wrong JDK version while creating a new configuration.

The JDK version displayed in the Admin Console is 5.0 u6 instead of 5.0 u7.

6471171

Style formatting is lost after restarting the administration server from Nodes -> Administration Server General tab.

6471367

Attempting to access the Admin Console in another tab of the same browser does not work.

6471792

View Log displays result in a single page.

Although the search criteria selected for record size is 25 log entries, the log displays the results in one single page even if there are more than 50 log entries.

6472932

Token mismatch error is displayed when you remove the token password and then reset it in the Common tasks -> Select configuration -> Edit configuration -> Certificates -> PKCS11 Tokens page.

6486037

The Virtual Server Management->Content Handling->Document Directories->Add should have a browse option to choose the path of a additional document directory.

6492906

Message displayed about WebDAV collection locks in the Admin Console is misleading.

If you specify the time-out value for the WebDAV collection as infinite, the Common Tasks->Select Configuration ->Select Virtual Server->Edit Virtual Sever ->WebDAV->Select collection page displays the message DOES NOT EXPIRE. What it actually means is that the lock does not expire automatically after a specified time or the time-out is infinite.

6498484

Incorrect error message is displayed on setting empty token password using the `Set passwords' button.

6500157

Instance fails to restart if you try to edit a token password and deploy a configuration on an instance which is already running.

6502287

The Admin Console displays an exception when you delete a configuration and click the Migrate button.

6502374

The Admin Console Review screen in wizards should only show fields that have values.

6502793

During migration, the log-dir path permission is not validated.

6266358

Cannot log in through the Admin CLI if the administration password has extended ASCII characters.

6361329

The error-response file name should be validated.

6367282

The administration server starts with expired certificate; wadm should warn about expired certificates.

6375505

The unregister-node command should also clean up certificates on the administration node.

6408169

WebDAV lock CLIs do not work in a cluster environment.

6408186

Multiple installations of the administration nodes on the same node that is registered to the same administration server should be not be allowed.

6416369

Accessing the administration node URL results in Page Not Found error.

As the administration node does not have a GUI, accessing the administration node URL results in Page Not Found error.

6422936

No validation for class path prefix and suffix, and native library path in JVM Path Settings in Java.

6423310

The server.xml elements should be grouped based on functionality.

6441773

On Windows, the administration server moves the Web application files physically before stopping the Web application.

6462515

The Admin Console misleads user with "Instance modified" message when runtime files get created in the config directory.

6462579

Trust store does not deleted on uninstalling the administration node after unregistering it with the administration server.

6468330

Changes made to the JavaHome property does not get saved after restarting the instance.

6491749

Need better validation in certain text fields to prevent obj.conf file corruption.

Most of the functional validation of the data in a form is done in the back end. The GUI has only minimal checks such as empty fields, integer values, and ASCII values. Hence, the GUI stores the data in the obj.conf when parsed gets corrupted .

6497213

Executing the restart-admin command followed by the stop-admin command throws exception in administration error logs.

6587832

On Windows, the Admin Console intermittently fails to come up.

Workaround:

1. This problem is seen on Windows 2003 if you have "Internet Explorer Enhanced Security Configuration" enabled.

2. To access the Admin Console without disabling Enhanced Security feature, include the site in the list of trusted sites explicitly on the browser.

3. To disable Internet Explorer enhanced security configuration, go to Control Panel > Add/Remove Programs > Add/Remove Windows Components.

4. Deselect the check box next to Internet Explorer Enhanced Security Configuration.

5. Restart the browser.

6746045

Once config changes are made it is found that file ownership changes in docs directory

When a user creates a directory, adds some files and deploys them under the docs directory, the ownership of all files under this directory, changes to the owner who installed Web Server.

Workaround:

The user directories should not be created under docs directory.

6750708

Web Server 7.0 Admin CLI does not accept multibye characters as input.

Admin CLI does not accept input strings which has multibyte or non-ASCII characters. For example, if you are entering an input value containing a non-ASCII character (Felhasználók) along with the command, the input value will be garbled as follows:

wadm>  set-authdb-prop --config=test --authdb=sajit
url=ldap://test.example.com:389/ou=Felhaszn??l??k,dc=india,dc=example,dc=com

Workaround:

While modifying the server.xml file manually, to enter base DN value, you must enter the URL encoded sequence as input instead of multibyte characters. For example, enter: "Felhaszn%C3%A1l%C3%B3k" instead of "Felhasználók"

6722375

The administration server throws an error as the postpatch script for patches 125437-14 and 125438-14 are not Alternate Root compliant.

Workaround:

1. Boot the alternate boot operating system after adding the patch to the alternate boot environment.

2. Start the administration server.
The administration server fails to start and throws the following error message:

java.lang.NoClassDefFoundError: com/sun/scn/client/comm/SvcTagException

3. Edit the Web Server postpatch script to define the ROOTDIR value as / or /space, where JES base path is given.

bash-3.00# cat postpatch
#!/bin/ksh

# Copyright (c) 2007 by Sun Microsystems, Inc.
# All rights reserved
#

PATH="/bin:/usr/bin:/sbin:/usr/sbin:$PATH"
export PATH

ROOTDIR=/

BASEDIR="`pkgparam -R $ROOTDIR SUNWwbsvr7 BASEDIR 2>/dev/null`"
if [ -n "$BASEDIR" ]
then
INSTALL_DIR="$ROOTDIR$BASEDIR/SUNWwbsvr7";
PERLDIR="$INSTALL_DIR/lib/perl"
if [ -f "$INSTALL_DIR/lib/wsenv" ]
then
. "$INSTALL_DIR/lib/wsenv";
WS_IS_JES=1; export WS_IS_JES
....
bash-3.00#

4. Run the script to complete the upgrade.

bash-3.00# ksh /tmp/postpatch
"//opt/SUNWwbsvr7/lib/perl/perl" -I "//opt/SUNWwbsvr7/lib/perl" -I
"//opt/SUNWwbsvr7/lib/perl/lib" -I "//opt/SUNWwbsvr7/lib/perl/lib/site_perl"
"//opt/SUNWwbsvr7/lib/upgradeServer.pl"

bash-3.00#

The administration server starts without any error.

6784450

Unable to login to the administration server using Mozilla Firefox 3.0

Workaround:

1. On the Solaris 10 platform, Mozilla Firefox 3.0.4 browser, go to Edit-> Preferences-> Advanced-> Encryption-> Server tab.

2. Click Add Exceptions...

3. Enter the address of the web site you want to access in the text area and click Allow

6820164

OpenSolaris 2008.11 Bug 4788 causes a serious impact on Web Server.

Web Server's certificates are affected during deployment of Web Server on OpenSolaris 2008.11, with the following warning:

root# /opt/webserver7/admin-server/bin/startserv
Oracle iPlanet Web Server 7.0U4 B12/02/2008 02:49
warning: CORE1235: SSL server certificate Admin-Server-Cert
is not yet valid.
...

An OpenSolaris Bug 4788, with time, causes this problem. For more information, see http://defect.opensolaris.org/bz/show_bug.cgi?id=4788.

Workaround:

Reboot your server after deploying OpenSolaris 2008.11 and correct the server time.

6842383

FastCGI suid environment for Red Hat Enterprise Linux

To get the FastCGI suid environment to work on Red Hat Enterprise Linux, perform the following steps:

1. cd <webserver_install>/plugins

2. chown webservd fastcgi

3. cd fastcgi

4. chmod 4755 Fastcgistub

5. Add the following lines in /etc/ld.so.conf

<webserver_install>/lib
<webserver_install>/jdk/jre/lib/i365/server

6. Run ldconfig

7. Restart Web Server
Note: The file system where Web Server is installed and the /tmp directory should have permission to run the suid program, The file system should not be mounted with the nosuid option.

6893239

JDK 1.6.0 and JDK 1.5.0 logger are not working properly.

12303923

Do not navigate to the other pages while generating a CSR

In the Web Server 7 Administration GUI, when you generate a CSR using the CSR wizard window, do not navigate to the main window or other pages to perform different operations. For example, Nodes-CA list, CRL, and Certificate details. If you browse other pages during the CSR generation process, the configuration switches from web instance to admin-server unexpectedly in the CSR wizard window. This development may cause no private key problems when you install the SSL certificate into the web instance. Make sure to complete all the transactions in the CRS wizard window before navigating to the administration GUI main window for other operations.

12721207

After creating service through Administration GUI, the instance does not start up with system reboot due to Bug#12657657

To enable the instance to start up successfully, follow these steps:

1. After creating the service, import the manifest file. svccfg import /var/svc/manfest/network/http.xml

2. svcadm enable <your instance> or click the start button of the instance in the Administration GUI.

3. Reboot the system /usr/sbin/shutdown -g0 -y -i6

4. Verify the instance status.

Steps 2 and 3 are required to complete the SMF configuration.

While working on the CLI, follow these steps:

1. #wadm create-service

2. #svcadm enable svc:/network/http:https-<instance>

3. #svccfg validate /var/svc/manifest/network/http.xml

4. #svccfg import /var/svc/manifest/network/http.xml

5. #/usr/sbin/shutdown -g0 -y -i6

6. Verify the instance status.

Step 3 is required to validate the manifest file.

Web Server Core Issues

The following table lists the known issues in the core of Web Server.

Table 2-2 Known Issues in Core

Problem ID

Description

6944895

jsessionid is missing when ntrans-j2ee NameTrans precedes reverse-proxy-/ NameTrans

If the obj.conf contains NameTrans directives such that ntrans-j2ee precedes reverse-proxy-/, the jsessionid is lost.

Workaround

Reorder the NameTrans directives such that reverse-proxy-/ precedes ntrans-j2ee; for example:

NameTrans fn="map" from="/" name="reverse-proxy-/" to="http:/"
NameTrans fn="ntrans-j2ee" name="j2ee"

6948770

On 64-bit Linux, cannot distinguish between 32-bit and 64-bit Web Server

The wadm -version command does not indicate whether Web Server is 32-bit or 64-bit.

Workaround

Enter the following command in a terminal window:

file install-dir/lib/webservd

6955106

On Linux, exception at startup due to a non-existent jhall.jar link

During startup, Java throws a FileNotFoundException exception that specifies jhall.jar as the missing file. This situation arises after sun-javahelp-2.0-fcs has been uninstalled, because the uninstallation leaves a link to jhall.jar in /usr/java/packages.

Workaround

Remove the link to jhall.jar; for example:

rm -f /usr/java/packages/jhall.jar

6785490

Any URI that does not end with the "real" file name fails to execute properly, resulting in a "No input file specified" error.

For PHP users:

Web Server 7.0 Update 4 populates the environment variables REQUEST_URI and SCRIPT_FILENAME for FastCGI and CGI applications. The introduction of the SCRIPT_FILENAME variable causes PHP to display a No input file specified PHP error for scripts that are mapped to virtual URIs, that is, URLs ending with / instead of /index.html or URLs making use of Web Server 7.0's URI rewriting feature. The affected PHP versions are 5.2.5 through 5.2.9. For more information, see http://bugs.php.net/bug.php?id=47042.

Workaround:

If a PHP application is mapped to a virtual URI, then cgi.fix_pathinfo should be set to 0 in the php.ini file. This setting is required for many popular PHP applications like Drupal, Wordpress, and Joomla.

However, this setting will cause PHP applications that rely on path-info like /foobar.php/baz/ to return a No input file specified PHP error. If a PHP application relies on path-info, then cgi.fix_pathinfo should not be disabled.

6296993

When there is an error executing an obj.conf directive, the filename and line number where the offending directive was found are not logged.

6365160

When server.xml schema validation fails due to a data type constraint violation, it displays an error message that does not describe the set of valid values for the element.

6378940

All HTTP header parsing error are not logged with the client IP and a description of the error.

6470552

set-variable SAF could not set predefined variable.

6489220

Server treats non-interpolated strings that contain $$ character constants as interpolated.

When a parameter value contains a $$ escape, the server constructs a PblockModel for the parameter block. This is unnecessary because $$ is a constant.

6977268

HTTP Header field names are case-insensitive and all HTTP header field names will change to lowercase

6996370

WebServer 7.0 startup error when obj.conf has valid <If> fn="rewrite" <Else> inside

Sample <If> rule in obj.conf:

<If $path eq "/known.html">
</If>
<Else>
NameTrans fn="rewrite" path="/unknown.html"
</Else>

The <If> rules added to obj.conf interfere with the behavior of the server. The startup error occurs when the servlet/JSP container attempts to parse a web application's web.xml file. When seeking a file-system resource, obj.conf directives are processed (to pick up alternate document directories and so on).

The rules added to obj.conf change every request to either known.html or unknown.html, so instead of web.xml, the servlet container tries to parse unknown.html as a web.xml file, resulting in the error. In addition, even if no web.xml exists, the <If> rules added to obj.conf change the request to unknown.html.

Resolution:

Prefix the <If> rules in obj.conf with <If not internal and not restarted>.

Example:

<If not internal and not restarted>
<If $path eq "/known.html">
</If>
<Else>
NameTrans fn="rewrite" path="/unknown.html"
</Else>
</If>

12354092

Remove HttpOnly from the Set-Cookie header value.

Workaround:

Add a conditional statement in obj.conf file:

<If defined $srvhdrs{'set-cookie'} and $srvhdrs{'set-cookie'} =~ "(.*); HttpOnly">

Output fn="set-variable" $srvhdrs{'set-cookie'}="$1"

</If>

Web Server FastCGI Issues

The following table lists the known issues in the FastCGI.

Table 2-3 Known Issues in FastCGI

Problem ID

Description

6485248

The fastcgi stub does not properly close all the processes when reuse-connection is set to true.

Configure Web Server 7.0 to work with PHP as a FastCGI plug-in and set reuse-connection=true. When you shutting down the server or reconfiguring the server, the fastcgi() process and its child processes are left behind and not killed properly.

Web Server Installation Issues

The following table lists the known issues in the installation of Web Server.

Table 2-4 Known Issues in Installation

Problem ID

Description

6948019

On UNIX, if any directory in the installation path lacks the appropriate execute privilege, server startup fails

If any of the directories in the installation path does not provide execute privilege to the webservd user, the Web Server instance fails to start.

Workaround

Use the chmod o+x directory as needed to change execute permissions to the directories in the installation path.

6414539

Uninstalling the administration node does not delete itself from the administration server node.

After installing the administration node and registering it with the administration server in the Node tab, the administration node is listed in the Node tab. When the administration node is uninstalled, the administration node entry remains in the Node tab.

6287206

Cannot install if the setup is started from a shared folder on the network.

On the Windows platform, unable to install the product when the installer setup.exe is started from a shared network folder on another machine.

6311607

On Windows, installer crashes in CLI mode, if the administration password is >= 8 characters.

If the administration user password is greater than eight characters, then any invalid input to the administration port, Web Server port, or the administration user ID crashes the installer.

Workaround:

When installing Web Server 7.0 on the Windows platform using the command-line interface (CLI), the administration password must be set to less than (<) eight characters.

6408072

On Windows, need icons for objects in Programs folder.

The objects in the Web Server 7.0 folder on Windows are created with default Windows program icons and do not have specific icons that denote Sun programs.

6492144

The CLI installer does not handle ctrl+c while entering the password.

The installer does not accept ctrl+c and hence the terminal becomes unusable.

6710925

RH5.1 user cannot install Web Server 7.0 Update 3 using GUI mode

Workaround

To overcome this failure:

1. Use the CLI based installer.

2. Create a symbolic link to the xdpyinfo command. For example,

[root@server bin]# ln -s /usr/bin/xdpyinfo /usr/X11R6/bin/xdpyinfo

6717123

Registration Options panel UI sometimes is not displayed properly

The 'Registration Options' GUI in the installer is not displayed properly sometimes.

Workaround:

Resize the installer window.

12306018

.exe files cannot be downloaded properly in Web Server 7 default configuration.

Workaround:

1. Go to the instance configuration and edit the mime.types file.
Before editing the mime.types file, it is displayed as:

type=application/octet-stream                exts=bin
type=magnus-internal/cgi                     exts=cgi,exe,bat

After editing the mime.types file, it is displayed as:

type=application/octet-stream                exts=bin,exe
type=magnus-internal/cgi                     exts=cgi,bat

2. Use wadm pull-config or Administration GUI to synchronize the manual change to the Administration Server.

3. Restart the Web Server and download with the .exe file type.

19826946

Windows patch requires VC9 runtime libraries.

The Oracle iPlanet Web server 7.0.20 Windows patch requires the VC9 runtime libraries.

Web Server Migration and Upgrade Issues

The following table lists the known issues in the migration and upgrade areas of Web Server.

Table 2-5 Known Issues in Migration and Upgrade

Problem ID

Description

6932016

Verisign EV certificate chain issue with new built-in CA root.

If you are using 2048-bit SSL web server certificates, some older browsers might give a Certificate Authority Not Trusted warning after you upgrade from an earlier version of Web Server 7.0 to Web Server 7.0 Update 6 or later.

Workaround

1. Stop Web Server.

2. Change to the config directory of the Web Server instance.

cd instance-dir/config

3. List the Root Certs module.

modutil -list -nocertdb -dbdir .

4. Delete the Root Certs module.

modutil -dbdir . -delete 'Root Certs'

5. Confirm that the Root Certs module is deleted.

modutil -list -nocertdb -dbdir .

6. Start Web Server.

Note: This workaround is also applicable to any new configuration that is designed to use 2048-bit SSL web server certificates.

6914893

Not all properties from 6.0 jvm12.conf file are migrated to 7.0 server.xml file

When migrating from Sun iPlanet Web Server 6.0 to Oracle iPlanet Web Server 7.0, properties in the 6.0 jvm12.conf file of the form name = value are not migrated as JVM options to the 7.0 server.xml file.

Only the properties listed in jvm12.conf Parameter Reference in iPlanet Web Server 6.0, Enterprise Edition Programmer's Guide to Servlets are migrated.

Workaround

Migrate these properties' values manually. To do so, use Elements in server.xml in Oracle iPlanet Web Server 7.0.9 Administrator's Configuration File Reference to locate the server.xml element or subelement that corresponds to the jvm12.conf property you are migrating, and transfer the value to the server.xml file.

6407877

Incorrect migration occurs while migrating from Web Server 6.0 to 7.0 if the installed.pkg file is not found.

In Web Server 6.0 to 7.0 migration, if the installed.pkg file is missing, Web Server incorrectly migrates the NSServlet entries in the magnus.conf file.

6490124

6.x -> 7.0: Migrated scheduled events still points to 6.x paths in the server.xml file.

6502529

6.1->7.0: Migration does not handle relative path set for search-collection-dir correctly.

During instance migration, specifying a relative path for the target path into which the search collections should be copied, results in the search collection directory being created with respect to the config-store. When the instance is instantiated, the indexes are created without properly migrating the search collections.

6502769

6.x->7.0: Migration ignores any "document-root" NameTrans specified in the obj.conf file.

6498806

On Windows, Web Server Admin Console does not appropriately warn users during migration.

The administration server does not detect if the selected new configuration or the service name already exists on Windows and hence does not appropriately warn the users to select a different configuration name or suggest a different configuration name as default.

6500509

Web Server 7.0 migration tool cannot successfully migrate from Web Server 6.1 if it has Root Certs installed in it.

6747123

The request processing behavior has changed in Web Server 7.0 Update 2 release.

This change does not manifest while using Web Server 7.0 Update 2 RPP.

A modification in Web Server's request processing engine to fix a significant error in Web Server, has changed the order in which Web Server processes objects and directives in the server's obj.conf file. This correction now guarantees that the following rules are applied while processing a request:

- All ppath objects that apply to a request are evaluated

- If there is a named object that applies to a request, it will take precedence over any ppath objects in cases where the two conflict.

If your obj.conf file contain ppath objects, evaluate them to determine if your obj.conf file requires any modification. As a consequence of this change in the request processing behavior, when you upgrade previous Web Server versions to Web Server 7.0 Update 2, or later, you may have to make minor changes to the obj.conf files, as described after this table.

Handling the request processing behavior change in Web Server 7.0 Update 2

As a consequence of the change to the request processing behavior, when you upgrade previous Web Server versions to Web Server 7.0 Update 2 or later, you may have to make minor changes to the obj.conf files, as follows:

1. Using IF directive
In the following example, directives contained in theppath objects will not be invoked when an explicit JSP extension is found in the request URI, as the ntrans-j2ee NameTrans SAF will apply to a JSP extension and cause the object named j2ee to be evaluated next. The WebLogic proxy service used here to forward requests to the WebLogic server is no longer invoked, although there are no modifications made to theobj.conf file. As a result, Web Server sends the request to it's own web container, instead of the WebLogic proxy, resulting in failure of the request.

In theobj.conf file, default object, add a conditional statement to thentrans-j2ee service with the problem URIs, as follows:

<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
#
#Adding <IF...> and </IF> bracketing to compensate
for change in ppath processing
#
<IF $uri !~ ".*WebApp/.*" >
NameTrans fn="ntrans-j2ee" name="j2ee"
PathCheck fn="find-index-j2ee"
ObjectType fn="type-j2ee"
Error fn="error-j2ee"
</IF>
....
....
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>

<Object ppath="*/examplesWebApp/*" >
Service fn=wl_proxy WebLogicHost=jwsse10.red.iplanet.com WebLogicPort=7001
</Object>

<Object ppath="*/ejemploWebApp/*">
Service fn=wl_proxy WebLogicHost=jwsse10.red.iplanet.com
WebLogicPort=7002
</Object>
</Object>

This allows thentrans-j2ee to be executed only when the URI's do not match.

2. Usingassign-name NameTrans
In simple scenarios, you can changeppath objects toname objects by usingassign-name in the default object. This allows theassign-name to be executed ahead ofntrans-j2ee.

<Object name="default">
NameTrans fn="assign-name" from="/examplesWebApp/*" name="examples_proxy"
NameTrans fn="assign-name" from="/ejemploWebApp/*" name="ejemplo_proxy"
NameTrans fn="ntrans~j2ee" name="j2ee"
....
....
</Object>

<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>

<Object name="examples proxy" >
Service fn=wl_proxy WebLogicHost=jwsse10.red.iplanet.com WebLogicPort=7001
</Object>

<Object name="ejemplo proxy">
Service fn=wl_proxy WebLogicHost=jwsse10.red.iplanet.com WebLogicPort=7002
</Object>

3. Disabling
Turning off Java Web container support on Web Server will ensure that the JSPs will be handled by WebLogic proxy function. However, this is only suggested when you do not intend to host Java content in the proxying tier.

Web Server Sample Applications Issues

The following table lists the known issues in Sample Applications of Web Server.

Table 2-6 Known Issues in Sample Applications

Problem ID

Description

6472796

sendmail.jsp shows incorrect file to be edited to specify resource.host for javamail sample application.

Workaround

To set javamail.resource.host, edit the javamail.build.properties and not the build.xml as specified in install-dir/samples/java/webapps/javamail/src/docroot/sendmail.jsp.

Web Server Search Issues

The following table lists the know issues in the search functionality of Web Server.

Table 2-7 Known Issues in Search

Problem ID

Description

6943388

Building a search collection hangs when the number of documents is large

When building a search collection for a large number of documents, the process hangs.

This situation arises because the processing of each document is handled by a new thread, each consuming heap space.

Workaround

Increase the Java heap size using the -Xmx option. For example, you might increase the heap size from 128 MB (-Xmx128m) to 512 MB (-Xmx512m).

6701532

Search engine fails to index password protected PDF document

If a PDF document is password protected and encrypted, the search engine fails to index the document's metadata. As a result, the requested search fails.

Web Server Security Issues

The following table lists the known issues in the security area of Web Server.

Table 2-8 Known Issues in Security

Problem ID

Description

6376901

Limitation supporting basic and digest-based ACLs for resources in the same directory.

If the server uses digest and basic-based ACLs in different parts of their doc tree, attempting to use both simultaneously on different files or resources in the same directory is not possible.

6431287

TLS_ECDH_RSA_* require the server cert signed with RSA keys.

Cipher suites of the form TLS_ECDH_RSA_* requires server to have an ECC keypair with a cert signed using RSA keys. Note that this precludes using these cipher suites with self-signed certificates. This requirement is inherent to these cipher suites and is not a bug. The server should detect and warn about wrong configurations related to these cipher suites but currently it does not do so.

13493902

Changing the htpasswd file when the web server is running.

The htpasswd file must be changed to ensure correct htaccess behavior for the time duration during which the htpasswd is running.

Workaround

To dynamically change the htpasswd file, do the following:

1. Run the command cp.httpasswd htpasswd.new

2. Make changes in htpasswd.new using the htpasswd command htpasswd htpasswd.new username [password]

3. Copy htaccess to a new file.
Example:

cp htaccess htaccess.new

4. Go to the htaccess.new file and change the name of the file.
Example:

AuthUserFile /protected/directory/htpasswd.new

5. Go to the obj.conf file and add the following directive:
PathCheck fn="htaccess-find" filename="htaccess.new"

6. Reconfigure the web server instance by running the command $bin/reconfig

This is a safe procedure to change the htpasswd file because the files cannot be accessed when you are editing or changing the files. New files can be accessed only after reconfiguration.

Note that after reconfiguration the existing requests continues to be processed with the original htpasswd definition. Only new requests use the new htpasswd definition.

Web Server Session Replication Issues

The following table lists the known issues in the session replication functionality of Web Server 7.0.

Table 2-9 Known Issues in Session Replication

Problem ID

Description

6324321

Descriptive error message is not displayed when an error occurs remotely.

When an exception occurs remotely, error messages are logged in the error log of the remote instance. However, the local instance currently displays a generic remote exception which does not clearly indicate which error log that the user must view.

6396820

Session replication does not failover correctly when cookies are disabled on the client.

6406176

When enabled, session replication should be the default session manager.

After enabling session replication by using the Admin Console or the CLI, or by editing the server.xml file, session replication is not really enabled. Instead, sun-web.xml needs to be manually edited.

6800993

A minor data loss occurs, as async cluster is not available.

It is observed that a small amount of http session data loss can occur in few cases. Asynchronous implementation, by using asnyc parameter, in session failover might resolve this issue.

Web Server Web Container Issues

The following table lists the known issues in the web container of Web Server.

Table 2-10 Known Issues in Web Container

Problem ID

Description

4858178

Web container writes to stderr.

6349517

Incorrect web application session statistics for MaxProcs > 1 mode.

Web Server runs in multi-process mode. The MaxProcs configuration variable in the magnus.conf is used to set the maximum number of processes. If the value for MaxProcs is set to greater than 1, Web Server uses mmap-based session manager so that the session could be shared among different JVMs. While collecting statistics from multiple processes, web application MBeans provide session for individual MBeans. There is no way to find the true number of sessions by seeing individual MBean's web application session statistics.

6394715

Web container deletes the disabled web application MBeans object.

When the web application is disabled by setting the <enabled> element to false in the server.xml file, the web container deletes the web application's MBeans and hence treats it as a closed or deleted web application. Since disabled objects are deleted, statistics are also lost.

6419070

No information is logged in error logs at the finest log level on successful JNDI resource creation.

6422200

com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse does 1 byte reads.

When reading the server.xml file, the first line containing the XML version number and the encoding is read 1 byte at a time.

6440064

Servlet container creates a thread per virtual server.

6501184

REQ_EXIT causes javax.servlet.ServletException.

16003618

Signaturetest of servlet/JSP TCK fails with JDK 7

The signaturetest included in both the Servlet TCK and JSP TCK fails with Oracle iPlanet Web Server 7.0 when JDK 7.0 is used.

Web Server Localization Issues

The following table lists the known issues in the localized version of Web Server.

Table 2-11 Known Issues in Localization

Problem ID

Description

6543814

Search filter "*" does not work correctly for multibyte strings.

5046634

There is no functionality equivalent to use-responseCT-for-headersin Web Server 7.0.

Response header encoding is enabled at theweb-app level by setting the value of the configuration parameteruse-responseCT-for-headers to any of the values; yes, true, or on in theweb-app/sun-web.xml file.

For example, set Response header encoding as follows:

<sun-web-app>
<parameter-encoding form-hint-field="j_encoding"/>
<property name="use-responseCT-for-headers" value="true" />
<session-config>
<session-manager/>
</session-config>
<jsp-config/>
</sun-web-app>

6716537

Creating socket error message is not localized.

6775946

patchrm 125437-15 fails if they are installed in Japanese locale.

Installing patchrm 125437-15 in Japanese locale fails and throws the following error:

WARNING: patchrm returned <7>

The log file output is as follows:

/var/tmp/dstreAAAW0a4wU/SUNWwbsvr7x/install/checkinstall:
XXXXXXXXXXXXXXXXXXX 4: `(' unexpected pkgadd:
ERROR: checkinstall script did not complete successfully
Installation of <SUNWwbsvr7x> partially failed.

This issue is observed on the following platforms:

- SPARC Platform - Solaris 10 with patch 119254-40 through 119254-47 and without 119254-48

- x86 - Solaris 10 with patch 119255-40 through 119255-47 and without 119255-48

Workaround:

1. Avoid installing the affected patches listed earlier. If these patches are already installed, you can remove them by using the patchrm(1M) command to return to a safe patch level.

2. Avoid installing patches with Japanese locale.
For more information, see http://sunsolve.sun.com/search/document.do?assetkey=1-26-103104-1.

3. Apply patch 119254-48 or higher on Solaris 10 SPARC platform and patch 119255-48 or higher on Solaris 10 x86 platform.

Web Server Sun Java Enterprise System Issues

The following table lists the known issues in the Sun Java Enterprise System (Java ES).

Table 2-12 Known Issues in Java ES

Problem ID

Description

6432106

Sun Java System Portal Server search throws exception after Web Server upgrade.

Portal Server search functionality throws exception when upgrading Web Server from Java ES 4 to Java ES 5.

Workaround

Note: Move the existing libdb-3.3.so and libdb_java-3.3.so library files to an appropriate location, somewhere outside Web Server's private directories. Once the Portal Server libraries are in a suitable location, that path must be specified for the <libdb-3.3.so path>:<libdb_java-3.3.so path> in the following commands.

On Solaris platform, perform the following steps:

1. Copy the libdb-3.3.so and libdb_java-3.3.so files from Web Server 6.1 lib directory to an appropriate location.
Note: For HP-UX, the files are libdb-3.3.sl and libdb_java-3.3.sl. For windows, the files are libdb-3.3.dll and libdb_java-3.3.dll.

Caution: Do not copy the library files to Web Server 7.0 private directories (For example, lib directory).

2. Create a directory (mkdir) by name /portal_libraries. Copy the library files libdb-3.3.so and libdb_java-3.3.so to /portal_libraries.

3. Use the wadm command to inform Web Server about the location of the library files.

4. Get the current native library path setting by typing the following Admin CLI command:
get-jvm-prop -user=admin --config=hostname native-library-path-prefix

Save the output.

5. Append the copied libdb-3.3.so and libdb_java-3.3.so path to the existing native library path by typing the following Admin CLI command.
set-jvm-prop --config=hostname native-library-path-prefix=<existing native library-path>:</portal-libraries-path>

where, portal-libraries-path is the location of where you copied the libdb-3.3.so and libdb_java-3.3.so files in Step 1.

If you do not get any results or output for the get-jvm-prop command, at the command prompt, set the native-library-path-prefix:

native-library-path-prefix=</portal-libraries-path>

6. Note: For Windows platform, use ';' as the separator fornative-library-path-prefix parameter as follows:
native-library-path-prefix=<existing native libarary path>;<portal-libraries-path>

For non-Windows platform, use the ':' as the separator for native-library-path-prefix parameter as follows:

native-library-path-prefix=<existing native libarary path>:<portal-libraries-path>

7. Deploy the modified configuration by typing the following command:
deploy-config [--user=admin-user] config-name

6504178

Migration logs reports a bogus "root is not a valid user" message on Java ES 5.

While migrating from Java ES 4 to Java ES 5 on UNIX platforms, the migration log file reports WARNING: "root is not a valid user". This is incorrect as the "root" user is valid on that host.

6453037

A lot of warnings/info messages displayed at Web Server startup on the standard output instead of routing these messages to the log file.

3 Product Documentation

The Oracle iPlanet Web Server 7.0 documentation is provided in the following formats:

- Manuals: You can view the Oracle iPlanet Web Server 7.0 manuals and release notes in HTML and in PDF formats.

- Online help: Click the Help button in the graphical interface of the product to view context-sensitive help.

Oracle iPlanet Web Server 7.0.9 is the last release for which the entire documentation set for 7.0 was updated. Subsequent to the 7.0.9 release, updates and corrections to Oracle iPlanet Web Server 7.0 documentation are provided in this Release Notes document; see Documentation Corrections, Enhancements, and Issues Resolved.

This chapter contains the following sections:

- Web Server Documentation Set

- Documentation Corrections, Enhancements, and Issues Resolved

- Documentation, Support, and Training

Web Server Documentation Set

The Web Server documentation set describes how to install and administer the Web Server.

For an introduction to Web Server, refer to the books in the order in which they are listed in Table 3-1.

Table 3-1 Web Server Documentation

Document Title

Contents

Oracle iPlanet Web Server Release Notes  (this document)

- Late-breaking information about the software and documentation

- Supported platforms and patch requirements for installing Web Server

Oracle iPlanet Web Server Installation and Migration Guide

Performing installation and migration tasks:

- Installing Web Server and its various components

- Migrating data from Sun ONE Web Server 6.0 or Sun Java System Web Server 6.1 to Oracle iPlanet Web Server 7.0

Oracle iPlanet Web Server Administrator's Guide

Performing the following administration tasks:

- Using the Administration and command-line interfaces

- Configuring server preferences

- Using server instances

- Monitoring and logging server activity

- Using certificates and public key cryptography to secure the server

- Configuring access control to secure the server

- Using Java Platform, Enterprise Edition (Java EE) security features

- Deploying applications

- Managing virtual servers

- Defining server workload and sizing the system to meet performance requirements

- Searching the contents and attributes of server documents, and creating a text search interface

- Configuring the server for content compression

- Configuring the server for web publishing and content authoring using WebDAV

Oracle iPlanet Web Server Troubleshooting Guide

Using programming technologies and APIs to do the following:

- Extending and modifying Web Server

- Dynamically generating content in response to client requests and modifying the content of the server

Oracle iPlanet Web Server NSAPI Developer's Guide

Creating custom Netscape Server Application Programmer's Interface (NSAPI) plug-ins

Oracle iPlanet Web Server Developer's Guide for Java Web Applications

Implementing Java Servlets and JavaServer Pages (JSP) technology in Web Server

Oracle iPlanet Web Server Administrator's Configuration File Reference

Editing configuration files

Oracle iPlanet Web Server Performance Tuning, Sizing, and Scaling Guide

Tuning Web Server to optimize performance

Oracle iPlanet Web Server Command-Line Reference

Administration commands that allow you to administer Web Server through the CLI

Documentation Corrections, Enhancements, and Issues Resolved

The following table lists the corrections and enhancements to the Oracle iPlanet Web Server 7.0.9 documentation, and documentation issues resolved.

Issue ID

Description

6932016

How to work around the Verisign EV cert chain issue with a new built-in CA root.

See Web Server Migration and Upgrade Issues.

6965828

Clustered instances must be synchronized before accepting a request after restarting.

See Additional Information About Configuring a Web Application for Session Replication.

6968560

Document how to upgrade a certificate chain.

See Updating a Certificate Chain.

6971148

Change security context for JDK libraries on SELinux.

See Issues Resolved in 7.0.9.

6977258

CR6611067 in WS7.0 release notes not correct.

See Issues Resolved in 7.0.9.

6977268

All request header names are returned as lowercase.

See Web Server Core Issues.

6989578

Incorrect reference to remove SUNWlxml package from the system in 7.0 release notes.

See Solaris 10 (SPARC and x86) Patches.

6989830

Link to "Supported Virtualization Technologies with Oracle Fusion Middleware" is not correct.

See System Virtualization Support.

6991930

GDD document has multiple typos in the "Hung or Unresponsive" chapter.

See Corrections to the Procedure for Gathering Debug Data on a Hung or Unresponsive Web Server Process.

6993379

Java ES installation and upgrade notes need a correction.

See Installation, Migration, and Upgrade Notes.

6993705

Timeout parameter should be described in the http-client-config table list.

See Information About timeout Parameter of http-client-config.

6994415

%duration% measured in milliseconds in Red Hat Linux (doc mentions microseconds).

See Clarification About Unit of Time Used for the%duration% Log Parameter.

6996370

Web Server 7.0 startup error when obj.conf has valid <If> fn="rewrite" <Else> inside.

See Web Server Core Issues.

7022621

JDK versions supported for WS7

See Supported JDKs.

12306447

Docs need to provide information on how to protect a resource.

See Information About Securing a URI Using an Authentication Database.

12777290

Doc has the incorrect -d "com.iplanet.ias.server.logging.serverlogmanager".

See Correction to JVM Option Example.

12989862

Fix request for 6932016 should add info regarding 7003615.

See problem ID 6932016 in Table 2-5.

13011275

Add minimum required memory and minimum recommended disk space to release notes.

See Supported Platforms.

13540300

Doc bug regarding default value of keep-alive threads.

See Correction to Default Number of Keep-Alive Threads.

13560430

Description of limit queue length not correct.

See Clarification About the Limit Queue Length Shown in the perfdump Report.

13889880

7.0.13 patch causes problems with F5-BigIP.

See TLS Communication Through Certain Load Balancers Breaks in 7.0.13 and Later Releases.

14512832

Search collections does not support PDF 9.0.

See Search Collections Does Not Support PDF 9.0.

12068601

Information about the htpasswd command.

See Information about the htpasswd Command.

14469503

Create .noStartOnBoot file to control autostart.

See Create .noStartOnBoot File to Control Autostart.

14664654

The information about the parameter max-procs is no longer valid.

See Invalid Information About the Parameter max-procs.

16576024

The button to copy the configuration is called Dupliacte not Copy.

See The Button to Copy the Configuration is called Duplicate not Copy.

16589719

Information about the sticky cookie parameter.

See Information on the Sticky Cookie Parameter.

16758897

Unable to create an ACL based on the incoming referrer header.

See Unable to Create an ACL Based on the Incoming Referrer Header.

17835893, 17888070, 17920072

New configuration option for get/set properties in auth.db.

See New Configuration Option to Get/Set Properties in the auth-db.

18278817

Lists the components you can use with a custom log format.

See Components for Use with Custom Log Format.

21744964

Information about the io-timeout element for HTTP Settings.

See Information about the io-timeout Element for HTTP Settings.

21440256

Information about the NetWriteTimeout Parameter.

See Information about the NetWriteTimeout Parameter.

15963420

Information about default value of ssl3-tls-cipher suite.

See Default Value of ssl3-tls-cipher Suite.

Updating a Certificate Chain

The information in the section in Installing a Certificate Chain in Oracle iPlanet Web Server 7.0.9 Administrator's Guide is applicable to updating certification chains as well. So the title of the section should be "Installing or Updating a Certificate Chain".

Corrections to the Procedure for Gathering Debug Data on a Hung or Unresponsive Web Server Process

The Sun Gathering Debug Data for Sun Java System Web Server technical note contains errors in "To Gather Debug Data on a Hung or Unresponsive Web Server Process", specifically in Step 5 of the procedure.

The following is the corrected Step 5.

5. Run the following commands and save the output.

Solaris:

ps -ef | grep server-root
vmstat 5 5
iostat [ -t ] [ interval [ count ] ]
top
uptime

HP-UX:

ps -ef |grep server-root
vmstat 5 5
iostat [ -t ] [ interval [ count ] ]
top
sar

Linux:

ps -aux | grep server-root
vmstat 5 5
top
uptime
sar

Windows:

1. Obtain the WEB process PID:

C:\windbg-root>tlist.exe

2. Obtain the process details of the WEB running process PID:

C:\windbg-root>tlist.exe web-pid

Clarification About Unit of Time Used for the%duration% Log Parameter

According to Using the Custom Log File Format of Oracle iPlanet Web Server 7.0.9 Administrator's Configuration File Reference, the %duration% log parameter indicates the time Web Server spent handling the request in microseconds.

Note the following clarification:

- On Solaris and AIX, Web Server calculates and records the time in microseconds.

- However, on Windows, HP-UX, and Linux, Web Server calculates the time in milliseconds and records it in microseconds.

Additional Information About Configuring a Web Application for Session Replication

The Configuring a Web Application for Session Replication section of Oracle iPlanet Web Server 7.0.9 Administrator's Guide describes the procedure to enable the server to replicate sessions.

The first step in the procedure is to modify the session-manager element in the sun-web.xml configuration file. When doing so, you must, in addition, set the reapIntervalSeconds property to 1 second, as shown in the following example:

<sun-web-app>
<session-config>
<session-manager persistence-type="replicated">
<manager-properties>
<property name="reapIntervalSeconds" value="1"/>
</manager-properties>
</session-manager>
</session-config>
</sun-web-app>

Setting reapIntervalSeconds to 1 second ensures that session data is not missed during session failover; that is, clustered instances are synchronized after restarting before new requests are accepted.

For more information about reapIntervalSeconds, see manager-properties Element in Oracle iPlanet Web Server 7.0.9 Developer's Guide to Java Web Applications.

Information About timeout Parameter of http-client-config

Table 7–60 http-client-config Parameters of Oracle iPlanet Web Server 7.0.9 Administrator's Configuration File Reference does not list the timeout parameter, which can be used to configure the Web Server to time out after a specified duration.

The timeout parameter can be configured by using the http-client-config ObjectType function in obj.conf as follows:

ObjectType fn="http-client-config" timeout="value"

This configuration parameter instructs the reverse proxy to close the connection to the origin server if the origin server does not respond to a request within the specified timeout period. Note that this parameter does not signify that the request has to be completed within the timeout period.

The default value of the timeout parameter is 300 seconds.

For more information about reverse proxy configuration, see http://docs.oracle.com/cd/E19146-01/821-1828/ghquv/index.html.

Introducing exclude-escape-chars Parameter in http-client-config

Oracle iPlanet Web Server escapes many characters. The exclude-escape-chars parameter can be used to avoid escaping specific characters such as, % & " < > \r \n + * '

The exclude-escape-chars parameter can be configured by using the http-client-config ObjectType function in obj.conf as follows:

ObjectType fn="http-client-config" exclude-escape-chars="+%"

PID File Disappears in Red Hat Linux

The PID file disappears in the Red Hat Linux operating system and the sever cannot be stopped. To overcome this situation, change the temp-path value in the server.xml file to a location where the server user has exclusive rights, as shown in the following example:

<temp-path>/var/tmp/https-test-73d21d24</temp-path>

Another option to resolve this situation is to exclude the temp-directory in the tmpwatch program.

Token Name

The token name that is used for password-file option in wadm CLI must be in small letters, as shown in the following example.

wadm_internal

Using SMF on Solaris 10

It is recommended that if you choose to use SMF to control the administration server, you must make sure that you have to use SMF for managing all other instances as well. This will enable all instances to be controlled independently.

Problem with set-cookie Header

Starting from the 7.0.9 release, the set-cookie header value is being appended by ;HttpOnly due to a security reason. However, if you do not wish to append ;HttpOnly to the set-cookie header, use the following process:

Set the httponly-session-cookie property of the servlet-container element in server.xml configuration file to false:

A new property named httponly-session-cookie has been added to servlet-container element of the server.xml configuration file. By default, this property is true and ;HttpOnly will be appended to set-cookie header. When this flag is set to false, ;HttpOnly is not appended. You can set this property by using the set-servlet-container-prop CLI command or the Servlet Container page of the administration console.

Information About Securing a URI Using an Authentication Database

Managing Users and Groups in the Oracle iPlanet Web Server 7.0.9 Administrator's Guide describes how to create authentication databases and how to create users and groups. However, it does not describe how to use an authentication database to secure a URI.

To secure a URI (say /docs) by using an authentication database (say authdb_docs), create an ACL for the configuration, or for a virtual server, with /docs as the URI and authdb_docs as the authentication database, as described in http://docs.oracle.com/cd/E19146-01/821-1828/gczyo/index.html.

Correction to JVM Option Example

In the section Adding a JVM Option of the Oracle iPlanet Web Server 7.0.9 Administrator's Guide, the following JVM option that is provided as an example is incorrect:

-Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager

The correct option is the following:

-Djava.util.logging.manager=com.sun.webserver.logging.ServerLogManager

Correction to Default Number of Keep-Alive Threads

The Oracle iPlanet Web Server 7.0.9 Administrator's Configuration File Reference shows the default value of the number of keep-alive threads as 1. That value is not correct.

The default value of the number of keep-alive threads is set to the number of processors in the system.

Clarification About the Limit Queue Length Shown in the perfdump Report

The Oracle iPlanet Web Server 7.0.9 Performance Tuning, Sizing, and Scaling Guide describes the Limit Queue Length parameter shown in the perfdump report, incorrectly, as "maximum size of the connection queue".

Note that Limit Queue Length is the limit on the maximum number of connections queued. This limit depends on the availability of file descriptors.

TLS Communication Through Certain Load Balancers Breaks in 7.0.13 and Later Releases

When you use certain load balancers, like F5 Networks' BIG-IP, to distribute client requests to Oracle iPlanet Web Server 7.0.13 (and later releases), TLS communication using CBC ciphers (such as TLS_RSA_WITH_AES_256_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) breaks. BIG-IP and, possibly, other load balancers are unable to forward responses from the Oracle iPlanet Web Server instances to the clients.

The NSS version included in Oracle iPlanet Web Server release 7.0.13 (and later) implements split data packets. BIG-IP and some other load balancers might not be able to handle split data packets.

Workaround

Caution:

This workaround removes the fix introduced in release 7.0.13 for the CVE-2011-3389 security vulnerability.

1. Stop the server.

2. In the startserv script, set the environment variable NSS_SSL_CBC_RANDOM_IV to 0.
The startserv script is located in the instance_dir/bin directory. On Windows, for example, add the following line in the startserv script:

set NSS_SSL_CBC_RANDOM_IV=0

3. Start the server.

Search Collections Does Not Support PDF 9.0

A search collection indexes and stores information about documents (.html,.htm,.txt and.PDF)on the server. Once the server administrator indexes all or some of a server's documents, information such as title, creation date, and author is available for searching.

Note that PDF documents of version 9.0 or later versions are not supported for search collections.

For more information, see the Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Information about the htpasswd Command

The htpasswd command is used to generate or modify a password file suitable for use with the htaccess access control mechanism.

The htpasswd usage is as follows:

htpasswd [-c] passwordfile username [password]

In this command, -c creates a new passwordfile (overwriting an old one if it exists). Without -c, the command modifies the existing file by either updating the user's password (if user already exists) or adding a new user with the given name. If the optional password argument is not specified, the command prompts interactively for the password.

Note:

htaccess is not the preferred access control mechanism in Web Server. Wherever possible, use ACLs instead.

Create .noStartOnBoot File to Control Autostart

By default, the scripts that are created, as described in the Oracle iPlanet Web Server 7.0.9 Installation and Migration Guide, will start up all web server instances.

You can control the automatic starting of a specific web server instance, by creating the file .noStartOnBoot under the root directory of that instance.

Invalid Information About the Parameter max-procs

The FastCGI section of Oracle iPlanet Web Server 7.0.9 Administrator's Guide contains information about the parameter max-procs:

This parameter is not valid. The information about the max-procs parameter should be ignored.

The Button to Copy the Configuration is called Duplicate not Copy

According to the section, Resolving Service ID Conflicts on Windows of the Oracle iPlanet Web Server 7.0.9 Installation and Migration Guide, the Copy button on the Admin Console Configurations page can be used to copy the configuration.

Note that the name of the button is Duplicate not Copy.

Information on the Sticky Cookie Parameter

The section Configuring Reverse Proxy in Web Server of the Oracle iPlanet Web Server 7.0.9 Migration Guide, contains information about the reverse proxy configuration. The following is the additional information on the sticky cookie parameter:

- When you are configuring the sticky load balancing, you must correctly identify the name of the session cookie as used by the backend server, and use the same as the value to the sticky-cookie parameter to the set-origin-server SAF. The default value of sticky-cookie is JSESSIONID. If the backend server is using a different sticky cookie name, the sticky-cookie parameter value should be set accordingly and not use the default name.

- An irregular HTTP response from a backend server can force the Route subsystem to assume the backend to have gone 'bad' and mark the it as offline. For example, a backend server sending a response with a mismatching content-length. In such a case the sticky cookie load balancing can break.

Unable to Create an ACL Based on the Incoming Referrer Header

According to the section To Create an ACL of the Oracle iPlanet Web Server 7.0.9 Developer's Guide, it is possible to create an ACL based on the 'Referer' header in the incoming request.

Note:

The header is called Referrer and not Referer.

When an ACL is configured within the Web Server to use the 'Referrer' header in the incoming request, the request fails and you get the following error message:

09/Jan/2013:08:32:55] security (18472): for host 1.2.3.4 trying to GET /index.html, acl-state reports: HTTP5187: access of/prods/web/709/https-referer_acl/docs/index.html denied because evaluation ofACL uri=/index.html directive 2 failed

Workaround:

The functionality to use the 'Referrer' header in an incoming request in the processing of an ACL is not built into the core functionality of the Web Server. The functionality is provided in one of the sample plugins that ship with the product:

For example, for Oracle iPlanet Web Server 7.0: /<server_root>/samples/nsacl.

With Oracle iPlanet Web Server 7.0, the samples are not installed by default. They have to be manually selected during the installation of the product. Do the following to install the NSAPI sample plugin:

1. Build the NSAPI sample plugin nsacl. The environment must be setup with a compiler in the following path:

a. cd /<server_root>/samples/nsacl

b. gmake

2. To install the sample plugin in the Web Server, do the following:

a. Edit the magnus.conf file to include:
Init fn="load-modules" shlib="/prods/web/709/samples/nsacl/example.so"

funcs="las_ref_init"

Init fn="acl-register-module" module="lasref" func="las_ref_init".

b. Deploy the manual changes.

c. Restart the Web Server.

3. Create the ACL entry.

a. To edit either the default.acl file or the acl file for the relevant virtual server, do the following:

acl "uri=/index.html";
authenticate (user,group)
{database = "keyfile";
method = "basic"; };
deny (all)
user = "anyone";
allow (all)
referrer = "test";

b. Deploy the manual changes.

c. Restart the Web Server

Note:

On Oracle iPlanet Web Server 7.0.16 and earlier versions, the lasref.c file needs to be edited with the following change:

Change line 75 from

rq->request_is_cacheable &= ~NSAPICacheAccelSafe;

To

rq->request_is_cacheable = 0;

This issue has been addressed in Oracle iPlanet Web Server 7.0.17.

New Configuration Option to Get/Set Properties in the auth-db

A new configuration option, followreferrals, is added for the auth-db. This option applies for the LDAP auth-dbs and is set to true by default.

You can use the CLI get-ldap-authdb-prop and set-ldap-authdb-prop commands, or the Admin GUI pages, to get/set this configuration as needed. This option also applies for the LDAP auth-db used in the admin server.

Components for Use with Custom Log Format

The section Configuration File Reference in http://docs.oracle.com/cd/E19146-01/821-1827/index.html of the Oracle iPlanet Web Server 7.0.9 Migration Guide, contains information about the log format used by Web Server to customize the format of log files. The following is additional information on components supported for use with a custom log format.

- DNS Time: %Req->vars.xfer-time-dns%

- Connect Wait Time: %Req->vars.xfer-time-cwait%

- Full Wait Time: %Req->vars.xfer-time-fwait%

- Initial Wait Time: %Req->vars.xfer-time-iwait%

- Total Wait Time(sec): %Req->vars.xfer-time-total%

- Total Wait Time(msec): %Req->vars.xfer-time%

Information about the io-timeout Element for HTTP Settings

Table 3-22 in Oracle iPlanet Web Server 7.0.9 Administrator's Configuration File Reference shows incorrect information about the io-timeout element.

The correct description for io-timeout is given in the table below:

Element

Occurrences

Description

io-timeout

0 or 1

The maximum time (in seconds) that the server waits for an individual packet. The value can be from 0.001 to 3600.

Information about the NetWriteTimeout Parameter

Oracle iPlanet Web Server 7.0 supports NetWriteTimeout parameter in the obj.conf file to configure write timeout. The value of this parameter is specified in seconds.

For example, to configure 60 minutes timeout, specify the value as follows:

NetWriteTimeout 3600

Default Value of ssl3-tls-cipher Suite

The ssl3-tls-cipher elements configures SSL3 and TLS cipher suites. The corresponding value of the ssl3-tls-cipher elements is given in the table below:

Element

Value

SSL_RSA_WITH_RC4_128_MD5

False

SSL_RSA_WITH_RC4_128_SHA

True

SSL_RSA_WITH_3DES_EDE_CBC_SHA

True

SSL_RSA_WITH_DES_CBC_SHA

False

SSL_RSA_EXPORT_WITH_RC4_40_MD5

False

SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5

False

SSL_RSA_WITH_NULL_MD5

False

SSL_RSA_WITH_NULL_SHA

False

SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA

False

SSL_RSA_FIPS_WITH_DES_CBC_SHA

False

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

True

TLS_ECDHE_RSA_WITH_NULL_SHA

False

TLS_ECDHE_RSA_WITH_RC4_128_SHA

True

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

True

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

True

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

True

TLS_ECDH_RSA_WITH_RC4_128_SHA

True

TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA

True

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

True

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

True

TLS_ECDH_ECDSA_WITH_RC4_128_SHA

True

TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

True

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

True

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

True

TLS_ECDHE_ECDSA_WITH_NULL_SHA

False

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

True

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

True

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

True

TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA

False

TLS_RSA_EXPORT1024_WITH_RC4_56_SHA

False

TLS_RSA_WITH_AES_128_CBC_SHA

True

TLS_RSA_WITH_AES_256_CBC_SHA

True

TLS_RSA_WITH_SEED_CBC_SHA

True

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

True

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

True

TLS_RSA_WITH_AES_128_CBC_SHA256

True

TLS_RSA_WITH_AES_128_GCM_SHA256

True

TLS_RSA_WITH_AES_256_CBC_SHA256

True

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

True

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

True

Tab to Change Pre-compressed Settings is Content Handling tab not Content Management tab

According to the section, Configuring the Server to Serve Pre-Compressed Content of the Oracle iPlanet Web Server 7.0.9 Administrator's Guide , the Content Management tab on the Virtual Server page can be used to change the pre-compressed content settings.

Note that the name of the tab is Content Handling and not Content Management.

Documentation, Support, and Training

The Oracle web site provides information about the following additional resources:

- Documentation: http://www.oracle.com/technetwork/documentation/index.html

- Support: http://support.oracle.com/

- Training: http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=315

A Features and Enhancements in Previous Web Server 7.0 Releases

The following sections list the features and enhancements in previous releases:

- Features and Enhancements in 7.0.26

- Features and Enhancements in 7.0.25

- Features and Enhancements in 7.0.24

- Features and Enhancements in 7.0.23

- Features and Enhancements in 7.0.22

- Features and Enhancements in 7.0.21

- Features and Enhancements in 7.0.20

- Features and Enhancements in 7.0.19

- Features and Enhancements in 7.0.18

- Features and Enhancements in 7.0.17

- Features and Enhancements in 7.0.16

- Features and Enhancements in 7.0.15

- Features and Enhancements in 7.0.14

- Features and Enhancements in 7.0.13

- Features and Enhancements in 7.0.12

- Features and Enhancements in 7.0.11

- Features and Enhancements in 7.0.10

- Features and Enhancements in 7.0.9

- Features and Enhancements in 7.0 Update 8

- Features and Enhancements in 7.0 Update 7

- Features and Enhancements in 7.0 Update 6

- Features and Enhancements in 7.0 Update 5

- Features and Enhancements in 7.0 Update 4

- Features and Enhancements in 7.0 Update 3

- Features and Enhancements in 7.0 Update 2

- Features and Enhancements in 7.0 Update 1

- Features and Enhancements in 7.0

Features and Enhancements in 7.0.26

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.26.

Features and Enhancements in 7.0.25

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.25.

Features and Enhancements in 7.0.24

This release of Oracle iPlanet Web Server 7.0.24 provides the following enhancement:

Avoiding Repetitive Error Messages Thrown Up by set-origin-server

If you want to avoid repetitive error messages thrown up by the set-origin-server while accessing the server, you can use the failover-threshold parameter under the reverse-proxy server element:

<reverse-proxy> <failover-threshold>5</failover-threshold> </reverse-proxy>

where default value = 0, and range can be from 1 - 256.

For information about features and enhancements in previous Oracle iPlanet Web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Features and Enhancements in 7.0.23

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.23.

Features and Enhancements in 7.0.22

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.22.

Features and Enhancements in 7.0.21

This release of Oracle iPlanet Web Server 7.0.21 provides the following new feature and enhancement:

- Support for Network Security Services 3.17.2

- Support for TLS Protocols

- Default welcome-file-list

Support for Network Security Services 3.17.2

Oracle iPlanet Web Server 7.0.21 supports Network Security Services (NSS) 3.17.2.

Support for TLS Protocols

Oracle iPlanet Web Server 7.0.21 provides support for additional Transport Layer Security (TLS) protocols. In addition to TLS 1.0, TLS 1.1 and TLS 1.2 are now supported. SSL3 has been disabled by default.

The list of supported ciphers has changed. The supported ciphers are:

- SSL_RSA_WITH_3DES_EDE_CBC_SHA

- SSL_RSA_WITH_RC4_128_SHA

- TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

- TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

- TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

- TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

- TLS_ECDHE_RSA_WITH_RC4_128_SHA

- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

- TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

- TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

- TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

- TLS_ECDH_ECDSA_WITH_RC4_128_SHA

- TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA

- TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

- TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

- TLS_ECDH_RSA_WITH_RC4_128_SHA

- TLS_RSA_WITH_AES_128_CBC_SHA

- TLS_RSA_WITH_AES_128_CBC_SHA256

- TLS_RSA_WITH_AES_128_GCM_SHA256

- TLS_RSA_WITH_AES_256_CBC_SHA

- TLS_RSA_WITH_AES_256_CBC_SHA256

- TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

- TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

- TLS_RSA_WITH_SEED_CBC_SHA

For information about features and enhancements in previous Oracle iPlanet web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Default welcome-file-list

A default welcome-file-list has been added in default-web.xml: entries of this list are used when a web application does not define a welcome-file-list. If a web application defines a welcome file list, then that list gets higher priority as welcome files than the default list.

Features and Enhancements in 7.0.20

There are no new features and enhancements in Oracle iPlanet Web Server 7.0.20.

Features and Enhancements in 7.0.19

A new security component, NSS 3.14.3.0, is integrated with Oracle iPlanet Web Server 7.0.19.

Features and Enhancements in 7.0.18

This release of Oracle iPlanet Web Server 7.0.18 provides the following new feature and enhancement:

- Oracle iPlanet Web Server 7.0.18 bundles JDK 7 instead of JDK 6. Up to 7.0.17, Web Server bundled JDK6 in Solaris, Linux, and Windows.

For information about features and enhancements in previous Oracle iPlanet web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Features and Enhancements in 7.0.17

This release of Oracle iPlanet Web Server 7.0.17 provides the following new features and enhancements:

- In Web Server 7.0.17 and higher, JDK 7 support is provided for the following platforms:

- Solaris

- Linux

- Windows

For information about features and enhancements in previous Oracle iPlanet Web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Features and Enhancements in 7.0.16

This release of Oracle iPlanet Web Server 7.0.16 provides the following new features and enhancements:

- A new server.xml element, blocking-accept, has been introduced under the http-listener element. This element enables optional blocking of the listen socket mode while retaining client end-points as non-blocking.
This Boolean element takes the value true or false. By default, the element is set to false.

Example:

<blocking-accept>true</blocking-accept>

- A new parameter append-newline-at-end has been added to the insert-filter function in the obj.conf file. The filters sed-response and sed-request adds an extra new line character irrespective of the sed rule. You can use the append-newline-at-end parameter to enable or disable the addition of this extra new line character. By default append-line-at-end=true.
Example:

Output fn="insert-filter" filter="sed-response" sed="s/abc/xyz"
append-line-at-end="false"

For information about new features and enhancements in previous Oracle iPlanet Web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Features and Enhancements in 7.0.15

The following are the new features and enhancements in Oracle iPlanet Web Server 7.0.15:

- Oracle iPlanet Web Server 7.0.15 is certified on the following additional platforms:

- Oracle Enterprise Linux 6

- Oracle Solaris 11
For complete information about the supported operating environments and hardware for Oracle iPlanet Web Server 7.0, see the Oracle iPlanet Web Server 7.0.9+ Certification Matrix, which is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

- The max-parameter-count element, which was added in the 7.0.14 release, can now be configured by using the administration console.
For more information about max-parameter-count, see Features and Enhancements in 7.0.14.

For information about new features and enhancements in previous Oracle iPlanet Web Server 7.0 releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Features and Enhancements in 7.0.14

This release addresses the Java hash-table collision security vulnerability, CVE-2011-5035.

A new element, max-parameter-count, has been added to the servlet-container element of the server.xml configuration file. You can use the max-parameter-count element to specify a limit for the number of parameters allowed for a JSP or a servlet request. This helps in protecting the server against a denial of service that can be caused by requests containing specially crafted parameters sent by remote attackers. If the number of parameters in a request exceeds the configured max-parameter-count, the additional parameters are ignored.

You can specify any positive integer as the value of max-parameter-count. The default value is 10000.

You can set max-parameter-count by either editing the server.xml configuration file or by using the set-servlet-container-prop CLI command. For more information about set-servlet-container-prop, see the Oracle iPlanet Web Server 7.0.9 CLI Reference Manual.

Features and Enhancements in 7.0.13

The following are the new features and enhancements in Oracle iPlanet Web Server 7.0.13.

- A new property, max-requests-per-connection is introduced in this release. You can use this property to resolve the CVE-2011-3389 security vulnerability, by lowering the number of requests on a keep-alive connection.
You can set max-requests-per-connection as shown in the following example:

<http-listener>
<name>ls1</name>
<port>17005</port>
<default-virtual-server-name>https-test</default-virtual-server-name>
<max-requests-per-connection>09</max-requests-per-connection>
<server-name>pegasus.example.com</server-name>
</http-listener>

- Oracle iPlanet Web Server 7.0.13 supports Network Security Services (NSS) 3.13.1.0.

Features and Enhancements in 7.0.12

The following sections describe the important new features and enhancements in Oracle iPlanet Web Server 7.0.12.

- Security Component Upgradation

- Introducing exclude-escape-chars parameter in http-client-config SAF

- Introducing httponly-session-cookie property in servlet-container element

For information about new features and enhancements in previous releases, see Features and Enhancements in Previous Web Server 7.0 Releases.

Security Component Upgradation

A new security component NSS 3.12.10 is integrated with Oracle iPlanet Web Server 7.0.12.

Introducing exclude-escape-chars parameter in http-client-config SAF

Oracle iPlanet Web Server introduces a new parameter called exclude-escape-chars which provides the list of characters which are not escaped. For more information, see Introducing exclude-escape-chars Parameter in http-client-config.

Introducing httponly-session-cookie property in servlet-container element

Oracle iPlanet Web Server introduces a new property called httponly-session-cookie in the servlet-container. For more information, see Problem with set-cookie Header.

Features and Enhancements in 7.0.11

The following sections describe the important new features and enhancements in Oracle iPlanet Web Server 7.0.11.

- Updated JDK Version

Updated JDK Version

In Oracle iPlanet Web Server 7.0.11, the JDK 6 version that is packaged with the product has been changed to JDK 6 update 24. This change has been made to address security vulnerability CVE-2010-4476 (Java Runtime Environment hangs when converting "2.2250738585072012e-308" to a binary floating-point number).

For more information about security vulnerability CVE-2010-4476, see the Oracle Security Alert at:

http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.htm

Features and Enhancements in 7.0.10

The following sections describe the important new features and enhancements in Oracle iPlanet Web Server 7.0.10.

- Maximum Length of Group Line in htaccess Authentication Group File Increased

- JDK Updated to 1.6.0_22

- NSS Updated to 3.12.8

Maximum Length of Group Line in htaccess Authentication Group File Increased

In Oracle iPlanet Web Server 7.0.10, the maximum permissible length of a group line in the htaccess authentication group file has been increased from the earlier limit of 1K (1024) characters to 8K (8192) characters.

JDK Updated to 1.6.0_22

The JDK 6 that is delivered as part of Web Server 7.0.10 on Solaris, Linux, and Windows is updated to version 1.6.0_22.

For information about the changes in JDK 1.6.0_22, see the JDK 6 release notes at:

http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121.html

NSS Updated to 3.12.8

Web Server 7.0.10 is integrated with NSS version 3.12.8.

For information about changes in this version, see the NSS 3.12.8 release notes.

Features and Enhancements in 7.0.9

Oracle iPlanet Web Server 7.0.9 is an update release to Sun Java System Web Server 7.0. In addition to the features and enhancements in Web Server 7.0 and Updates 1 through 8, Web Server 7.0.9 brings the additional features and enhancements to the product described in the following sections.

- Resolution of SSL/TLS Vulnerability CVE-2009-3555

- Support for JDT Java Compiler

- Support for Oracle JRockit JDK

- Ability to Change Session ID on Authentication

- For Large Applications, --directory Option of add-webapp Deprecated

Resolution of SSL/TLS Vulnerability CVE-2009-3555

Web Server 7.0 Update 7 included NSS 3.12.5, which provided relief, but not resolution, for the SSL/TLS renegotiation vulnerability http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3555. Additionally, Web Server 7.0 Update 7 disabled all use of SSL/TLS renegotiation in order to protect Web Server from attack. If either the client or Web Server attempted to trigger renegotiation on an existing SSL/TLS session, the connection would fail.

Web Server 7.0.9 includes NSS 3.12.6, which provides safe SSL/TLS renegotiation and so provides resolution of CVE-2009-3555. As a result, Web Server 7.0.9 re-enables use of SSL/TLS renegotiation.

Support for JDT Java Compiler

You can now configure Web Server to use the Eclipse JDT Java compiler instead of Ant and another Java compiler. For more information, see Using the Eclipse JDT Java Compiler in Oracle iPlanet Web Server 7.0.9 Developer's Guide to Java Web Applications.

Support for Oracle JRockit JDK

Web Server now supports the Oracle JRockit JDK on the 32-bit platforms it supports. For the 7.0.9 release, the minimum required JRockit JDK version is R27.6.5, which is certified to be compatible with Java SE 6 Update 14 (1.6.0_14).

Ability to Change Session ID on Authentication

Web Server 7.0.9 adds the changeSessionIdOnAuthentication property to the sun-web-app element of the sun-web.xml file. This property enables web applications to change session IDs upon authentication in order to avoid session fixation attacks. For more information, see sun-web-app Element in Oracle iPlanet Web Server 7.0.9 Developer's Guide to Java Web Applications.

For Large Applications, --directory Option of add-webapp Deprecated

For large applications, you should use the --file-on-server option of the add-webapp command to provide a path to an expanded war file outside the Web Server root directory. Note, however, that the administration server does not manage web applications deployed outside the Web Server root directory.

For more information, see Deploying a Web Application Directory in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Features and Enhancements in 7.0 Update 8

Web Server 7.0 Update 8 contains the following fixes for security vulnerabilities.

Bug 6916389 describes the buffer overflow vulnerabilities in the WebDAV extensions to Sun Java System Web Server. These issues may allow remote clients to trigger a Web Server crash, thus resulting in a Denial of Service (DoS) condition. These issues may also allow remote unauthorized users to gain elevated privileges, enabling them to access and modify sensitive files.

Bug 6916390 describes the format string vulnerabilities in the WebDAV extensions to Sun Java System Web Server. These issues may allow remote clients to trigger a Web Server crash, thus resulting in a Denial of Service (DoS) condition. These issues may also allow remote unauthorized users to gain elevated privileges, enabling them to access and modify sensitive files.

Bug 6916391 describes the buffer overflow issues in the Digest Authentication methods in Sun Java System Web Server, which may allow remote unprivileged users to crash Web Server, thus leading to a Denial of Service (DoS) condition. These issues may also lead to execution of arbitrary code with elevated privileges.

Bug 6916392 describes the heap overflow issues in the HTTP TRACE functionality in Sun Java System Web Server, which may allow remote unprivileged users to crash Web Server, thus leading to a Denial of Service (DoS) condition. These issues may also be exploited to gain unauthorized access to sensitive information.

Features and Enhancements in 7.0 Update 7

Web Server 7.0 Update 7 introduces Kerberos/SPNEGO support. This release introduces a new ACL authentication method called gssapi. The gssapi authentication method works with a Kerberos user repository. This release also introduces a suitable auth-db of type kerberos for use with the gssapi authentication method.

For more information about configuring a Kerberos authentication, see Working With the Authentication Database in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Note:

Kerberos enabled Web Server on Solaris is tested with clients such as Internet Explorer on Windows 2003 and Firefox on RHEL 5.3.

Web Server 7.0 Update 7 supports Windows 2008 SP2 32 bit (x86) Enterprise Edition.

Web Server 7.0 Update 7 is bundled with JDK 6. There is an improvement in the performance in the administration server.

Web Server 7.0 Update 7 is integrated with the Xerces C++ patch that fixes the vulnerability. For more information, see http://www.cert.fi/en/reports/2009/vulnerability2009085.html.

Note:

Web Server 7.0 Update 7 resolves a regression in LDAP authentication (6888100) accidentally introduced in Update 6. All customers using LDAP authentication are encouraged to upgrade to Update 7.

Deprecated Platforms

Platforms, Solaris 8 and Windows 2000 are deprecated. They will not be supported from Web Server 7.0 Update 9 onward.

SSL/TLS Vulnerability Fix (CVE-2009-3555)

Web Server 7.0 Update 7 is upgraded to include NSS 3.12.5, which provides relief for the SSL/TLS renegotiation vulnerability: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3555

This vulnerability is a flaw in the current SSL/TLS renegotiation protocol definition. It is not a bug in the Web Server implementation. Due to this reason, there is no implementation-level fix for this vulnerability. The only workaround is to disable renegotiation entirely in order to protect Web Server from attack.

Therefore, Web Server 7.0 Update 7 disables all use of SSL/TLS renegotiation. If either the client or Web Server attempts to trigger renegotiation on an existing SSL/TLS session, the connection will fail.

Typically, renegotiation was used to obtain a client certificate sometime after the SSL/TLS connection was first established. Web applications that attempt to obtain a client certificate in this fashion will now fail.

Obtaining a client certificate during the initial connection handshake will continue to work correctly. This mode can be configured by setting the client-auth element to 'required' in server.xml:

<http-listener>
<ssl>
<client-auth>required</client-auth>
</ssl>
</http-listener>

A future update of Web Server 7.0 will implement a safe renegotiation protocol as soon as the IETF finalizes the design of the new protocol enhancement. It is possible to re-enable the vulnerable SSL/TLS renegotiation capability by setting the environment variable: NSS_SSL_ENABLE_RENEGOTIATION=1. This mode is known to be vulnerable to attack as described in CVE-2009-3555.

Features and Enhancements in 7.0 Update 6

Web Server 7.0 Update 6 is an update release to Web Server 7.0. In addition to the features and enhancements in Web Server 7.0, and the Web Server 7.0 Update 1, Update 2, Update 3, Update 4, and Update 5 releases, Web Server 7.0 Update 6 brings the following value-added features and enhancements to the product.

- Sun Java System Web Server 7.0 Update 6 is integrated with the new NSS (Network Security Services) 3.12.3. This version of the NSS fixes the security alert for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404.
For more information about the additional environmental variables added in this version, see:

http://www.mozilla.org/projects/security/pki/nss/nss-3.12.3/nss-3.12.3-release-notes.html

- Sun Java System Web Server 7.0 Update 6 contains both the NSS 3.12.3 and the NSPR 4.7.4 version.

- Sun Java System Web Server 7.0 Update 6 has support for the Solaris 8 Branded Zones.

Features and Enhancements in 7.0 Update 5

Web Server 7.0 Update 5 is an update release to Web Server 7.0. In addition to the features and enhancements in Web Server 7.0, and the Web Server 7.0 Update 1, Update 2, Update 3, and Update 4 releases, Web Server 7.0 Update 5 brings the following feature to the product.

Binary Logging

Binary logging is a functionality introduced in Sun Java System Web Server 7.0 Update 5. This feature allows server information to be stored in a single log file that contains binary, unformatted log data of all the web sites hosted on a server. It thus minimizes the usage of system resources used for logging, may improve performance and scalability, and at the same time records detailed log information.

For more information, see Oracle iPlanet Web Server Performance Tuning, Sizing, and Scaling Guide.

Features and Enhancements in 7.0 Update 4

Web Server 7.0 Update 4 is an update release to Web Server 7.0. In addition to the features and enhancements in Web Server 7.0, and the Web Server 7.0 Update 1, Update 2, and Update 3 releases, Web Server 7.0 Update 4 brings the following value-added features and enhancements to the product.

REQUEST_URI and SCRIPT_FILENAME Support

Web Server 7.0 Update 4 includes the addition of environment variables REQUEST_URI and SCRIPT_FILENAME in CGI and FastCGI subsystems. These variables are set by default for both CGI and FastCGI on Apache and are used by many PHP applications including WordPress.

For more information about issues related to these variables, see problem ID 6785490 in Web Server Core Issues.

default-sun-web.xml Support

default-sun-web.xml support has been provided in the Web Server 7.0 Update 4 release. For the administration server's LDAP authorization, default-sun-web.xml support is necessary and this will enable the group IDs to be configured.

OpenSolaris 2008.11 Support

OpenSolaris 2008.11 support has been provided in the Web Server 7.0 Update 4 release. OpenSolaris 2008.11 is the latest release of the OpenSolaris operating system.

Package Requirements

To install Sun Java System Web Server 7.0 Update 4 or later on OpenSolaris, you must install the following additional IPS packages from the repository:

- SUNWpkgcmds

- SUNWmfrun

- java-dev

Features and Enhancements in 7.0 Update 3

Web Server Update 3 is an update release to Web Server 7.0. In addition to the features and enhancements in Web Server 7.0, and the Web Server 7.0 Update 1 and Update 2 releases, Web Server 7.0 Update 3 brings the following value-added features and enhancements to the product.

AIX Platform Support

AIX 5.3 and 6.1 platform support has been provided in the Web Server 7.0 Update 3 release.

Autodeploying Web Applications

Web Server 7.0 Update 3 introduces the autodeployment functionality that enables you to deploy one or more web applications, just by copying them to a designated directory. The server automatically deploys web applications that are in the form of web archives (.war files) or in a directory in which a web archive has been expanded.

For more information about auto-deployment feature in Web Server, see Autodeploying Web Applications in Oracle iPlanet Web Server 7.0.9 Developer's Guide to Java Web Applications.

Features and Enhancements in 7.0 Update 2

Web Server 7.0 Update 2 is an update release to Web Server 7.0. In addition to the features and enhancements in Web Server 7.0, and the Web Server 7.0 Update 1 release, Web Server 7.0 Update 2 brings the value-added features and enhancements described in the following sections:

- PKCS11 Bypass Support

- Service Management Facility (SMF) Support

- Asynchronous Accelerator Cache Support

- Enhanced Web Container

- Improved Administration Experience

- Red Hat 4.0 64-bit Support

- NetBeans 6.5 IDE Support

PKCS11 Bypass Support

Web Server 7.0 Update 2 introduces an option to instruct NSS to bypass the PKCS#11 layer during parts of the SSL/TLS processing. Bypassing the PKCS#11 layer improves performance. By default, the PKCS#11 layer is bypassed. At the time of server startup, the server queries each token holding a server key to verify that each token can support PKCS#11 bypass. If any of the tokens cannot support bypass, bypass is disabled. Therefore, no user action is required to take advantage of the performance benefits of the PKCS#11 bypass. The server automatically takes advantage of the bypass and automatically disables the bypass if the token cannot be used given the current configuration. For more information, see .

Web Server provides command-line interface (CLI) and Admin Console support to enable or disable bypass. For more information about how to enable or disable PKCS11 bypass using the Admin Console or the CLI, see To Enable and Bypass PKCS#11 Tokens in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Service Management Facility (SMF) Support

Web Server 7.0 Update 2 integrates with the Solaris 10 Service Management Facility (SMF) for the Java platform. SMF is a new feature of the Solaris Operating System that creates a supported, unified model for services and service management on each Solaris system. It is a mechanism to define, deliver, and manage long-running application services for Solaris. A service is defined by a service manifest, which is an XML file that describes a service, and any instances associated with that service.

For more information about SMF support in Web Server, see Integrating Service Management Facility for the Java Platform with Web Server in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Asynchronous Accelerator Cache Support

Web Server 7.0 Update 2 supports processing of requests that can be served from the accelerator cache asynchronously, thereby improving the performance of the server.

Value added features are:

- Dynamic reconfiguration

- Flag AsyncAccelerator in magnus.conf to turn off asynchronous cache

- Requests serviced through asynchronous accelerator to stats

- Batch access log writes when requests are serviced by asynchronous accelerator

Enhanced Web Container

Web Server 7.0 Update 2 introduces the ability to display the exception stack trace or JSP compiler errors in a browser. In the earlier releases of Web Server, when an exception occured in the servlet container at request time, a "Server Error" was displayed at the client without exposing internal application details. The exception is always logged in the error log with or without this feature enabled.

Note:

Displaying exception stack trace or JSP compiler errors in a browser is not enabled by default. You can enable this feature through the set-servlet-container-prop command or through the Display Exception check box in the Servlet Container tab of the Admin Console. This is useful for development purposes. It is strongly recommended that this feature not be enabled in production systems.

Improved Administration Experience

Administration experience is improved Web Server 7.0 Update 2 by introducing the following key features:

Rollback Deployed Configuration Support

Web Server 7.0 Update 2 supports rolling back of deployed configuration. Web Server administration now enables administrators to take backups automatically on every deployed configuration. Using the Admin CLI, you can list backups and restore a specified backup.

Support to Set Administration Server Password

Web Server 7.0 Update 2 enables you to reset the administration server's user password. However, this functionality works only locally on the administration server's node.

Support for Managing CA Certificates

The Admin Console enables you to install, delete, and filter CA certificates, Cert chain, and the CRLs. Additionally, the server also warns the users about the certificates that are about to expire.

For information about the administration features, see .

Red Hat 4.0 64-bit Support

Support for a 64-bit standalone version of Web Server is provided in Web Server 7.0 Update 2.

Web Server 7.0 64-bit Linux is a separate standalone-only distribution and does not coexist with Web Server 7.0 32-bit Linux. Web Server 7.0 64-bit Linux requires 64-bit Java Development Kit 5.0 Update 12 or later. Both Administration Server and server instance are only 64-bit server. Migration from previous releases is not supported on Web Server 7.0 64-bit for Linux.

NetBeans 6.5 IDE Support

Web Server 7.0 Update 2 provides support to connect to the NetBeans 6.5 IDE and allows users to develop, debug, and deploy applications to Web Server. The NetBeans plug-in can be downloaded from the update center using the NetBeans 6.5 IDE.

Note:

In addition to the support for NetBeans 6.5 IDE, Web Server provides support for NetBeans 6.1, 6.0, and 5.5.1 versions of the IDE.

Features and Enhancements in 7.0 Update 1

Web Server 7.0 Update 1 is an update release to Web Server 7.0.

In addition to the features and enhancements in Web Server 7.0, Web Server 7.0 Update 1 supports the Java Platform, Enterprise Edition (Java EE) 5.0 and Web 2.0 technologies.

The following sections describe the new features and enhancements in 7.0 Update 1.

- Java Servlet 2.5 and JavaServer Pages (JSP) 2.1 Support

- JavaServer Pages Standard Tag Library 1.2 and JavaServer Faces 1.2 Support

- Accelerator Cache Technology

- Administration Support for Configuring FastCGI

- NetBeans Support

- Admin Console Support for Configuring Regular Expressions

- GUI and CLI Support for Pattern Matching

Java Servlet 2.5 and JavaServer Pages (JSP) 2.1 Support

Web Server includes a Java Platform, Enterprise Edition (Java EE) 5 compliant implementation of the Java Servlet 2.5 and JavaServer Pages ( JSP) 2.1 technology specifications. Web Server provides the flexibility and reliability needed to design and deploy web applications that comply with Java technology standards.

Java Servlet technology provides web developers with a simple, consistent mechanism for extending the functionality of a Web Server and for accessing existing business systems. JSP technology provides a simplified and fast way to create dynamic web content. JSP technology enables rapid development of web-based applications that are server- and platform-independent.

For information about these technologies, see:

http://docs.oracle.com/javaee/5/tutorial/doc/

JavaServer Pages Standard Tag Library 1.2 and JavaServer Faces 1.2 Support

The JavaServer Pages Standard Tag Library 1.2 provides custom tags that encapsulate core functionality common to many web applications. JavaServer Pages Standard Tag Library has support for common, structural tasks such as iteration and conditionals. It provides tags for manipulating XML documents, internationalization tags, and SQL tags. It also provides a framework for integrating existing custom tags with JavaServer Pages Standard Tag Library tags.

Web Server supports JavaServer Faces technology. JavaServer Faces is a user interface framework for building web applications.

For information about these technologies, see:

http://docs.oracle.com/javaee/1.4/tutorial/doc/index.html

Accelerator Cache Technology

Web Server includes new accelerator cache technology that speeds the delivery of small files. The accelerator cache is automatically enabled and requires no configuration. For more information, see File Cache Statistics Information in Oracle iPlanet Web Server 7.0.9 Performance Tuning, Sizing, and Scaling Guide.

Administration Support for Configuring FastCGI

You can configure a single FastCGI application using the Admin Console as well as the command-line interface (CLI).You can also configure the FastCGI with Web Server using the configuration files.

To configure multiple FastCGI applications, see Configuring Multiple FastCGI Applications in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

NetBeans Support

Web Server provides plug-ins to integrate with the NetBeans Integrated Development Environment (IDE) for deploying and debugging web applications. NetBeans is a complete development environment to create Java Platform Enterprise Edition (Java EE)-based web applications with the standard components.

In addition to the deployment of web applications, the plug-in also provides support for the following activities:

- Manage instances, such as start or stop server instances

- Enable or disable applications

- Create server-wide resources, such as JDBC resources and JDBC connection pools

For information about NetBeans, see:

http://www.netbeans.org/kb/index.html

Admin Console Support for Configuring Regular Expressions

Web Server provides support for writing regular expressions within the obj.conf file through the Admin Console. However, writing regular expressions through the Admin Console is limited to the form of <If>..</If> conditions for URL redirects.

For more information about using the Admin Console for writing regular expressions, see Oracle iPlanet Web Server Administrator's Guide.

GUI and CLI Support for Pattern Matching

Web Server provides support for configuring the URIs, URI prefixes, URI wildcard patterns properties through the Admin Console and the CLI.

For more information about using the Admin Console for configuring URI pattern properties, see Oracle iPlanet Web Server Administrator's Guide.

For more information about using the CLI commands for configuring URI pattern properties, see Oracle iPlanet Web Server Command-Line Reference.

Features and Enhancements in 7.0

Web Server can be configured to run as a 64-bit application on the Solaris, SPARC, and AMD64 platforms.

Web Server provides comprehensive command-line interface (CLI) support, consolidated configuration, enhanced security with elliptic curve cryptography support, and clustering support. It also comes with a robust built-in migration tool that helps migrate applications and configurations from Web Server 6.0 and Web Server 6.1 to Web Server 7.0.

The following sections describe the new features in Web Server 7.0:

- JMX-Based Management Infrastructure

- Redesigned Administration Server Interface

- Command-Line Interface Support

- Sun N1 Service Provisioning System Support

- Consolidated Configuration Files

- JNDI Support

- Java Database Connectivity and Connection Pooling Support

- Enhanced Hardware Accelerator Encryption Support

- Integrated Java Web Services Developer Pack 2.0 Technologies

- Lightweight Session Replication Support

- URL Redirection and Rewriting with Regular Expressions

- Extensive Real-Time Monitoring Support

- Integrated Reverse Proxy

- Enhanced Security

- Elliptic Curve Cryptography Support

- Oracle Java Studio Enterprise Support

- Localization Support

JMX-Based Management Infrastructure

Web Server management infrastructure is based on the modern distributed Java Management Extensions (JMX) technology. JMX technology provides tools for building distributed, web-based, modular, and dynamic solutions for managing and monitoring devices, applications, and service-driven networks. JMX helps to manage and monitor instances, configurations, and web applications across clustered Web Server deployments.

Redesigned Administration Server Interface

The Administration Server is a specially configured Web Server instance on which the administration applications are deployed. An administration instance runs on each node in the server farm. Of these nodes, one node is configured to be the Administration Server and the rest are configured to be administration nodes.

The web-based Administration Server is redesigned to make common tasks easier to access and complex tasks easier to accomplish.

The Administration Server includes the following new features:

- Web-based wizards for performing most common tasks

- Comprehensive command-line interface (CLI) support for server configuration and server administration tasks

- Centralized configuration store

- Support for deploying Web Server configuration information on multiple machines. This feature extends to support Web Server in server farms and clusters.

- Built-in management and monitoring of server clusters

For more information about using the administration interface to perform administrative tasks, see .

Command-Line Interface Support

The command-line interface (CLI) enables you to easily configure and administer the server.

The CLI has the following key features:

- Embedded Java Command Language (jacl) shell for scripting

- Extensible CLI, which enables you to add more commands by using the third-party plug-ins

- Support for local and remote administration, configuration, and management of one or more server instances

- Automatic completion of commands when you enter one or more characters and then press the Tab key

- Easy-to-use CLI-based operational modes including single mode, shell mode, and file mode

For more information about the commands, see .

Sun N1 Service Provisioning System Support

Web Server is integrated with Sun N1 Service Provisioning Server 5.2. Sun N1 Service Provisioning System is an application provisioning tool that eliminates the need for custom scripts. With the integration of Web Server with Sun N1 Service Provisioning System, as an administrator, you do not need to write custom scripts for installing multiple Web Server instances in a datacenter environment or in a server farm.

Consolidated Configuration Files

Configuration files in Web Server are rearranged and consolidated to simplify administration.

In the earlier versions of Web Server, the configuration files in the userdb directory were shared by all instances, while the information contained in these files was often instance-specific. In Web Server 7.0, configuration files from the userdb directory are removed. Their functionality is incorporated into the server.xml file in the config directory. Configuration files from the alias and httpacl directories are moved into the config directory. These changes consolidate instance-specific configuration information within the instance-specific config directory.

For information about the configuration files, see Oracle iPlanet Web Server Administrator's Configuration File Reference.

JNDI Support

The Java Naming and Directory Interface (JNDI) API provides seamless connectivity to heterogeneous enterprise naming and directory services.

Java Database Connectivity and Connection Pooling Support

Web Server provides out-of-the-box, seamless Java Database Connectivity (JDBC), technology and supports a wide range of industry-standard and customized JDBC drivers.

Web Server supports JDBC connection pooling, that is, a group of reusable connections for a particular database. Because creating each new connection is time-consuming, the server maintains a pool of available connections to increase performance. When an application requests a connection, it obtains a connection from the pool. When an application closes a connection, the connection is returned to the pool.

For information about creating JDBC connection pools, see Oracle iPlanet Web Server Administrator's Guide.

Enhanced Hardware Accelerator Encryption Support

Sun Java System Web Server 7.0 provides hardware accelerator support for Sun Crypto Accelerator 4000 and 6000 boards, which enhance the performance of SSL on Web Server.

Note:

Initialize the Sun Crypto Accelerator card when using with Web Server. For more information about Sun Crypto Accelerator, see Sun Crypto Accelerator 6000 Board Version 1.1 User's Guide at:

http://docs.oracle.com/cd/E19321-01/index.html

Integrated Java Web Services Developer Pack 2.0 Technologies

Web Server includes Java Web Services Developer Pack (Java WSDP) 2.0 and XML technologies. Web services developed by using Java WSDP can be deployed on Web Server as a web application by using the wadm command.

Web Server 7.0 provides support for security features such as XML Encryption, XML Digital Signature, and support for message security provider.

For more information about Java WSDP 2.0, see:

http://www.oracle.com/technetwork/java/webservicespack-jsp-140788.html

Java WSDP 2.0 samples are located at the following location. These samples can be deployed on Web Server 7.0.

http://java.sun.com/webservices/downloads/2.0_preview_webservicespack.html

Lightweight Session Replication Support

Web Server supports cluster-based session replication and failover. Session replication and failover provides high availability to web applications by replicating HTTP sessions from one server instance to another in the same server cluster. Because each HTTP session has a backup copy on a remote instance, a server failure that renders one instance in the cluster unavailable does not disturb session continuity.

For more information about Light Weight Session Replication support, Oracle iPlanet Web Server Administrator's Guide.

URL Redirection and Rewriting with Regular Expressions

Web Server 7.0 introduces enhanced support for regular expressions and conditional processing in the obj.conf configuration file.

Key enhancements include the following:

- Support for regular expressions

- A restart Server Application Function (SAF) for restarting requests with a new URI

- Support for dynamic SAF parameters that include expressions, variables, and regular expression back references

- <If>, <ElseIf>, and <Else> tags for conditional processing

- Support for complex conditions that use and, or, and notoperators

- sed-request and sed-response filters for rewriting request and response bodies

You can use these new features to define flexible URL rewriting and redirection rules such as those possible with mod_rewrite from the Apache HTTP server. Unlike mod_rewrite, regular expressions and conditional processing in Web Server 7.0 can be used at any stage of request processing, even with third-party plug-ins.

For more information about regular expressions and URL rewrite functions, see .

Extensive Real-Time Monitoring Support

In addition to the monitoring facilities in earlier versions of Web Server, Web Server adds the following enhancements:

- Monitors servlets, JSP, and JavaServer Pages Standard Tag Library container characteristics.

- Monitors process and virtual server statistics from within the Administration Server.

- Integrates with the System Management Agent on the Solaris 10 platform. Integrates with the Java Enterprise System Monitoring Framework (Java ES Monitoring Framework) that makes Web Server monitoring information available within the Java ES Monitoring Framework.

- Accesses monitoring data as Management Beans (MBeans) using the Java Monitoring and Management Console (jconsole) script, Java ES Monitoring Framework, or any Java Management Extensions (JMX) compliant client applications.

For more information about the monitoring feature in Web Server, see Oracle iPlanet Web Server Administrator's Guide.

Integrated Reverse Proxy

Sun Java System Web Server 7.0 integrates the reverse proxy functionality within the core server.

When Web Server is configured with reverse proxy functionality, it acts as a proxy for one or more back-end servers and serves as a single point of access or gateway in a server farm. In a reverse proxy setup, Web Server forwards the HTTP request it received from the browser client to the appropriate back-end server. The HTML response from the back-end server is sent back to the browser through Web Server. Thus, Web Server with reverse proxy hides the existence of back-end servers to the browser.

Web Server provides GUI and CLI support for configuring the reverse proxy.

For information about configuring reverse proxy, see Configuring Reverse Proxy in Web Server in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

Enhanced Security

Web Server supports a wide variety of technologies that allow data encryption and validation, request authentication, and server process protection.

Key security-related enhancements include the following:

- Solaris 10 platform cryptographic framework support. For example, libpkcs11.so including support for UltraSPARC T1 processor hardware acceleration.

- Denial of Service (DoS) attack protection enhancements.

- Cross-site scripting protection through the native sed(1)-based input filtering. For information about cross site-scripting, see Preventing Cross-Site Scripting Attacks in Oracle iPlanet Web Server 7.0.9 Administrator's Guide.

- Web services security:

- IETF XML Digital Signature

- W3C XML Encryption

- Integrated Platform for Privacy Preferences (P3P) support.

- Web-based Distributed Authoring and Versioning (WebDAV) access control support.

- The Lightweight Directory Access Protocol (LDAP) auth-db is enhanced to make search expressions and match attributes configurable.

- The LDAP auth-db supports Microsoft Active Directory interoperability.

- Support for migration of certificate from Tomcat or other Java keystore file-based repositories.

- Support for dynamically applied Certificate Revocation Lists (CRLs).

- Integrated IPv6 support.

Elliptic Curve Cryptography Support

Sun Java System Web Server has always supported SA keys. In addition to the continued support for RSA keys, Web Server 7.0 introduces support for Elliptic Curve Cryptography (ECC).

ECC is the next generation of public-key cryptography for mobile or wireless environments. ECC is based on a set of algorithms for key generation, encryption, and decryption for performing asymmetric cryptography.

For more information about how to use ECC in Web Server, see Oracle iPlanet Web Server Administrator's Guide.

Oracle Java Studio Enterprise Support

Web Server 7.0 supports Oracle Java Studio Enterprise 8.1. Oracle Java Studio software is a powerful, extensible IDE for Java technology developers, based on the NetBeans software and integrated with the Java platform.

The plug-in for Web Server can be obtained in the following ways:

- From the companion CD in the Sun Java System Web Server Media Kit

- By using the companion AutoUpdate feature of Oracle Java Studio

- From the download center for Sun Java System Web Server

Note:

Oracle Java Studio 8.1 plug-in for Web Server works only with a local Web Server. That is, the IDE and Web Server must be installed on the same machine.

For more information about Oracle Java Studio 8, see:

http://developers.sun.com/jsenterprise/overview/previous/jse8.jsp

Localization Support

Web Server is available in the following languages:

- French

- German

- Spanish

- Japanese

- Simplified Chinese

- Traditional Chinese

- Korean

B Issues Resolved in Previous Web Server Releases

The following sections list the important issues fixed in the previous releases:

- Issues Resolved in 7.0.26

- Issues Resolved in 7.0.25

- Issues Resolved in 7.0.24

- Issues Resolved in 7.0.23

- Issues Resolved in 7.0.22

- Issues Resolved in 7.0.21

- Issues Resolved in 7.0.20

- Issues Resolved in 7.0.19

- Issues Resolved in 7.0.18

- Issues Resolved in 7.0.17

- Issues Resolved in 7.0.16

- Issues Resolved in 7.0.15

- Issues Resolved in 7.0.14

- Issues Resolved in 7.0.13

- Issues Resolved in 7.0.12

- Issues Resolved in 7.0.11

- Issues Resolved in 7.0.10

- Issues Resolved in 7.0.9

- Issues Resolved in 7.0 Update 8

- Issues Resolved in 7.0 Update 7

- Issues Resolved in 7.0 Update 6

- Issues Resolved in 7.0 Update 5

- Issues Resolved in 7.0 Update 4

- Issues Resolved in 7.0 Update 3

- Issues Resolved in 7.0 Update 2

- Issues Resolved in 7.0 Update 1

Issues Resolved in 7.0.26

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.26. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

25572908

Update web server version to 7.0.26.

25515778

The following Javahelp JAR files have to be signed again as Oracle iPlanet Web Server had bundled them using the MD5 algorithm

- /./WS7U24_I/lib/webapps/admingui/WEB-INF/lib/jhall.jar/

- /./WS7U24_I/lib/webapps/admingui/WEB-INF/lib/jh.jar/

- /./WS7U24_I/lib/webapps/admingui/WEB-INF/lib/jsearch.jar/

- /./WS7U24_I/lib/webapps/admingui/WEB-INF/lib/jhbasic.jar/

25349878

When the URL request to Oracle iPlanet Web Server 7.0.22 has characters "%2F" in it before sending request to WebLogic Server, the Web Server decodes it to "/"(slash), which causes errors in applications.

25150794

Oracle iPlanet Web Server 7.0.26 now uses SHA256 admin certificate to generate Certificate Signing Requests(CSR) and self signed certificates.

25108465

Updated iPlanet Web Server 7.0.24 JAR signatures to work with the latest JRE updates.

24422903

The Oracle iPlanet Web Server 7.0.16 installer failed to install the Web Server when the existing Java 1.6.0_115(64bit) version was selected for the option, Reuse existing Java Runtime Environment.

Issues Resolved in 7.0.25

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.25. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

25169128

Update web server version to 7.0.25.

25168676

NSS upgraded to 3.25.1 for Oracle iPlanet Web Server 7.0.25.

25154145

Oracle iPlanet Web Server 7.0.24 with reverse proxy configuration crashes and fails to restart.

25147070

Doc: The tab to change pre-compressed settings is Content Handling tab and not Content Management tab. See Tab to Change Pre-compressed Settings is Content Handling tab not Content Management tab.

23185574

Oracle iPlanet Web Server now supports the ssl3–tls-ciphers TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384.

Issues Resolved in 7.0.24

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.24. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

24465948

Update web server version to 7.0.24.

24390754

Release Notes lists only 32-bit patch for Oracle Solaris on SPARC.

23621388

NSS upgraded to 3.25 for Oracle iPlanet Web Server 7.0.24.

23590236

SSL client authentication should not only check for SSL3 and TLS.

23495921

7.0.22 plug-in marks origin servers offline even though they are online.

22280443

Oracle IWS reverse proxy fails when using TLS 1.2 with SSL client authentication.

22269984

Keepalive thread causes delay when reaping connections.

15963420

Doc: Correct default values of SSL3-TLS-Ciphers have been noted.

See Default Value of ssl3-tls-cipher Suite.

24390754

Support for 64-bit Patch for Oracle Solaris on SPARC.

Issues Resolved in 7.0.23

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.23. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

22376510

Poor performance of Oracle iPlanet Web Server 7.0 observed when the keep-alive option is enabled.

21356151

Log path is removed after adding a new variable at the virtual server level.

21148493

Service Registration form blocks access to the common tasks page.

20862718

An excessive amount of malloc() invocations due to a bug in the pool implementation of free blocks.

21744964

Doc: Information about the io-timeout element for HTTP settings. See Information about the io-timeout Element for HTTP Settings.

21440256

Doc: Information about the NetWriteTimeout parameter. See Information about the NetWriteTimeout Parameter.

22615808

NSS upgrade to 3.21

Issues Resolved in 7.0.22

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.22. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

20852421

Reverse proxy wraps client hello message in SSL2-compatible format.

20954530

NSS upgrade to 3.17.4.

21089550

Version changes for Oracle iPlanet Web Server 7.0.23.

Issues Resolved in 7.0.21

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.21. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

14703488

Removal of max-procs parameter from the Admin CLI/GUI interfaces.

18185294

A search events fails when platform is set to 64-bit.

18398500

For an auto-deployed web application without a welcome-file in its deployment descriptor, an attempt to access the base url of the web-app results in the display of the directory listing even though it may contain some file such as index.jsp.

18841083

In an auto-deployed web-app, if welcome-file redirects to another page, then a directory listing was being displayed for that directory.

19000390

Multi-byte characters in the response header get garbled.

19885785

The get-client-cert operation does not work when SSL3 is disabled.

Issues Resolved in 7.0.20

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.20. The documentation issues are prefixed "Doc:" in the Description column of the table.

Issue ID

Description

12306936

Renewal of CA-signed certificate fails from Admin UI with Security Token Mismatch Error.

12984556

Fix to Security Token Mismatch Error in Renew Certificate Wizard.

16834733

Oracle iPlanet Webserver with an SSL listener crashes if the SSL cache is disabled, and the client certificate expires.

17309955

Corrected a mismatch of key-value names for bind-password in the Admin GUI.

17446698

Resolved memory leak issue in admin server related to instance member state changes.

17652218

Server should return a Bad Response (400) for a malformed request, rather than closing the connection.

17835893

Doc: New configuration option for get/set properties in auth.db.

See New Configuration Option to Get/Set Properties in the auth-db.

18026360

Resolved memory leak issue in admin server related to instance member state changes.

18263786

The default size of the header buffer used in the reverse-proxy is now the same as the request-header-buffer-size element of the http element in server.xml.

18278817

Doc: Document the components you can use with a custom log format.

See New Configuration Option to Get/Set Properties in the auth-db.

18313136

Unable to create a certificate with a generalized time format.

Issues Resolved in 7.0.19

There are no new issues resolved in Oracle iPlanet Web Server 7.0.19. This release addresses security issues.

Issues Resolved in 7.0.18

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.18.

Issue ID

Description

14846203

Oracle iPlanet Web Server 7.0 must support Internet Explorer 9 browsers.

15866045

Oracle iPlanet Web Server 7.0.12 B07/05/2011 has high CPU usage with search Japan special characters.

16412868

Administration GUI and configuration files are not in sync after deploying the configuration.

16451039

Migrate maxrequestsperconnection property from Web Server 6.1 to max-request in Web Server 7.0.

16576024

Doc: The button to copy the configuration is Duplicate not Copy.

See The Button to Copy the Configuration is called Duplicate not Copy.

16583088

SNMP statistics cannot be gathered for both 32-bit and 64-bit Oracle iPlanet Web Server instances.

16589719

Doc: Enhance Oracle iPlanet Web Server reverse proxy set up instructions.

See Information on the Sticky Cookie Parameter.

16661593

Problem running NSAPI plug-in on Oracle iPlanet Web Server 7.0.15 and Solaris 11.

16669390

Doc must list bug 12176204.

See Issues Resolved in 7.0 Update 2.

16675649

fn=set-default-type does not recognize charset header already in response.

16741509

Oracle iPlanet Web Server 7.0.15 uses substantial swap space in (Exalogic) Solaris 11.1.

16758897

Doc: Unable to create an ACL based on the incoming referrer header.

See Unable to Create an ACL Based on the Incoming Referrer Header.

16853609

htaccess does not handle IP address when internet 6 is set for protocol family.

16889404

CGI cannot take content length greater than 2GB.

16911058

IPV4-mapped address does not work with ACL.

16931512

Oracle iPlanet Web Server 7.0 to bundle JDK7 instead of JDK6.

17059127

Oracle iPlanet Web Server 7.0 must use JMX 2.0 for administration server to work with JDK 7.

17222335

The code <% session.setAttribute("k",null);%> does not work when session replication is on.

17286373

GET request fails when it contains <tab> or extra <space> characters.

17445403

Doc: Fix the typo " Administration Server cashes..."

See Issues Resolved in 7.0.16.

Issues Resolved in 7.0.17

This section lists the issues resolved in Oracle iPlanet Web Server Relaese 7.0.17.

Issue ID

Description

13574210

Watchdog can leak memory on Unix platforms.

14536445

Web server crashes on servact_addlogs when using NSAPI restart.

14554106

Disable symbolic link can change processing.

14648134

ampersand in webDAV PROPFIND response not encoded in src and dst tags.

14664654

Doc: max- procs should be removed from the product document of Web Sserver 7.0.

See Invalid Information About the Parameter max-procs.

14694989

Core truncates the request data in presence of filters and content- length.

14846823

http compression needs to check for transfer-encoding chunked.

14847166

Doc should list 14094667 as an issue fixed in 7.0.16.

See Issues Resolved in 7.0.16.

15840953

Doc: update readme to add required patch for Web server 7.0.16 on 64- bit Linux 6.X.

See Linux 6.x Patch.

15874248

Oracle iPlanet Web Server 7.0 needs JDK 7 certification.

15952066

Failure reading chunked post data in SSL.

16088397

In Web Server 7.0, server.xml conn-queue and KA settings does not check max OS FD number.

16093987

When OS FD =2G, auto tuning may set file cache Fd = zero.

16384686

Doc: correct the broken link for NSS.

See NSS Updated to 3.12.8.

For information about issues resolved in previous Oracle iPlanet Web Server 7.0 releases, see Issues Resolved in Previous Web Server Releases.

Issues Resolved in 7.0.16

This section lists the issues resolved in Oracle iPlanet Web Server Release 7.0.16

Issue ID

Description

12068601

Documentation for htpasswd command.

See Information about the htpasswd Command.

12308574

Sed-response appends ext NEWLINE \n to the Response, regardless of sed rules.

13493902

Docs need to provide information on the supported usage and limitations of dynamic changes in htpasswd during web server run time.

See Web Server Security Issues.

13611326

In the console mode, the installer must display Start Administration Node when creating administration node.

13612190

Watchdog-driven log rotation can be modified.

13831388

Oracle iPlanet Web Server 7 returns invalid xml for webdav PROPFIND directory that has an ampersand in its name.

13860860

Oracle iPlanet Web Server needs to ship updated JDK:1.6.0_33

13918547

When using Administration GUI console, specified LDAP authentication database does not exist.

13984399

Administration server crashes when parallel instances are started in non-C locale. Doc needs to update Solaris patch number.

See Solaris 10 (SPARC and x86) Patches.

14019888

Oracle iPlanet Web Server installation on Red Hat Enterprise Linux and Oracle Enterprise Linux requires file libstdc++.so.5.

14094667

.ht access file dynamic change during loads can cause web server crash for Web server 7.0.

14207464

When the instances are SMF-enabled, if you create or delete a new instance with SMF service, all other running instances with SMF services are restarted.

14223471

Administration instance SMF service cannot be disabled on Oracle iPlanet Web Server 7.0.15.

14223540

SMF service for administration server cannot be deleted by using the wadm CLI command.

14236877

Administration CLI must allow create or delete service for administration server configuration.

14248615

Error occurs when you recreate an SMF-enabled configuration.

14271270

Add support for blocking I/O on the operating system socket when MaxProcs >1.

14272703

Change in the default handling OT query strings in the redirect SAF.

14341484

sed-response output filter adds 1 additional byte to the end of a response body regardless of rule.

14396341

Support needed for Oracle Enterprise Linux 6.2 and 6.3.

14398581

When admin instance is not SMF-enabled during installation, but SMF-enabled via UI later, the instance cannot be stopped using stopserv command.

14408205

Attempt to stop the administration instance fails if one or more SMF-disabled instances are started via administration interfaces.

14463712

Encode the special character & in the URL UTIL_URL_ESCAPE.

14469503

Doc:.noStartOnBoot file under instance root can control auto-start.

See Create .noStartOnBoot File to Control Autostart.

14471309

The message ADMIN3984 gets logged twice while saving LDAP authentication database for administration. This happens only the first time.

14471778

When you click Save on the Administration Node page, the message ADMIN3984 gets logged for non-existence of LDAP authentication database.

14475514

The message ADMIN3984 gets logged when resetting authentication database when LDAP properties are lost.

14512832

Doc needs to provide the information that Search Collections does not support PDF 9.0.

See Search Collections Does Not Support PDF 9.0.

14553796

In Web server 7.0.15, instances cannot be SMF-disabled when the admin instance is set to be SMF-enabled.

Issues Resolved in 7.0.15

This section lists the issues resolved in Oracle iPlanet Web Server Release 7.0.15.

Issue ID

Description

12306447

Docs need to provide information on how to protect a resource

See Information About Securing a URI Using an Authentication Database.

12584046

Admin server hangs when SMF is enabled

12643441

Crash in fastcgistub process

12657657

Reboot of OS causes newly created SMF service to go from enabled to disabled

12777290

Doc has the incorrect -d "com.iplanet.ias.server.logging.serverlogmanager"

See Correction to JVM Option Example.

12833917

"-" lost after configuration virtual-server access-log format from the admin console

12844341

Server sends invalid range data if content of the file changes

12856417

Specially crafted shtml URIs can crash the web server

12877126

Repeated crash in function void httprequest::processqos() after setting QoS

12894984

Range request with If-Range with Etag does not return full content if file is changed

12919247

set-cookie response has an extra space between "path=" and "; httponly"

12919334

Range header DoS vulnerability

12989862

Fix request for 6932016 should add info regarding 7003615

See problem ID 6932016 in Table 2-5.

13011275

Add minimum required memory and minimum recommended disk space to release notes

See Supported Platforms.

13251178

Admin console shows long URL link for configuration name

13439900

"allow" header contains incorrect HTTP methods; for example, trace on 405 responses

13473614

maxprocs > 1 causes logging into rotated access/errors log files

13484895

ktsearch needs to be updated

13540300

Doc bug regarding default value of keep-alive threads

See Correction to Default Number of Keep-Alive Threads.

13543379

HTTP listener port is still open after changing the port through the admin console

13546987

Log rotation not working in multiprocess mode

13559815

With high system FD limits (2G), autotuning causes the server to crash

13560430

Description of limit queue length not correct

See Clarification About the Limit Queue Length Shown in the perfdump Report.

13586813

Certification on Oracle Enterprise Linux 6

13586985

Certification on Oracle Solaris 11

13620632

403 forbidden returned for some contents when ACL is configured with SSL

13681165

JDBC connection leak when connection is set to autocommit false and when the JDBC connection pool is set with connection-validation=true and with table mode

13683057

Unable to read a cookie value containing double quotation marks

13700818

Migrate maxparametercount property of Java element in DTD

13700834

Add admin console option to specify max-parameter-count

13725520

Web server is crashing when SSL session cache is disabled

13817143

JDBC monitoring for leased connections not correct after database failover

13874425

If open FD limit of system is set to 2G, thread-pool queue-size does not work

13889880

7.0.13 patch causes problems with F5-BigIP

See TLS Communication Through Certain Load Balancers Breaks in 7.0.13 and Later Releases.

For information about issues resolved in previous Oracle iPlanet Web Server 7.0 releases, see Issues Resolved in Previous Web Server Releases.

Issues Resolved in 7.0.14

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.14.

Issue ID

Description

13565231

Need configurable property to restrict number of parameters a JSP or servlet can use, to prevent Java hash table collision (CVE-2011-5035, vulnerability 903934)

13707603

Hash collision fix needs to reset parameter count to process requests

Issues Resolved in 7.0.13

This section lists the issues resolved in Oracle iPlanet Web Server 7.0.13.

Issue ID

Description

13079329

RFE: Limit keep-alive requests on a single TCP socket in Oracle iPlanet Web Server 7.0

13355800

Add option to limit keep-alive requests to resolve CVE-2011-3389

13355817

CVE-2011-3389, TLS 1.0 vulnerability

13405070

Integrate security version 3.13.1 with Web Server 7.0.13

13455620

Doc: Document the newly added listener property max-requests-per-connection

Issues Resolved in 7.0.12

This section lists the important issues resolved in Web Server 7.0.12.

Issue ID

Description

12219154

Incorrect layout in the Installer help.

12249856

Windows return Forbidden instead of "Not Found" for URI length greater than 176 characters.

12285988

Doc: Additional documentation required when using SMF on Solaris 10. For more information, see Using SMF on Solaris 10.

12301718

admin: Web Server 7 Admininstration GUI threw an exception error ADMIN3594, when pull and deploy a manual change in config.

12301907

admin: Web Server 7 - Error in administration server log when a Japanese customer used Accept-Language: ja (also for Chinese).

12302497

Cannot install Web Server 7.0.9 when "Identity Synchronization for Windows" is already installed.

12303923

Doc: Do not change Windows during CSR. For more information, see Web Server Administration Issues.

12304500

Crash at function Lasipeval when ACL file contains the IP address.

12304725

web doc RFE - PID file will disappear in some Red Hat Linux operating system and then unable to stop the server.

12305178

Web Server 7.0: RPP, not RFC complaint with regard to the added Via header.

12305221

Race condition in lookup function can result in accessing deleted memory pointer.

12305440

Web Server 7.0: Reverse Proxy Plug-In percent encodes the '+' character in a URL.

12305700

Web Server 7.0.8: content-type header gets added twice.

12305812

Windows - Renew certificate with OU=COMMA and space inside caused ADMIN4078 CertificateMgrUtil.exe error.

12305828

Race condition in stale condition measurement results in idle connection deletion under stress.

12306018

Web Server7: Doc: .exe files cannot be downloaded in default configuration. For more information, see Web Server Installation Issues.

12307171

Administrator GUI ACL Control List that denies access With "Respond with URL" message cannot be changed after set.

12307182

Web Server 7.0 crashes in Set-Default-Type on Red Hat 5.5 (7.0.9).

12307239

Web Server7.0U9:Unable to retrieve session objects.

12308375

Doc: Add a section for Reverse Proxy Plug-In (RPP).

See http://docs.oracle.com/cd/E19146-01/821-1828/ghquv/index.html.

12308571

Primodial process keeps accessing the rotated access and error logs.

12308871

Server sends invalid range of data if the file content changes.

12309078

PWC4011:Unable to set request character uncoding to UTF-8 from context.

12309413

admin: Administration console deploy configuration changes throws error - Exception : ADMIN3011: T.

12309860

admin: cannot include double quotes in O value for CSR with ADMIN4120 message.

12310193

admin: Not able to supply 2nd token pin via --password-file option (OIWS 7).

12354092

Doc: CR#6947733 is not listed. For more information, see Problem with set-cookie Header and Web Server Core Issues.

12354365

Set-cookie adds httponly parameter automatically on Web Server 7.0.9.

12382350

Web Server 7.0u9 crashes in INTUTIL_IS_URL.

12634549

Integrate security version 3.12.10 with Web Server 7.0.24.

12682013

Doc: Document password-file used in wadm CLI should contain token name in small letters. For more information, see Token Name.

12685874

Doc: PID file disappears in the Red Hat Linix operating system and later the server cannot be stopped. For more information, see PID File Disappears in Red Hat Linux.

12693227

Upgrade NSPR libraries to the latest version

12714871

Doc: Need an option that disables to escape the original URL in reverse proxy. For more information, see Introducing exclude-escape-chars Parameter in http-client-config.

12721207

Doc: Workaround for Bug#12657657. For more information, see Web Server Administration Issues.

Issues Resolved in 7.0.11

This section lists the important issues resolved in Web Server 7.0.11.

Issue ID

Description

7007933

Upgrade to 7.0.10 fails from 7.0u2 onward

7018896

JDK 6 update 24 bundled with 7.0.11

7022621

JDK versions supported for WS7

See Supported JDKs

Issues Resolved in 7.0.10

This section lists the important issues resolved in Web Server 7.0.10.

Issue ID

Description

6908578

Admin GUI combines schedule of two different servers on search

6939452

Nonconfigured scheduled maintenance to search collection entries seen in WS7.0 migrated configurations

6953631

HTTP2228: Response content length mismatch and problems with referer header

6960107

Attempt to change temp directory fails when server is running

6962650

Cannot display CA with "&" inside certicate nickname in the admin GUI; example: AT&T CAs

6965425

Kerberos : "auth-user" in "rq->vars" pblock MUST be set when Kerberos Auth-db is being used

6968390

htaccess : large(>1024) line in group file is causing authentication issues

6968626

Kerberos : gssapi.cpp should delete user from subject Plist rather than resource Plist

6968996

Kerberos: get_auth_user_gssapi function should have a return value in all cases

6971888

Web Server startup fails because of incorrect linking of xerces library on Solaris x86

6972007

ADMIN3763 error when admin node hostname is not lowercase

6978321

Web 7 can hang when servlet cache is enabled and customer Java code throws exception

6981086

Reverse proxy crashes inside log_error_v originated from (proxyerror_agent_errorf)

6982551

ACL cannot delete correctly by admin GUI

6987881

Integrate security version 3.12.8

6993394

Bundle latest JDK update 22

Issues Resolved in 7.0.9

This section lists the important issues resolved in Oracle iPlanet Web Server 7.0.9.

Problem ID

Description

6611067

Red Hat Enterprise Linux instance fails to start when the file system SELinux security is enabled.

Newer Linux distributions have new kernel security extensions enabled from the SELinux project. These extensions allow finer grained control over system security. However, SELinux also changes some default system behaviors, such as shared library loading that can be problematic to third-party programs. If you receive the error message "Cannot restore segment prot after reloc: Permission denied" when starting the Web Server administration server or instance, that means the system is SELinux enabled.

Workaround

1. Change the default security context for the libraries loaded by Web Server by running the following commands:

chcon -t texrel_shlib_t $WS_DIR/lib/*.so
chcon -t texrel_shlib_t $WS_DIR/jdk/jre/lib/i386/server/*.so

2. Disable SELinux by adding the following line to the /etc/sysconfig/selinux file.

SELINUX=disabled

6837680

range header in reverse proxy does not take multiple values

6885216

WS7.0u6:wadm does not print error when password file is not correct

6896709

Web Server 7.0 does not handled web apps deployed outside the installation path correctly

6899047

conn->elapsed does not get refreshed for new ka request in low latency mode (request header timeout).

6901051

unable to install a cert if o or ou contains comma

6911225

PAM auth : Passwd aging causes webservd to dump core in free_resp function

6911277

Server return 404 for /j_security_check -ending URLs

6913746

unable to startup the server if the first character is a digit in the hostname

6914493

regression: wadm reset-admin-password command fails on Web Server 7.0 U6 and U7

6917800

doc bug for Web Server 7 auto tuning which may cause a large memory usage

6920807

Admin GUI "Certificate Authorities tab" and wadm "list-certs" showed error in Japanese Windows operating system

6927134

web 7u8 - Admin GUI will add additional IF/ELSEIF in the <virtual-server>-obj.conf

6928578

htaccess config causes websever to crash on RHEL & SUSE Linux installation

6928808

ClassCast exception for HEAD requests on Java resources that do request dispatching

6931166

LIBPATH needs to be fixed for AIX 5.3/6.1 JDK6SR7 certification

6933187

Interval in check offline server of loadbalancer should be configurable.

6940796

net_read can set EAGAIN in errno when it times out.

6944895

web 7 RPP missing jsessionid

6947057

web7 RPP docs - to add retries parameter in docs

6955691

WS7: webdav crash when max-xml-request-body-size set to unlimited

6958053

web 7: file with comma in its filename inside a war file cause Admin GUI "Deployment Pending"

6960564

Installation of WS7U8 on IBM AIX 6.1 generates an error message but is successful.

12354092

CR#6947733 is fixed.

Issues Resolved in 7.0 Update 8

This section lists the issues resolved in Sun Java System Web Server 7.0 Update 8.

Problem ID

Description

6916391

Digest authentication buffer overflows.

6916392

TRACE heap overflow.

6916390

WebDav format string bug.

6916389

WebDav stack overflow.

6917879

TRACE request with empty header names can cause malformed responses.

6930175

Web Server 7.0 Update 8 supports Windows 2008 Standard Edition Service Pack 2 32-bit(x86).

Issues Resolved in 7.0 Update 7

This section lists the issues resolved in Sun Java System Web Server 7.0 Update 7.

Problem ID

Description

6888100

While migrating from Web Server 7.0 Update 5 to Update 6, the LDAP authentication fails because rebind is not done after password validation.

6898371

Severe TLS/SSL protocol vulnerability. It requires NSS upgrade

6811286

Admin GUI becomes unresponsive when large web application has been deployed.

6849009

When using the admin gui or CLI to list the certificates using CertificateMgrUtil in Web Server 7.0 Update 4 and Web Server 7.0 Update 5, it can take over 60 seconds to perform the listing.

6855262

Web Server runs out of FILEs when using >=128 vcpus

6855513

In Web Server 7.0 Update 7, the thread-pool auto configuration algorithm is broken.

6857815

Kerberos/SPNEGO support was added.

6867192

Web Server 7.0 Update 7 documents auto configuration feature for configuring the max-threads, thread-pool queue-size, and keep alive max-connections.

6869991

Xerces C library has a vulnerability.

6880214

Web Server 7.0 needs to bundle JDK 6 instead of JDK 5 as JDK 5 is getting EOSL-ed.

6881339

Server crashes if async request is aborted by keep alive thread (if stats is turned on).

6882830

Single-Sign-on (SSO) for FORM authenticated application, the JSESSIONIDSSO cookie is not set.

6887782

If PR_GetSockName fails, then Connection::create will return failure and then the connection gets added in both unused and Ready Queue.

6741844

In Web Server 7.0 session failover does not happen after "Invalid Sequence Number" exception is thrown.

6763470

LDAP group authentication from Microsoft Active Directory fails if user name has a "," in between.

6815996

Web Server 7.0 Update 4 64 bit crashes when accessing a file in a directory that has a .htaccess file.

6830258

Web Server closes the Keep alive connections much before keep alive timeout (poor QoS on Specweb on Linux).

6841548

The flexlog.cpp code is optimized.

6849198

The URLs of server side include files work after "/" is appended to URL.

6857790

The administration server's auto tuning of threads takes lots of resources on CMT systems.

6873985

Web Server 7.0 Update 7 documents the list of unsupported file formats that can't be indexed and searched.

6875450

Web Server 7.0 Update 4 core patches (SPARC, x86) includes the localization patch "126332-06" in SUNW_REQUIRES field.

6877764

Web Server 7.0 Update 7 will not return Content-type: text/html when there is no message body.

6878259

Webstack PHP support for Sun Web Server 7.0 Update 7.

6885643

Web Server 7.0 classdebuginfo set to false is not working with JDK6.

6897071

Web Server 7.0 Update 6 - Admin GUI shows null in NODES when installed with external JDK.

6567720

Enhances admin framework to support enabling Kerberos authentication.

6853924

Web Server 7.0 Update 7 states that when renewing a certificate the key size can be changed.

6854885

Web Server 7.0 CA-signed certificate created through admin GUI is not associating the certificate with listener.

Issues Resolved in 7.0 Update 6

This section lists the issues resolved in Sun Java System Web Server 7.0 Update 6.

Problem ID

Description

6854841

Web Server 7 appears to ignore any attempt at configuring the "classdebuginfo" in sun-web.xml.

6813426

Detailed error message should be logged when adding of PDF documents to search collection fails.

6801517

Virtual server creation will fail if there is a trailing space in the "Name" or "Hosts" fields.

6809090

Self-signed certificate should use SHA1 as signature algorithm.

6856484

Error while renewing a certificate in Sun Metaslot.

6847901

Web Server should bundle the latest SASL.

6707244

Race condition in the JVM when deploying a web application that contains a logger.

6856472

<request-header-timeout> should default to 30 from -1.

6826625

Remove the Localization package/patch dependency check in the checkinstall script.

6781962

Favicon is not displayed correctly in Internet Explorer 7.

6749879

LDAP authentication fails with Directory Proxy server where anonymous authentication is set to false.

6806858

ACL vulnerability (when dynamic group is used) allows non-authorized user to login.

6811110

LDAP update in the Administration GUI fails if LDAP is a Directory Server consumer.

6832878

In the Administration Console, the new configuration wizard text has to be improved.

6801700

When configuring the error code for request limits, there is no mention of valid values.

6814138

Last Modified date and the creation dates are incorrectly displayed in PROPFIND.

6856456

Last line of installation log file points to itself. The end of the log file has reference to the same file for more information.

6834762

In certain scenarios, "Unable to connect to the node host" error from the Administration Server.

6848803

CLI page for add-webapps and Admin Guide's page titled 'Deploying Java Web Applications' should be updated.

6828720

use-responseCT-for-headers should be documented.

6827940

Support for FastCGI suid environment on RHEL5.0 in Web Server 7.0

6809081

Sample application documentation must say that the administration server must be started for ant deploy to be successful.

6860680

Windows vulnerability — Appending "::$DATA" to the file extension discloses the contents of JSP page.

6841507

Document typo in 7.0 U5 Administrator's Configuration File Reference Guide.

6834770

Very little information about virtual-server-name_obj.conf in documentation.

6839431

ADMIN4159 error while renewing a certificate in Sun MetaSlot.

6842383

Document the configuration settings necessary to get the FastCGI suid environment working for the different operating system platforms.

6841454

CSR generated while renewing a CA-signed certificate needs formatting in GUI.

Issues Resolved in 7.0 Update 5

This section lists the issues resolved in Sun Java System Web Server 7.0 Update 5.

Problem ID

Description

6732548

create-fastcgi-handler does not work as expected when value ofapp-args is specified as "a=b" or "c=d".

6750707

Admin CLI does not accept input strings that has multibyte characters.

6723824

Migration from the previous versions of Web Server to Web Server 7.0 Update 3, resulted in unusual migration log files, although the migration of instance was successful.

6764940

obj-https-INSTANCE.conf is different fromobj.conf.

<https-instance>-obj.conf gets created when a first change is made to obj.conf from the administration server GUI or CLI. This situation occurs only if the Client tag is added, before this first change is made to the instance configuration through the administration server. Once the<https-instance>-obj.conf is created, the same steps does not simulate this phenomenon.

6765451

The administration server adds thecheck-request-limits function at an invalid location in obj.conf.

While configuringcheck-request-limits function toobj.conf , you should ensure that it is inserted before find-index function.

6769410

Variables are removed fromserver.xml.

The null values for the CGI variables names, of a migrated instance, cannot be saved in the admin GUI. Hence they are removed from theserver.xml.

6772188

Web Server 7.0 Admin GUI, throws the following error when Java is disabled- "BreadCrumbsModel: index out of bounds 1".

6709085

The administration server fails to start.

The admin tools allow default language to be set tozh_cn, after which the server will not start and throws an error:

config:CONF1104:File /sun/webserver7/https-agc184.PRC.Sun.COM/config/server.xml
line 98: Invalid <default-language> value:zh_cn

6759756

Permission error occurs while uploading a.war file using the admin GUI.

6762245

Usage of blank spaces while creating a new configuration, using admin GUI, throws an error.

6777195

The setNodeProperties in NodeMBean always rewrites the server-farm.xml. While rewriting, it converts the host name entry of the node to lowercase.

6772231

The administration server hangs during startup or configuration listing or any activity that is not directly on the instance or node.

6780377

The Web Server 7.0 administration server fails to recognize the reasonparameter of send-error SAF.

6793862

The administration server fails to recognize Extended Validation SSL Server Certification.

6798954

Web Server should support binary logging.

6542360

Setting java-home of the administration server does not propagate the settings to admin scripts.

6781234

Web Server 7.0 has a problem while using JSTLtlds andjaxp.

6790392

Web Server 7.0 Update 3 displays a blank screen as a response tomaxSessions, instead of an error response.

6768357

NSAPI functions like vs_get_mime_type crashes Web Server for internal non-HTTP requests.

6776108

Increase MaxKeepAliveThread limit from 128 to 256.

6781976

Require binary logging, as access logging is affecting performance.

6806781

%Req->reqpb.clf-request.protocol.version% is not set properly in binary mode and hence binlog throws an error.

6707017

Web Server setup fails when a localized directory is specified for document root.

6753741

Web Server installer throws a "PatchListener-Solaris-detectPatches-Failed" error under certain circumstances.

6774822

During unconfigureServer process a warning message "WARNING: ADMIN2028: Error removing init scripts" is displayed in case of AIX.

6775953

Update Web Server plugin to work with Netbeans 6.5.

6722375

Patches 125437-14 and 125438-14 are not alternate root compliant.

6779166

Web Server 7.0 Update 3 does not scale well on Windows, when compared to Apache.

6781147

Web Server 7.0 Update 3 throws an error while trying to create a search event by Japanese encoding.

6761027

In Web Server 7.0, wildcard pattern matching for ACL does not work properly with IP addresses.

6775403

REQUEST_HEADERS:'/ regular expression /'does not work properly.

6773327

Enabling sendfilev for JSP applications can cause the server response to fail.

6775948

Include file missing in nsapi.h throws a warning message while compiling some NSAPI modules.

Workaround:

Add include <netdb.h> before nsapi.h.

Issues Resolved in 7.0 Update 4

The following table lists the issues resolved in Sun Java System Web Server 7.0 Update 4.

Problem ID

Description

6708647

Set environment variables REQUEST_URI and SCRIPT_FILENAME in CGI and FastCGI subsystems.

6715164

When starting a server instance that has a long running plugin initialization, the administration server process produces high CPU load.

6740996

Incompatibility with Reuters IFP leads to server crash.

6747181

Renewed/new certificates are not utilized after configuration is deployed and restarted.

6620166

Session failover behaves incorrectly when two NICs are active on deployed nodes.

6663982

default-sun-web.xml is not referenced.

6707017

Setup fails when a localized directory is specified for Document Root.

6708894

The new Virtual Server wizard does not allow non-ASCII characters.

6712479

When using a LDAP authentication database, with a base DN having UTF8 characters, it causes an error such as:

ADMIN3143: Base DN 'ou=k?v?nok,dc=red,dc=iplanet,dc=com' does not exist

6713238

Web Server 7.0 Update 2 shows an error on startup, when the document root directory name ends in a .war.

6713786

When upgrading Web Server 7.0 Update 2 to Update 3, some no longer required files are left behind.

6714230

CgiStub exhibits unstable behavior when freeing file descriptors on Solaris.

6716553

An error is reported when creating a certificate with some Country selections.

6717187

State is sometimes not properly referenced when configuring new server configurations.

6717328

The registration page in setup displays very small text fields.

6718752

Upgrades from previous Update releases fail, if there exists a file named https-<instancename>.

6721107

The administration server does not startup on a new Java Enterprise System installation.

6721193

When deploying a web application using Admin GUI, the target directory is ignored if the file is on the server.

6722701

Silent install fails if CONFIGURE_LATER is set to true.

CONFIGURE_LATER=true

6722702

unconfigureServer is required when server is configured in configure later mode.

6722727

Create service in Admin GUI allows you to create a service, even when the service already exists.

6724246

An incorrect error message is displayed in Admin GUI while saving the "Forward Parameters" as below:

Child 'from_hidden' does not have a registered descriptor
in 'editReverseProxyPS1'

6728160

htaccess can cause server crashes.

6729296

Temporary directory of the administration server /tmp/admin-server-xxx with /tmp/admin-server-xxx/configname/extracted/config/server.xml file is not being deleted, during a ./admin-server/bin/stopserv.

6731124

If a request is wrapped by a servlet or filter and forwarded to a static resource, an incorrect error HTTP 405 is returned.

6740786

<If> statements can corrupt the obj.conf files in the administration server.

6714929

SNMP is not compatible with default tcp_hiwat setting on Solaris 10.

6741649

In Update 2, the output of get-perfdump should not include sessions that are in keep alive mode.

6743019

When using Admin GUI in French locale the error message does not give the nodename during deployment, as shown below:

The administration server has detected that you have modified some of the
instance configuration files on the following nodes: <b>\{0\}</b>.

6751264

In the French and Japanese locale Admin GUI, Sun Online account signup form for registration is not being properly displayed.

6760687

The administration server does not always display the latest certificate.

6765564

The online installer help does not properly reflect removal of language packs from the installer component panel.

6766109

Creating a new configuration with CGI Enabled as File Type causes a failure.

6629611

Toggle state in some administration server tables is incorrect.

6633333

Links do not point to localized sun.com sites.

6608135

Search engine fails with an error, when a html document with title contain characters like A&B.

|6705752

The Admin GUI does not allow server header to be suppressed.

6708548

Provide consistent translations in German locale.

6709378

Inconsistency exists between button in a description and button's label.

6709427

A part of the table title in logviewer is corrupted.

6711035

Part of the French translation on Web Server parameters page is cut off.

6711518

Inconsistent translation of "Core Server" in French locale.

6712045

Button labels and Message strings should have consistent translations.

6723559

Allowed to register, even though the password and re-entered password are not identical.

6733189

The wadm cli does not display web application path.

6754078

The Japanese Admin GUI displays garbled messages.

6762559

Inconsistent translation of Reverse-proxy.

6763094

Bad translation of the term 'fancy' in French locale.

6715350

In Japanese locale, the OLH have invalid character.

Issues Resolved in 7.0 Update 3

The following table lists the issues resolved in Sun Java System Web Server 7.0 Update 3.

Problem ID

Description

6387762

Cannot access shell/system variables from wadm.

4793938

User and password dialog presented instead of directory index.

By default, Web Server 7.0 does not send a directory index unless the user has been authenticated. Attempting to access a directory prompts the user to enter a user name and password. This occurs because the default Access Control List (ACL) in Web Server 7.0 grants the list access right only to authenticated users.

6426116

Clicking on the Version button in the Admin Console result in "file not found" warning in Administration error logs.

6446206

When a single user in group is deleted, an incorrect message "Group Saved Successfully" is displayed.

6431984

Web Server should store its pid file and UNIX domain sockets in /var/run instead of /tmp.

6475536

No obvious way to reset the administration server password.

6489727

[JESMF CONFORM] CP when stopping should call MfManagedElementServer_stop().

6493971

The administration server does not time out if the server instance restart does not respond.

On UNIX systems, the Administration Server waits until the server instance is restarted when the restart-instance command is executed. If the instance is not successfully restarted, the Administration Server does not respond to requests.

6515745

SNMP master agent process fails to start on Web Server

6545779

On Windows, wdeploy command fails if older version of libnspr4.dll is found in the system32 directory.

6606243

Web Server installer should import the admin self signed certificate into IE certificate tab.

When the Admin Console is accessed using a browser, a pop-up (in the case of IE6 and Mozilla/Firefox) or a warning page (IE7) may be displayed stating that the certificate is not issued by a trusted certificate authority. This is because, the administration server uses a self-signed certificate. To proceed to the Administration GUI login page, do the following:

- On Mozilla/Firefox, click OK in the pop-up window.

- On Internet Explorer 6, click Yes in the pop-up window.

- On Internet Explorer 7, click the "Continue to this website" link in the page.

This procedure will accept the certificate temporarily for that browser session.

To accept the certificate permanently, follow the steps below:

- On Firefox/Mozilla:
Select the "Accept this certificate permanently" radio button in the pop-up window and click OK.

- On Internet Explorer 6.0:

1. Click the "View Certificate" button in the pop-up window.
Displays another pop-up window.

2. Select the "Certification Path" tab, select the admin-ca-cert.

3. Click the "View Certificate" button and then on "Install Certificate..." button.
Invokes the certificate import wizard using which you can import the admin CA certificate into the trusted root certificate database.

- On Internet Explorer 7:

1. Click the "Continue to this website" link on the warning page.
The login page is displayed.

2. Click the "Certificate Error" link located next to the address bar.
A warning window is displayed. Click the "View certificates" link.

3. Follow the steps 1 to 3 as described in the section "On Internet Explorer 6" to import the admin CA certificate into the trusted root certificate database.

6606132

Create self signed certificate fails when the "Sun Metaslot" pin is not set

6709477

GUI Registration reminder does not show up properly on IE6

IE6 select element does not support z-index which is necessary for layering to work. Thus, if there is a layer, registration reminder, overlapping the drop downs (config and vs) , the drop downs will still be visible.

6639402

Connection queue size set by server for 1024 max file descriptor is very less (128)

Web Server reserves the file descriptors for various components. If connection pool queue size, file cache max open files and keep-alive max connections are not set, then after reserving file descriptors for other components, Web Server divides the available descriptors among three. On systems where default value of max file descriptor is low, for example, Solaris 8 and RHEL, the connection pool size might be set to a low value. For example, on RHEL, the default value of max file descriptors is 1024. If the connection queue size is not assigned, then Web Server assigns 128 connections to connection queue. The value can be very low on busy systems. If connections starts timing out, users should set higher value for max file descriptors.

6644322

Memory leak in Fastcgistub causes hang in the Fastcgi sub-system

6474037

Exception installing Web Server on Ubuntu.

On Linux Ubuntu, the package which contains the /bin/domainname is not available by default. You must install these packages for the Web Server installation to succeed.

To install the package, enter the following command:

sudo apt-get install nis

6414481

Web Server cannot be installed without installing compat-libstdc++.

6641672

REDHAT ES4.0 Linux 64-bit installation fails by having compat-libstdc++-33-3* (64-bit)version

6472668

On Windows, Web Server installation should use -Xrs JVM option by default.

Workaround:See Oracle iPlanet Web Server Administrator's Guide.

6559918

Unclear error message if CLI and Administration Server versions are incompatible.

While upgrading Web Server 7.0 installation to Web Server 7.0 Update 2 , make sure that the entire setup CLI, Administration Server and all the administration nodes are also upgraded to Web Server 7.0 Update 2. This is because, Web Server 7.0 administration interfaces will not work correctly with Web Server 7.0 Update 2 administration interfaces.

6595795

The Admin Console does not add the required functions in the obj.conf file for a migrated instance.

When a JVM disabled Web Server 6.0 instance is migrated to Web Server 7.0 and when the migrated instance is enabled with the JVM option using the Admin Console, the process does not add the following necessary lines in obj.conf file.

NameTrans fn="ntrans-j2ee" name="j2ee"
PathCheck fn="find-index-j2ee"
ObjectType fn="type-j2ee"
Error fn="error-j2ee"

6641844

On Windows, server fails to start after upgrading from Web Server 7 that is part of the Java ES 5 release to Web Server 7.0 Update 2 release using the patch.

6644314

Security patch 121656-16 is a mandatory perquisite for Sun Java System Web Server 7.0 Update 2 Linux patch on Java ES 5/U1.

However, the security patch exhibits cyclic dependency, hence making it impossible to apply any of the patches.

6640206

Upgrade fails when upgrading to U2 when no sample apps is present in the existing installation.

On non-windows platforms (Solaris, Linux and HP-UX), if you have installed Web Server 7.0 or 7.0 update 1 without sample applications and if you upgrade to Web Server 7.0 update 2, you will see the following error message:

A problem occurred during upgrade. To troubleshoot the problem, review the installation log at: <install-dir>/setup/Sun_Java_System_Web_Server_install.log

Note: This error does not impact the upgrade.

6559735

Sample applications documentation must mention adding jar file to the class path in the properties file.

In the install-dir/samples/java/webapps/security/jdbcrealm/docs/index.html, under 'Compiling and Assembling the Application' section, there must be a mention of adding JDBC driver jar file to class path suffix in the jdbcrealm.build.properties file.

6413058

server.xml does not store the full file pattern for converting and including search .

The schema does not store the full file pattern allowed by both the Admin Console and the search administration tools in this version of Web Server. It also has no way to represent the full file pattern that might sometimes need migration from the previous versions of Web Server.

6632936

On Red Hat Linux Enterprise Linux 5, Search functionality does not work properly.

On a Red Hat Enterprise Linux machine, if the compat-libstdc++ library is installed, you must remove the installed rpm and download/install the compat-libstdc++-296-2.96-132.7.2.i386.rpm .

For x86 32-bit and 64-bit download and install the compat-libstdc++-296-2.96-132.7.2.i386.rpm.

Note: Do not download/install an rpm from unreliable sources as it may lead to security vulnerabilities.

6602075

Sun crypto 1000 with Web Server needs Solaris 10 patch 125465-02 (SPARC) and 125466-02 (x86).

6432870

Servlet container collects statistics when stats enabled element is set to false in the server.xml file.

6567124

JSF Web Applications running on Web Server 7.0 may break when running on Web Server 7.0 Update 1.

Web Server 7.0 Update 1 ships with JavaServer Faces 1.2 technology. All JavaServer Faces web applications are expected to work with Web Server 7.0 Update 1 without any modifications. However, there are a few known compatibility issues with JavaServer Faces 1.2 and might require applications to be modified to address these incompatibilities. The incompatibilities are documented in the JavaServer Faces release notes at: https://javaserverfaces.dev.java.net/rlnotes/1.2_04/issues.html.

Java ES 5 Portal Server users are suggested to delay upgrading to Web Server 7.0 Update 1 until Java ES 5 Update 1 is released.

6549619

On Windows 2003, when a command is executed from the CLI, the message is not encoded correctly.

6630841

FastCGI Handler new Role is always created with "English" name.

6632818

Unlocalized strings are seen in CGI settings page.

6628910

CLI installer "Enter your option" is in English in localization locale.

6484181

Portal Server configures JVM stack size to 128K (too low) for Web Server 7.0 64-bit to start.

If Web Server 7.0 is already configured in 64-bit mode, and the Portal Server installation is started, Portal Server configuration does not set stack size to 128K. However, if both Portal Server and Web Server are already installed and configured in 32-bit mode, switching to 64-bit mode involve series of manual steps that are described in the Workaround section.

6487041

schemagen/xjc/wsgen/wsimport scripts not present in Java ES Web Server installation.

schemagen/xjc/wsgen/wsimport scripts are present in different locations in Java ES installation and standalone installation of Web Server.

6550622

When upgrading Java ES 5 software to Java ES 5 Update 1, Portal Server samples fail with JSF exceptions if you have upgraded only Web Server but not the Portal Server.

For more information, see Compatibility Issues.

6643821

SMF commands removes Java ES environment from startserv and stopserv scripts (Solaris 10 only).

6549580

Web Server running on Windows contains no description for the service and the description is not updated after applying Java ES Update 1 patches.

6641175

Streaming data (>2GB) to server using POST has problems. request.getInputStream().read() returns -1

6576542

Samples bundled with WS 7.0 cannot be used for experimenting session replication feature

6600183

Transfer-encoding header is sent after the body has been sent for fastcgi-perl.

6613414

iWS7.0U1 - Page-encoding is not case sensitive capable; for example, utf-8 is different from UTF-8

6613865

servlet container implementation of encode/decode cookies has changed from >= SJSWS6.1

6641175

Streaming data (>2GB) to server using POST has problems. request.getInputStream().read() returns -1

6641231

Uploading file > 2MB is limited by java webcontainer.

6658609

web 7.0 u2 jdbc resource settings do not allow -1 in maximum wait time and idle time out

6660297

JDBC resource pool of web70 does not work as expected after restarting RDB.

6671260

Can't redirect the stderr message from FastCGI into error log.

The data sent from FastCGI to stderr is not logged into the error log.

6671957

compress-file function lacks documentation (SJSWS7.0)

6671992

Web Server documentation needs to be more specific on filter it's scope and what they are

6680376

server goes into a loop given a particular htaccess configuration

6681681

filter is applied twice when a web-apps 's welcome file list is accessed as /contextroot

When a welcome file is accessed as /context-root, filters present are applied twice.

6708333

web 7.0 u2 patch 125437-13 should doc pre-requisite of nss patch 3.11.8 or later as needed

6697002

pull-config garbles binary file in config/ directory due to tokenizing (SJSWS7.0u2)

6701520

instance does not start if the user has certain umask settings during installation

6710993

es, fr - OLH is not displaying, exception thrown

6641109

Webserver crashing configured with an NFS-mounted docroot directory

Web Server crashes if NFS file is removed or replaced, while using NFS and MediumFileSizeLimit >0. Therefore, you should not use MediumFileSizeLimit>0, if the document root is mounted over NFS.

Workaround:

When Web Server documents are residing on an NFS mount, as in NFS client, set MediumFileSizeLimit to 0 in nsfc.conf.

Issues Resolved in 7.0 Update 2

The following table lists the issues resolved in Sun Java System Web Server 7.0 Update 2.

Problem ID

Description

12176204

Remove shlib_flags parameter.

6467621

Request to the server fails with using of "Sun Software PKCS#11 softtoken".

6564797

Server should automatically size connection queue, keep-alive subsystem, and file cache.

6493271

Java garbage collector activity is higher in Web Server 7.0 when compared against Web Server 6.1.

The servlet container in Web Server 7.0 creates many Java objects.

6497803

If a servlet is mapped to req URI formed by partial req + welcome file, the behavior is wrong.

If a web container receives a valid partial request, the web container must examine the welcome file list defined in the deployment descriptor. The welcome file list is an ordered list of partial URLs with no trailing or leading /. Web Server must append each welcome file in the order specified in the deployment descriptor to the partial request and check whether a static resource or a servlet in the WAR file is mapped to that request URI. The web container must send the request to the first resource in the WAR that matches.

6316881

Multibyte characters in headers can not be retrieved by req.getHeader().

The characters are not parsed correctly, when request.getHeader() is called.

6554326

The hardcoded message "ADMIN3594: Configuration changes require a server restart" is not localized.

6565615

In the Japanese locale online help, the description about the PAM for "Editing Authentication Databases" incorrectly states the name of Directory Server.

The description must be read as: "Editing Authentication Databases" PAM -- PAM is the new auth-db supported by Sun Java System Web Server 7.0.

6563951

Search collection subdirectory with leading slash causes confusing error.

When you try to create a search collection and set the document root subdirectory with a leading slash, the error message produced wrongly informs you that a slash at the beginning is needed.

6571208

Inconsistent wording found in Directory listing type.

The sentence "Error response file to use when indexing is None" should be changed to "Error response file to use when listing is None".

6549584

The word "Other" in the list of countries is not translated.

6556225

In the Add Documents window, Included checkbox for subdirectory is not translated.

6565615

Japanese language help: "Editing Authentication Databases" have different description about PAM.

6628918

Translation issue of Admin GUI messages in Japanese.

6628917

Translation issue of GUI installer OLH.

6604075

In Java ES, Web Server 7.0 with Access Manager displays a null pointer exception.

6479062

Web Server fails to start when HTTP listener protocol family="nca" is used for Solaris SPARC, Linux and HP-UX platforms.

Web Server instance does not restart on setting the Protocol-Family property to nca in the EditHTTPListener wizard.

6464953

Setting digestauthstate property through the set-authdb-prop CLI does not validate the value and allows to set junk value for this property.

6504050

The Results page in all Admin Console wizards should be aligned properly.

6473376

The default server.xml should not contain the <stack-size> element.

6367751

The create-instance command fails on remote node intermittently and logs HTTP 400 error.

6547264

Executing the create-instance command immediately after starting a remote node fails on the remote node.

6468132

The list-cert command does not list the certificates if the certificate nickname contains a colon.

6437577

<pkcs11> element not removed from server.xml even when child elements are absent.

6473589

<pkcs11/> added to server.xml when token pin is set.

6534202

Cannot edit WebDAV collection properties through the Admin Console

When a configuration is deployed on multiple nodes, the lockdb path must be a shared location mounted on the same path on all the nodes. Additionally, to list or expire locks in the lockdb from the Admin Console, the same path must be writable from the Administration Server.

6554691

The add-webapp command when used with JSP pre-compilation option does not delete the previously precompiled JSP files.

6556820

The Admin Console or the Admin CLI does not provide support to add CA certificates to the Administration Server.

6489269

'external' expression function with quoted path is not working.

6432375

On HP-UX, SNMP fails for some oid values.

6483212

On HP-UX 11.11, Web Server fails to start when max heap size is 2048 MBytes or greater.

6474011

The basic-search.html has unclear description.

4988156

Installing the standalone product over an existing Java ES installation and vice-versa is not supported.

6610103

On Windows - unable to deploy configuration and start up after disabled Java

6856484

Server should automatically size connection queue, keep-alive subsystem, and file cache.

Issues Resolved in 7.0 Update 1

The following table lists the issues resolved in Sun Java System Web Server 7.0 Update 1.

Problem ID

Description

6390112

Java LDAP connection pool interaction issue - initial connection is never timed out.

Specifying a Java LDAP connection pool through the JVM options in the server.xml file and referencing this with an external JNDI resource when Web Server is started, creates a pooled LDAP connection. With this connection, it is always marked as busy and the connection never expires.

6472223

Values of 'mail-resource' sub elements are not getting set on mail session object.

6487083

NSAPIRequest.setupRequestFields is slow.

com.sun.webserver.connector.nsapi.NSAPIRequest.setupRequestFields is slow primarily because of excessive String-->byte and byte-->String conversion when parsing Cookie headers.

6501785

The servlet container does not use accelerator cache when processing RequestDispatcher includes.

6500647

On Windows, dynamic reloading of JSP produces incorrect output.

6433752

ssl-check is not working with NSAPI based plug-in.

"PathCheck fn="ssl-check" secret-keysize=128 bong file="xxxxx.yyy.html"

For static file requests, if the secret-keysize of the client is less than the size specified by the server and a bong file is present, then the bong file is sent back as the response. However, requests for dynamic content (for example, JSP files) return the actual requested object (for example, the JSP file) rather than the bong file.

6421617

Problem having server-parsed HTML (ParseHTML) and .htaccess with restricted group option.

Authentication succeeds when parsing through a HTML file which has the shtml include entries and is configured to authenticate through .htaccess which has the "restricted by group" option enabled. If the group user gets authenticated, then the result page does not get shtml include entries. This however works fine with the user in .htaccess file has "restricted by user" option.

6489913

SSL session cache cannot be disabled.

Session cache is enabled by default. When the session cache is disabled and URL is accessed through the HTTPs protocol, the URL does not go through and the server log displays an error message indicating that the SSL cannot be configured without session-cache.

6302983

Samples refer to "Sun ONE" instead of "Sun Java System".

The servlet sample, LocaleCharsetServlet.java, co-packaged with Web Server 7.0 refers to "SunONE" instead of "Sun Java System".

6495588

sampleapps/java/webapps/simple docs invalid.

The documents for a simple sample application shows an incorrect pathname. The path should be install-dir/plugins/java/samples/webapps/simple/src instead of install-dir/samples/java/webapps/simple/src.

6347905

No CLI support to configure FastCGI. Need to manually edit obj.conf or magnus.conf files to configure FastCGI.

6504587

Memory leak found in FastCGI.

6479045

Admin Console online help needs to be updated.

The online help needs to be updated for the following:

1. Context-based help should be provided.

2. All screens must have a corresponding help page.

3. Help pages must reflect the changes in the GUI.

4. Inconsistent usage of terminology between the GUI and online help.

5. Fix grammatical errors.

6. Detailed description for some topics.

6482764

Mismatch between online help and the Admin Console.

6498477

Missing help file under config tokens page.

Common Tasks > Edit Configuration > Certificates > PKCS11 Tokens, the help file for this screen is missing.

6479062

Cannot dynamically reconfigure HTTP listener family. The Instance does not start on setting the protocol family to nca.

6482536

<listen-queue-size> upper bound is set to 65535, which is too small. Need to increase the <listen-queue-size> upper bound.

6500715

Incorrect ObjectType fn="force_type" added in object cgi on creation of new cgi directory.

When creating a new cgi directory, an incorrect object type force_type is added to the obj.conf file.

6479247

On Windows, dialog box to enter the token password appears on restarting an instance after the deployment. This behavior is not see on other platforms.

6425144

On Windows, wadm does not update classpath correctly if classpath contains a semicolon (;)

The semicolon in tcl is interpreted as a command terminator, which is used to group multiple commands in a single line. On Windows, semicolon is used as a path separator.

6292582

SNMP Management Information Base (MIB) for "iwsFractionSysMemUsage" does not show correct results

SNMP MIB "Fraction of process memory in system memory" which is part of iws.mib gives wrong results when queried by the SNMP manager utility.

6471744

Incorrect error message is displayed if you execute the list-tokens command without specifying the configuration value.

6471754

Incorrect error message is displayed if you execute the list-authdb-userprops command without specifying the authdb value.

6472210

No error message is displayed if you execute the get-ssl-prop command with an invalid http-listener value.

6476111

Cannot edit the MIME types using the Admin Console.

6478601

Displays an improper message when you stop an instance that does not exist.

An error message `Successfully stopped the server instance' is displayed if you try to stop an instance that does not exist.

6480523

wadm allows you to create a configuration with a negative port number.

6489765

Incorrect error message is displayed if you execute the create-cert-request command with an invalid key-size value.

6489777

The delete-group command displays an incorrect error message if you specify an invalid group value.

6489779

No error message is displayed when you execute the list-group-members command with an invalid group-ID value.

6490728

Cannot set the rewrite-location properties using the set-reverse-proxy-prop command.

You cannot set the -rewrite-location property to false. The value specified for the -rewrite-location is not validated. For example, specifying the = symbol for the i-rewrite-location option corrupts the obj.conf file and results in parser error.

6492315

The set-token-prop command sets wrong passwords in the server.xml file even if the token pin has not been specified.

6492469

Incorrect error message is displayed on LDAP user creation failure.

6494353

If an invalid node name is specified while deleting an instance, an incorrect error message is displayed.

6494950

The register-node command runs successfully with non SSL port only in shell mode.

In shell mode, typing the register-node command with the -no-ssloption registers the node successfully as the command is falsely executed in the SSL mode.

6405018

The get-jvm-propcommand does not print the command when echo is enabled in shell mode.

6499507

Incorrect error messages are displayed when you execute the list-locks and expire-lock commands.

6499510

A 'null' message is displayed if you execute the list-instances, list-crls, list-tokens, and list-certs commands without specifying the configuration name.

6499512

The error message for the list-url-redirects command is not localized.

6500119

wadm prompts for a token pin if you specify an invalid configuration name while trying to delete an existing certificate.

6500146

While creating an HTTP listener using the CLI, the create-http-listener command creates a listener with null value as name.

6500150

If you do not specify a virtual server while executing the list-dav-collections command, an incorrect error message is displayed.

6500151

If you do not specify the authentication database while executing the list-users, list-org-units, list-groups, and list-group-members commands, an incorrect error message is displayed.

6500152

If you do not specify a virtual server while executing the list-uri-patterns command, an incorrect error message is displayed.

6500154

list-userpropsCLI gives improper message.

If you do not specify a JNDI name or specify an invalid JNDI name while executing the list-jdbc-resource-userprops, list-soap-auth-provider-userprops, list-auth-realm-userprops, list-external-jndi-resource-userprops, list-custom-resource-userprops commands, an incorrect error message is displayed.

6503350

Error message given when entering invalid wadm command is misleading.

When you enter an invalid command, an error message "Invalid command <command name>. Use "help" command for a list of valid commands." is displayed. The help man page does not contain a list of valid command. Therefore this error message is misleading.

6503944

The create-user command usage for the LDAP authentication database is ambiguous.

6504095

The set-cert-trust-prop command accepts incorrect properties and does not show proper error message.

6443845

Administration Server does not validate the password length and mechanism support of the given token.

6449506

Certificate with same server name as existing certificate cannot be created with the same nickname.

6461553

Virtual Server Web Applications page title help is incorrect.

6473518

Prompt to enter token pin while starting instance should not appear if configuration has not been deployed.

6476095

Admin Console does not provide an option to edit document directories and CGI records.

6476736

Admin Console should have a tab to add and edit MIME mappings at the Virtual server level.

6478090

`Current Password' field in the Nodes -> Select Administration Server-> Certificates -> Token Password Management page should be disabled if no token password has been set for the administrator.

6490705

Unable to configure uri-pattern specific configurations using the Admin Console.

6496545

Admin Console displays invalid properties when custom authentication database user properties are created through Admin CLI.

6502303

The Admin Console Migrate wizard creates multiple configurations if you click the Finish button multiple times.

6504495

Admin Console has 508 compliance issues.

6504951

User selection process in the Common Tasks->Edit Virtual Server->WebDAV->New page needs validation.

6360666

Installed CRL should have a meaningful name.

6364821

Admin CLI should support URIs, URI prefixes, URI wildcard patterns, and URI regular expressions for all commands that operate on URI space.

6366956

Search schedule events do not work from the Admin Console.

6378612

64-bit instance does not start on 32-bit remote node.

6423391

When a server certificate with data in non-DER format is installed, an incorrect error message is displayed.

6439132

Exceptions in Certificate Installation wizard not clear.

6468676

No validation exists for 'Java Home' field; accepts invalid data.

6474668

HTTP Listener field accepts names with spaces. This is invalid.

6476111

Unable to edit MIME types either using the Admin Console or the CLI.

6483365

GUI and CLI accept Web Server 7.0's server root for migration

The Admin Console and the CLI accept the Web Server 7.0 path instead of Web Server 6.1 or Web Server 6.0 path during migration. Web Server 7.0 path is not a valid path for the server-root property in the migrate-server command.

6492176

Default and null values get stored in obj.conf when a new configuration is created and saved using the Admin Console.

Administration Server stores the values passed by the Admin Console into obj.conf file without any validation.

6497004

SaveConfigException displayed on CLI during set-authdb-prop.

If a nonexistent file path is provided to the path property for keyfile authdb by using the set-authdb-prop command, results in SaveConfigException instead of a File does not exist message.

See the error log for the Administration Server.

6497143

At times, the execution of stop-admin command displays the "Admin Server Not Running" message when the Administration Server is actually running.

6498411

The get-cert-prop does not display only those properties mentioned in the <displayproperties> element.

6500715

Server error on trying to access a file in the cgi-bin directory.

6364702

wadm commands do not return valid error codes [0-125] when success or failure.

6370032

Session failover does not happen with RequestDispatcher include call.

While deploying two web applications on a cluster where the first application calls on the second application using the RequestDispatcher() include call, the persistence valves are not called during the RequestDispatcher ()'s invoke() method, and session replication does not occur.

6381950

Incorrect load factor set for BaseCache.

Session replication does not support more than two web applications.

6381954

Session replication fails to work on multiple web applications involving RequestDispatcher due to bad sequence.

6383313

Incorrect path is set on SR-intanceId cookie.

The SR-instanceId cookie should be set to the web application's path instead of the servlet's path.

6450360

The create-authdb command does not validate the URL at the time of the authentication database (authdb) creation. The create-authdb command successfully creates an authentication database with the wrong URL.

6450800

The get-error-log and the get-access-log commands displays cluttered and improper messages.

6459106

The wadm deploy fails to deploy the cluster configuration.

If any changes occur to the instance configuration files, manually or otherwise, the deploy-config command displays an error message stating that the instance has been modified.

6462891

No Admin Console is available to deploy web applications in user specific location.

6439577

Does not prompt for the token password when the instance is started from the wadm command prompt with a wrong token-pin.

6465470

Incorrect text in Groups settings page.

The text should read as "From this page you can add/remove user groups in the selected Authentication Database" instead of "From this page you add/remove user groups in the selected Authentication Database."

6465480

Incorrect message when you delete a JVM profiler.

The message should read as "Profiler deleted successfully" instead of "Profiler saved successfully".

6466409

Incorrect error message is displayed when you provide a wrong path while adding web application.

6467164

The window titles of the Admin Console wizards are not consistent.

6467785

Admin Console gives incorrect error message when you provide invalid Directory Server configuration values.

6470585

URI prefix of document directories is accepts the value without '\'.

6471737

The list-instances command lists the instances even if you do not specify the configuration value.

6472385

Token password changes made through the CLI is not reflected in GUI. It requires a browser refresh.

6467665

Migrating certificate with an invalid file path using the migrate-jks-keycert command, prompts the user to enter the keystore-password and the key-password.

6469104

The create-selfsigned-cert command allows you to define an inappropriate validity period while creating a server certificate.

6469109

The delete-cert command does not delete a certificate which is created with token "Sun Software PKCS#11 softtoken".

6471649

The list-events command output is not aligned.

6474584

dayofweek does not take "*" as an option.

For example, set an ACL as follows:

acl "uri=/";
deny (all) dayofweek="*";
allow (all) dayofweek="Sat,Sun";

In this program, you are restricting access on all days of week except Saturday and Sunday. This program does not work as you can you can successfully access the ACL on a Monday.

6477840

Admin Console should provide large text region for entering class path prefix, class path suffix, and native library path prefix.

6478165

Usability issues in the Install CRL page after incorrect file path is entered for CRL file on server.

6478229

The Instance->New page has incorrect title.

6478292

The Common Tasks->Select configuration ->Select Virtual Server ->Edit Virtual Server ->WebDAV->New page should have the Enter Users field only if the authentication database is PAM.

6478303

Admin Console allows you to create an ACE without entering user or group information for ACL. The check is not done if the authentication database is PAM.

6478612

Inline help for range of values accepted by Request Header Time-out text field is incorrect.

6500228

The Admin Console displays an exception when you create a duplicate record of a MIME types.

6501807

Deploying a new web application using the Admin Console kills sessions for all existing web applications.

6504748

With delete instance option, instead of deleting the symbolic links, the uninstaller deletes files from symbolic links.

6505994

Crash detected when creating properties with empty URI pattern

6510486

htaccess rules can become corrupted in memory.

If a single .htaccess file has more than five allow or deny rules, some of the rules might become corrupted in memory. If this occurs, some of the rules may be bypassed.

6506936

deploy-configfails when you modify JSPs or any other files in the webapps directory of the instance.

When using the pull-config either through the Admin Console or through the CLI, only the contents of the instance-dir/config directory is pulled into the config-store. In Web Server 7.0, when pull-config was used, the contents were pulled into instance-dir/config, instance-dir/lib, and instance-dir/web-app directories.

6492407

Front-end file accelerator cache.

Depending on ACLs and obj.conf configuration, a front end accelerator cache can service static file requests for URIs that were previously processed using NSAPI. The accelerator cache must work with the default configuration.

6498928

Output directives are not invoked for 0-byte files.

Output directives are not invoked for 0-length responses unless protocol_start_response() is called. send-file does not call protocol_start_response() function. Output directives are not invoked when sending 0-byte files.

6502258

Server crash with large output buffers.

If the output stream buffer size is bigger than the input buffer size, the server might attempt to buffer data at an invalid address. The default input buffer size is 8192 bytes.

6504755

Cannot disable access logging in default server instance.

The value of the <access-log> <enabled> element is ignored in the server.xml file.

6505390

Accelerator cache does not handle ssl-unclean-shutdown properly.

The accelerator cache does not interact correctly with the AuthTrans fn="match-browser" browser="*MSIE*" directive in the default configuration. When such a directive is present, the accelerator cache applies the "unclean shutdown" setting to every connection, regardless of the browser used.

6432375

On HP-UX, SNMP fails for some oid values.

Workaround

Due to lack of the HP-UX API support and complexity, network in and out traffic statistics is not implemented. Use HP tools for monitoring the traffic statistics.

6430293

The AdminException messages displayed on the Admin Console are not localized.

6508299

Displays incorrect characters in search results on the left panel of online help on non-English locales.

6507819

Localized online help content have some differences from the English version.

6536820

Intermittent deploy-config failure while running QA Regression Tests on tinderbox

6486480

service-nsfc-dump entry hit counts are 0 with <replacement>false</replacement>.

If <replacement>false</replacement> is specified in server.xml file, entry hit counts show as 0 in the service-nsfc-dump output. However, the cache hit counts are displayed correctly.

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2017, Oracle and/or its affiliates. All rights reserved.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Pre-General Availability Draft Documentation Notice

If this document is in public or private pre-General Availability status:

This documentation is in pre-General Availability status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

Private Pre-General Availability Draft Documentation Notice

If this document is in private pre-General Availability status:

The information contained in this document is for informational sharing purposes only and should be considered in your capacity as a customer advisory board member or pursuant to your pre-General Availability trial agreement only. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described in this document remains at the sole discretion of Oracle.

This document in any form, software or printed matter, contains proprietary information that is the exclusive property of Oracle. Your access to and use of this confidential material is subject to the terms and conditions of your Oracle Master Agreement, Oracle License and Services Agreement, Oracle PartnerNetwork Agreement, Oracle distribution agreement, or other license agreement which has been executed by you and Oracle and with which you agree to comply. This document and information contained herein may not be disclosed, copied, reproduced, or distributed to anyone outside Oracle without prior written consent of Oracle. This document is not part of your license agreement nor can it be incorporated into any contractual agreement with Oracle or its subsidiaries or affiliates.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.