Oracle® iPlanet Web Proxy Server

Release Notes

Release 4.0.28

E18782-14

October 2016

Oracle iPlanet Web Proxy Server Release Notes, Release 4.0.28

E18782-14

Copyright © 2001, 2016, Oracle and/or its affiliates. All rights reserved.

Primary Author:  Rajendra Pokle

Contributing Author:

Contributor:

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Contents

List of Tables

Preface

- Audience

- Documentation Accessibility

- Conventions

1 Oracle iPlanet Web Proxy Server 4.0.28 Release Notes

- 1.1 Features and Enhancements in Oracle iPlanet Web Proxy Server 4.0.28

- 1.2 Issues Resolved in Oracle iPlanet Web Proxy Server 4.0.28

- 1.3 Product Patches for Oracle iPlanet Web Proxy Server 4.0.28

- 1.4 Hardware and Software Requirements

- 1.4.1 Supported Platforms

- 1.4.2 System Virtualization Support

- 1.4.3 Swap Space

- 1.4.4 Operating System Patches

- 1.4.4.1 Solaris Patches

- 1.4.4.2 Linux Patches

- 1.4.5 Supported Browsers

- 1.4.6 Deprecation Notices

- 1.5 Supported Software, Technologies, and Protocols

- 1.5.1 Transparent Proxy

- 1.5.2 URL Mapping

- 1.5.3 Monitoring Server Parameters

- 1.5.4 Embedded DNS Resolution

- 1.5.5 ACL Cache Tuning

- 1.5.6 Cache PURGE Feature

- 1.5.7 Internet Protocol Version 6 (IPv6) Support

- 1.5.8 NSS and NSPR Support

- 1.5.9 Modified FTP Transfer Mode

- 1.5.10 Upgrade Support

- 1.5.11 Disk Space and Memory

- 1.5.12 Enhanced Hardware Accelerator Encryption Support

- 1.5.13 Impact of U.S. DST Changes 2007

2 Known Issues

- 2.1 Oracle iPlanet Web Proxy Server 4.0 Administration Issues

- 2.2 Oracle iPlanet Web Proxy Server 4.0 Caching Issues

- 2.3 Oracle iPlanet Web Proxy Server 4.0 Installation Issues

- 2.4 Oracle iPlanet Web Proxy Server 4.0 Internationalization Issues

- 2.5 Oracle iPlanet Web Proxy Server 4.0 Localization Issues

- 2.6 Oracle iPlanet Web Proxy Server 4.0 SOCKS Issues

3 Product Documentation

- 3.1 Documentation Set

- 3.2 Corrections and Updates to 4.0 Documentation

- 3.2.1 Clarification About JRE Information in the Certification Matrix

- 3.2.2 Increase in the Maximum Cache Capacity

- 3.2.3 %Req->vars.xfer-time% Option of the flex-init Function

- 3.2.4 clf-request-leading-whitespace Parameter of the flex-log SAF

- 3.2.5 New Parameters of the um-define-junction SAF

- 3.2.6 Clarification About Unit of Time Used for the%duration% Log Option

- 3.2.7 Clarification About the Need to Explicitly Select New Directory Services

- 3.2.8 Information About the admin.conf File

- 3.2.9 Date and Time Parameters of the <Client> Tag

- 3.2.10 Information About Parameters of the http-client-config SAF

- 3.2.11 <Include> Tag in the obj.conf File

- 3.2.12 lookup-ipv6-first Parameter of the dns-config SAF

- 3.2.13 regexp-redirect Function of the NameTrans Directive

- 3.2.14 status-code and status-desc Parameters of the send-error SAF

- 3.2.15 New Directives in the magnus.conf File

- 3.2.16 Description for Cache Finish Status in the Access Log File

- 3.2.17 maxrequestsperconnection parameter is supported for the LS Element

- 3.2.18 Description of virt-map SAF

- 3.2.19 Specifying IP Address in ACL Configurations

- 3.2.20 Manually Generating a PAC File

- 3.2.21 Regarding Cache Partition Size

- 3.2.22 Regarding In-memory File Cache in Oracle iPlanet Web Proxy Server

- 3.2.23 Using Proxy Arrays

- 3.2.24 Information About the forward-auth-user SAF

- 3.2.25 Information About New Attributes of FILECACHE Element

- 3.2.26 Information About the blockingaccept Parameter

- 3.2.27 Information About the timeout Property for dbswitch.conf Configuration File

- 3.2.28 Information About the URL-Filter Function

- 3.2.29 Information about the NetWriteTimeout magnus.conf Parameter

- 3.2.30 Information about the New Parameter enable-ipv6 for Internal dns-lookup

- 3.2.31 New SAF host-dns-cache-config to Control DNS Cache Behavior

- 3.2.32 Information about the -P option of the flexanlg command

- 3.2.33 Change in HTTP 407 Error Page from 4.0.10

- 3.2.34 Compressed Content Cannot be Rewritten by Content URL Rewriting

- 3.2.35 Change in the cbuild command from Proxy Server 4.0.5

- 3.2.36 keep-alive-timeout-absolute Parameter of the http-client-config SAF

- 3.2.37 Information about the sleepinterval server.xml Parameter

- 3.2.38 New Parameter in the socks5.conf file

- 3.3 Documentation, Support, and Training

A Features and Enhancements in Previous Oracle iPlanet Web Proxy Server 4.0 Releases

- A.1 Features and Enhancements in 4.0.27

- A.2 Features and Enhancements in 4.0.26

- A.3 Features and Enhancements in 4.0.25

- A.4 Features and Enhancements in 4.0.24

- A.5 Features and Enhancements in 4.0.23

- A.6 Features and Enhancements in 4.0.22

- A.7 Features and Enhancements in 4.0.21

- A.8 Features and Enhancements in 4.0.20

- A.9 Features and Enhancements in 4.0.19

- A.10 Features and Enhancements in 4.0.18

- A.11 Features and Enhancements in 4.0.17

- A.12 Features and Enhancements in 4.0.16

- A.13 Features and Enhancements in 4.0.15

- A.14 Features and Enhancements in 4.0.14

B Issues Resolved in Previous Oracle iPlanet Web Proxy Server 4.0 Releases

- B.1 Issues Resolved in 4.0.27

- B.2 Issues Resolved in 4.0.26

- B.3 Issues Resolved in 4.0.25

- B.4 Issues Resolved in 4.0.24

- B.5 Issues Resolved in 4.0.23

- B.6 Issues Resolved in 4.0.22

- B.7 Issues Resolved in 4.0.21

- B.8 Issues Resolved in 4.0.20

- B.9 Issues Resolved in 4.0.19

- B.10 Issues Resolved in 4.0.18

- B.11 Issues Resolved in 4.0.17

- B.12 Issues Resolved in 4.0.16

- B.13 Issues Resolved in 4.0.15

- B.14 Issues Resolved in 4.0.14

- B.15 Issues Resolved in 4.0.13

- B.16 Issues Resolved in 4.0.12

- B.17 Issues Resolved in 4.0.11

- B.18 Issues Resolved in 4.0.10

- B.19 Issues Resolved in 4.0.9

- B.20 Issues Resolved in 4.0.8

- B.21 Issues Resolved in 4.0.7

- B.22 Issues Resolved in 4.0.6

- B.23 Issues Resolved in 4.0.5

- B.24 Issues Resolved in 4.0.4

- B.25 Issues Resolved in 4.0.3

- B.26 Issues Resolved in 4.0.2

- B.27 Issues Resolved in 4.0.1

Index

List of Tables

- 1-1 Issues Resolved in Oracle iPlanet Web Server 4.0.28

- 2-1 Known Issues in Administration

- 2-2 Known Issues in Caching

- 2-3 Known Issues in Installation

- 2-4 Known Issues in Internationalization

- 2-5 Known Issues in Localization

- 2-6 Known Issues in SOCKS

- 3-1 Oracle iPlanet Web Proxy Server 4.0.14 Documentation Set

- 3-2 New Parameters of the um-define-junction SAF

- 3-3 Parameters of the http-client-config SAF

- 3-4 magnus.conf Directives

- 3-5 Cache Finish Status

- 3-6 New Attributes Introduced in 4.0.19 for the FILECACHE Element

- B-1 Issues Resolved in Oracle iPlanet Web Server 4.0.27

- B-2 Issues Resolved in Oracle iPlanet Web Server 4.0.26

- B-3 Issues Resolved in Oracle iPlanet Web Server 4.0.25

- B-4 Issues Resolved in Oracle iPlanet Web Server 4.0.24

- B-5 Issues Resolved in Oracle iPlanet Web Server 4.0.23

- B-6 Issues resolved in Oracle iPlanet Web Proxy Server 4.0.22

- B-7 Issues resolved in Oracle iPlanet Web Proxy Server 4.0.21

- B-8 Issues Resolved in Oracle iPlanet Web Proxy Server 4.0.20

- B-9 Issues Resolved in Oracle Proxy Server 4.0.19

- B-10 Issues Resolved in Proxy Server 4.0.18

- B-11 Issues Resolved in Proxy Server 4.0.17

- B-12 Issues resolved in Proxy Server 4.0.16

- B-13 Issues Resolved in Proxy Server 4.0.15

- B-14 Issues Resolved in Proxy Server 4.0.14

- B-15 Issues Resolved in Proxy Server 4.0.13

- B-16 Issues Resolved in Proxy Server 4.0.12

- B-17 Issues Resolved in Proxy Server 4.0.11

- B-18 Issues Resolved in Proxy Server 4.0.10

- B-19 Issues Resolved in Proxy Server 4.0.9

- B-20 Issues Resolved in Proxy Server 4.0.8

- B-21 Issues Resolved in Proxy Server 4.0.7

- B-22 Issues Resolved in Proxy Server 4.0.6

- B-23 Issues Resolved in Proxy Server 4.0.5

- B-24 Issues Resolved in Proxy Server 4.0.4

- B-25 Issues Resolved in Proxy Server 4.0.3

- B-26 Issues Resolved in Proxy Server 4.0.2

- B-27 Issues Resolved in Proxy Server 4.0.1

Preface

Oracle iPlanet Web Proxy Server (also referred to as Proxy Server in this document) represents the HTTP caching and acceleration foundation for high-performance Internet and intranet environments. Oracle iPlanet Web Proxy Server is a system for caching and filtering web content and boosting network performance, offering integration with the entire network infrastructure, cross-platform support, and centralized management capabilities.

The information in this document is organized as follows:

- Chapter 1, "Oracle iPlanet Web Proxy Server 4.0.28 Release Notes" contains information about the features, enhancements, and issues resolved in the current release of Oracle iPlanet Web Proxy Server; the hardware and software requirements; and installation, migration, and upgrade notes.

- Chapter 2, "Known Issues" lists the important known issues and limitations at the time of the current release of Oracle iPlanet Web Proxy Server.

- Chapter 3, "Product Documentation" presents an overview of the Oracle iPlanet Web Proxy Server documentation; describes the documentation corrections, enhancements, and issues resolved; and provides information about how to access documentation, support, and training resources.

- Appendix A, "Features and Enhancements in Previous Oracle iPlanet Web Proxy Server 4.0 Releases" describes the features and enhancements in previous releases of the product.

- Appendix B, "Issues Resolved in Previous Oracle iPlanet Web Proxy Server 4.0 Releases" lists the issues resolved in previous releases of the product.

Audience

This book is intended for Web Server administrators to manage the server in production environments. The guide assumes familiarity with the following areas:

- Installing software

- Using web browsers

- Performing basic system administration tasks

- Issuing commands in a terminal window

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Oracle iPlanet Web Proxy Server 4.0.28 Release Notes

This chapter contains information about the features, enhancements, and resolved issues in the 4.0.28 release of Oracle iPlanet Web Proxy Server. Read this document before installing and configuring Oracle iPlanet Web Proxy Server, and then periodically thereafter for the most up-to-date information. This chapter also provides information about the platforms, software, technologies, and protocols that the latest release supports.

This chapter contains the following sections:

- Features and Enhancements in Oracle iPlanet Web Proxy Server 4.0.28

- Issues Resolved in Oracle iPlanet Web Proxy Server 4.0.28

- Product Patches for Oracle iPlanet Web Proxy Server 4.0.28

- Hardware and Software Requirements

- Supported Software, Technologies, and Protocols

1.1 Features and Enhancements in Oracle iPlanet Web Proxy Server 4.0.28

There are no new features or enhancements in Oracle iPlanet Web Proxy Server 4.0.28.

For information about the new features and enchancements in the previous Oracle iPlanet Web Proxy Server releases, see Appendix A.

1.2 Issues Resolved in Oracle iPlanet Web Proxy Server 4.0.28

Table 1-1 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.28. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table 1-1 Issues Resolved in Oracle iPlanet Web Server 4.0.28

Issue ID

Summary

22591150

Need an option to disable/suppress the warning header.

23074461

NSS Upgrade to 3.25 or later.

23614417

iPlanet Web Proxy Server enabled with only TLS 1.1 and TLS 1.2 fails to start.

24557798

Version changes for 4.0.28.

For information about issues resolved in the previous Proxy Server releases, see Appendix B.

1.3 Product Patches for Oracle iPlanet Web Proxy Server 4.0.28

The following table lists the issue IDs available for Oracle iPlanet Web Proxy Server 4.0.28 on My Oracle Support (http://support.oracle.com).

Platform

Issue ID

Oracle Solaris SPARC (32-bit)

24671497

Oracle Solaris on x86 (32-bit)

24671497

HP-UX PA-RISC (32- bit)

24671497

Linux x86-64 (Linux 6)

24671497

Linux x86 (Linux 6)

24671497

Microsoft Windows (32-bit)

24671497

1.4 Hardware and Software Requirements

This section provides information about the hardware and software requirements of Oracle iPlanet Web Proxy Server 4.0.28.

This section includes the following topics:

- Supported Platforms

- System Virtualization Support

- Swap Space

- Operating System Patches

- Supported Browsers

- Deprecation Notices

1.4.1 Supported Platforms

Complete information about supported operating environments and hardware for Oracle iPlanet Web Proxy Server 4.0.28 is available in the Oracle iPlanet Web Proxy Server 4.0.14+ Certification Matrix, which is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

1.4.2 System Virtualization Support

System virtualization is a technology that enables multiple operating system (OS) instances to execute independently on shared hardware. Functionally, software deployed to an OS hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Oracle performs testing of its products on select system virtualization and OS combinations to help validate that Oracle products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems.

For information about support for Oracle products in virtualized environments, see:

http://www.oracle.com/technetwork/middleware/ias/oracleas-supported-virtualization-089265.html

1.4.3 Swap Space

In addition to the requirements provided in Oracle iPlanet Web Proxy Server 4.0.14+ Certification Matrix, your system must also have adequate swap space:

- Solaris requires a swap space that is at least as large as the amount of RAM on your system (twice the amount of RAM is recommended).

- Linux requires 256 megabytes of swap space.

1.4.4 Operating System Patches

It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.

1.4.4.1 Solaris Patches

The following is the required patch level for Oracle iPlanet Web Proxy Server 4.0.28 on Solaris SPARC and x86:

- Solaris 8 (SPARC): 108434-18 (shared library patch for C++)

- Solaris 9 (SPARC): 111711-12 (shared library patch for C++)

- Solaris 9 (x86): 111713-12 (shared library patch for C++)

- Solaris 10 (SPARC): NOT REQUIRED

- Solaris 10 (x86): 119964-03 (shared library patch for C++)

1.4.4.2 Linux Patches

The following are the required patch levels for Oracle iPlanet Web Proxy Server 4.0.28 in Linux:

- Red Hat Enterprise Linux Advanced Server 3: compat-libstdc++-7.3-2.96.128.rpm

- Red Hat Enterprise Linux Advanced Server 4: compat-libstdc++-33-3.2.3-47.3.rpm, compat-libstdc++-296-2.96-132.7.2.rpm

- SUSE Linux Enterprise Server 10 service pack 3: libstdc++33-3.3.3-7.8.1.rpm

- SUSE Linux Enterprise Server 11 service pack 1: libstdc++33-3.3.3-11.9.rpm

1.4.5 Supported Browsers

Complete information about supported web browsers for Oracle iPlanet Web Proxy Server 4.0.28 is available in Oracle iPlanet Web Proxy Server 4.0.14+ Certification Matrix, which is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

1.4.6 Deprecation Notices

Operating System Versions. As of the release of Oracle iPlanet Web Proxy Server 4.0.16, the following operating system versions are deprecated and will become unsupported in a future release of Oracle iPlanet Web Proxy Server:

HP-UX 11.11
Microsoft Windows 2000 Server and Windows 2000 Advanced Server
Red Hat Enterprise Linux Advanced Server 3
Solaris 8
Solaris 9 for SPARC and x86

Web Browser Versions. As of the release of Oracle iPlanet Web Proxy Server 4.0.16, the following web browser versions are deprecated and will become unsupported in a future release of Oracle iPlanet Web Proxy Server:

Microsoft Internet Explorer 6
Mozilla 1.4.1 and 1.7.2
Netscape Navigator 7.1 and 7.2

1.5 Supported Software, Technologies, and Protocols

The recent releases of Oracle iPlanet Web Proxy Server include the enhancements described in the following subsections.

1.5.1 Transparent Proxy

Oracle iPlanet Web Proxy Server 4.0 supports transparent proxy for HTTP/1.1 connections. Transparent proxying involves intercepting and processing web requests by using the proxy server, without the knowledge or control of clients. For example, a router for a local network is configured to redirect incoming TCP connections to the local port, in which the proxy server is active.

Add the following directive to the proxy server default object in the obj.conf file:

NameTrans fn="host-map"

This configuration enables the proxy server to use the HTTP Host: header of incoming requests to identify and redirect the request to the target remote server.

Note:
Transparent proxy servers that decide connections based on the HTTP Host: headers are vulnerable to fake HTTP Host: headers forged through the active content. Therefore, suitable ACL configurations must be implemented to prevent connections to web sites that might host malicious content.

1.5.2 URL Mapping

URL mapping was implemented in Oracle iPlanet Web Proxy Server 4.0.8. It enables Oracle iPlanet Web Proxy Server to act as a reverse proxy. This feature enables Oracle iPlanet Web Proxy Server to provide a single front-end host name for back-end application servers. Based on a requester's URI, access is provided to back-end servers.

For more information about URL mapping, see "Reverse Proxy Scenario" in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

For information about Server Application Functions (SAFs) used in URL mapping, see "Server Application Functions (SAFs)" in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

1.5.3 Monitoring Server Parameters

The monitoring capabilities of Oracle iPlanet Web Proxy Server provide a detailed list of the server parameters that you can monitor at instance level.

From the Proxy Administration Server, you can perform the following actions:

- View server statistics at an instance level

- Enable or disable parameters at an instance level

To monitor the server, do the following:

1. Access the Administration Server

2. Click the Instance link from the Manage Servers page

3. Click the Server Status tab

4. Click the Monitor Current Activity tab

5. Set the Monitoring Current Activity to ON to monitor the server
You can also refresh the server in intervals of 5,10, and 15 seconds and view the statistics of the DNS, Keep-Alive, Cache, Server Requests, and Work Thread connections.

1.5.4 Embedded DNS Resolution

The embedded DNS supports the nondefault name resolution. The DNS client interacts with a DNS server to perform the name resolution. The new SAF dns-lookup, receives the DNS server's IP address as a server argument. This IP address should be added as a DNS directive in the obj.conf file.

In the following example, the IP address of the DNS server is specified in the server parameter:

<object>
....
DNS fn="dns-lookup" server="170.168.10.3"
...
</object>

In the following example, you can add multiple DNS server IPs to dns-lookup-init, and it will be used in a round-robin model. In this scenario, do not add DNS server IP address to dns-lookup. If DNS server parameters are added to both dns-lookup and dns-lookup-init, the dns-lookup argument will take precedence.

...
<Object>
...
DNS fn="dns-lookup"
....
Init fn="dns-lookup-init" servers="170.168.10.3, 170.158.10.4"
</Object>

Information about the Parameter cont

The dns-lookup SAF takes a cont parameter (for continue), which is true by default. If the embedded DNS resolution fails, the server reverts to the system DNS resolution. If set to false, the server reports an error when embedded DNS resolution fails.

1.5.5 ACL Cache Tuning

ACLCacheMax is a magnus.conf parameter that sets a limit to the total number of ACLs stored in the ACL cache. There is no default value for ACLCacheMax and it should be configured for a specific limit.

For example, ACLCacheMax 16384

Note:
The ACL cache in this context does not refer to the ACL user cache. It refers to a cache where ACLs are applicable to specific URLs that are cached for performance reasons.

GCAtStartup is a magnus.conf parameter that allows a Boolean value. By default, the value is false; if set to true, cache garbage collector clears the garbage during the server startup. This can increase the server startup time when the cache size is large.

1.5.6 Cache PURGE Feature

Oracle iPlanet Web Proxy Server allows PURGE requests to clear the cached URL. If the requested URL is purged successfully, a response with an HTTP status code of 200 (OK) is sent by the server. If the specified URL is not cached, a 404 (Not Found) response is sent.

In the following example, the server returns the value 200:

bash-2.03$ telnet localhost 8088
Trying 172.9.10.1...
Connected to localhost.
Escape character is '^]'.
PURGE http://foo.com/ HTTP/1.0

HTTP/1.1 200 OK
Server: Oracle-iPlanet-Proxy-Server/4.0
Date: Fri, 26 Oct 2007 08:15:30 GMT
Connection: close

In the following example, the server returns the value 404:

Connection closed by foreign host.
bash-2.03$ telnet localhost 8088
Trying 172.9.10.1...
Connected to localhost.
Escape character is '^]'.
PURGE http://foo.com/ HTTP/1.0

HTTP/1.1 404 Not Found
Server: Oracle-iPlanet-Proxy-Server/4.0
Date: Mon, 17 Sep 2007 10:13:28 GMT
Content-length: 96
Content-type: text/html
Connection: close

1.5.7 Internet Protocol Version 6 (IPv6) Support

You can connect to an IPv6-enabled web site through Oracle iPlanet Web Proxy Server 4.0.11. Proxy Server also supports the ftp extension for IPv6 in default (passive) mode.

1.5.8 NSS and NSPR Support

Oracle iPlanet Web Proxy Server 4.0.28 supports Network Security Services (NSS) 3.25 and Netscape Portable Runtime (NSPR) 4.11.

1.5.9 Modified FTP Transfer Mode

From the Oracle iPlanet Web Proxy Server 4.0.6 release, support for extended address passive port (EPSV) mode has been introduced.

1.5.10 Upgrade Support

From the Oracle iPlanet Web Proxy Server 4.0.2 release, the installer supports the upgrade of an existing Oracle iPlanet Web Proxy Server 4.0 installation to the later release. For the Java Enterprise System installations of Oracle iPlanet Web Proxy Server 4.0.1, you must install the patches that correspond to the later release.

1.5.11 Disk Space and Memory

The minimum required memory for installing Oracle iPlanet Web Proxy Server is 512 MB. The minimum recommended disk space for installing Oracle iPlanet Web Proxy Server is 550 MB.

1.5.12 Enhanced Hardware Accelerator Encryption Support

Oracle iPlanet Web Proxy Server 4.0.12 provides hardware accelerator support for Sun Crypto Accelerator 6000, a cryptographic accelerator board that enhances the performance of SSL on Oracle iPlanet Web Proxy Server.

1.5.13 Impact of U.S. DST Changes 2007

Daylight Savings Time (DST) starts in U.S.A from the 2nd Sunday of March and ends on the 1st Sunday of November. This impacts the date and time rules of the operating system.

To ensure that the log files contain the correct time in US time zones, and that the Administration Server is not impacted by this change, do the following:

- Download and install the appropriate operating system patches.
For other platforms, download similar DST-compatible patches from the respective operating system vendor's web site.

- For Solaris, Windows, and Linux, run Oracle iPlanet Web Proxy Server with JRE 1.5.0_12. For HP-UX, run Oracle iPlanet Web Proxy Server with JRE 1.5.0_12.

2 Known Issues

This chapter describes known issues and limitations in Oracle iPlanet Web Proxy Server 4.0 release.

This chapter contains the following sections:

- Oracle iPlanet Web Proxy Server 4.0 Administration Issues

- Oracle iPlanet Web Proxy Server 4.0 Caching Issues

- Oracle iPlanet Web Proxy Server 4.0 Installation Issues

- Oracle iPlanet Web Proxy Server 4.0 Internationalization Issues

- Oracle iPlanet Web Proxy Server 4.0 Localization Issues

- Oracle iPlanet Web Proxy Server 4.0 SOCKS Issues

2.1 Oracle iPlanet Web Proxy Server 4.0 Administration Issues

Table 2-1 lists the known issues related to the administration user interface.

Table 2-1 Known Issues in Administration

Issue ID

Summary

6653507

If Monitor Current Activity Statistics/Profiling is set to ON, it cannot be turned OFF from the user's interface.

6212701

Conflicting error messages are displayed when server instance fails to start.

The chances of occurrence of the conflicting error messages are minimal because the chances of the administration interface writing wrong information in the configuration file is minimal. It can occur only if the user manually writes wrong information into the configuration file.

6231297

The Restart Required link disappears if changes are made to the SOCKS configuration and Oracle iPlanet Web Proxy Server is restarted instead of the SOCKS server.

6484502

Oracle iPlanet Web Proxy Server administration interface is not localized.

6509535

Daylight Savings Time (DST) will start in U.S.A from the 2nd Sunday of March and end on the 1st Sunday of November. This will impact the date and time rules of the operating system and JRE.

In the standalone version of Oracle iPlanet Web Proxy Server, the JRE version compatible with 2007 DST changes is bundled with the installer. However, you need to address the impact on the date and time rules of the operating system by installing the appropriate operating system patches as explained in Step 1 of the Workaround.

For the Java ES 5 installation of Oracle iPlanet Web Proxy Server, you need to install the operating system patches and also the compatible version of JRE. Follow Step 1 and Step 2 of the workaround.

Workaround

1. Download and use the appropriate operating system patches.
For other platforms, download similar DST-compatible patches from the operating system vendor's web site.

2. For Solaris, Windows, and Linux, run Oracle iPlanet Web Proxy Server with JRE 1.4.2_13. For HP-UX, run Oracle iPlanet Web Proxy Server with JRE 1.4.2.12.

6867774

The Administration Server fails to start when a proxy installation that uses a custom JDK configuration is upgraded to a service pack version that requires a newer JDK version. After the upgrade, the JDK configuration must be manually modified to point to either the bundled JDK or a custom JDK of the required version.

6909558

Backslashes should be used in LDAP UIDs only to escape special characters. The ldap sdk used by the Oracle iPlanet Web Proxy Server will remove backslashes from the UID before sending the same to the directory server. This can possibly lead to a situation where the authentication fails where it should succeed (because the UID, with backslashes stripped, finds no match in the directory server), or even succeeds where it should fail (because the UID, with backslashes stripped, finds a match in the directory server).

6888170

Upgrade fails on RHEL4 when the specified target directory name contains a trailing slash.

12307267

Fails to migrate from Oracle iPlanet Web Proxy Server 3.6 to Oracle iPlanet Web Proxy Server 4.0 with Security Sockets Layer (SSL) configuration.

Currently, Web Proxy 3.6 certificates cannot be migrated to a Web Proxy 4.0 instance.

Workaround:

1. Turn off the security option in the Oracle iPlanet Web Proxy Server 3.6 instance.

2. Migrate from Oracle iPlanet Web Proxy Server 3.6 to 4.0.

3. Generate a certificate signing request (CSR).

4. Create and install certificates to enable security on the Oracle iPlanet Web Proxy Server 4.0 instance.

2.2 Oracle iPlanet Web Proxy Server 4.0 Caching Issues

Table 2-2 lists the known issues related to caching.

Table 2-2 Known Issues in Caching

Issue ID

Summary

6654514

Proxy-agent header displays the original header for request type 504.

6229823

When a new partition is added, a default section s0.0 is also created irrespective of the partition size. Warning messages are logged in the errors file.

Workaround

Use the cbuild utility to add the new partition or delete the s0.0 folder under the new cache partition, and restart Oracle iPlanet Web Proxy Server.

The error messages can be ignored.

6619620

Doc RFE: Oracle iPlanet Web Proxy Server should not be used with Network Cache Accelerator (NCA).

When Oracle iPlanet Web Proxy Server 4.0.8 is used with NCA, a browser repeatedly prompts for the User ID and password. This happens because NCA does not support Oracle iPlanet Web Proxy Server-specific headers such as Proxy-authorization.

Workaround

Do not select NCA in the Proxy Listen Socket setting.

2.3 Oracle iPlanet Web Proxy Server 4.0 Installation Issues

Table 2-3 lists the known issues related to installation.

Table 2-3 Known Issues in Installation

Issue ID

Summary

6205683

Windows console installation fails.

6255325

The installer throws an exception and the installation fails on Linux if the user installs Oracle iPlanet Web Proxy Server as a non root user and the /var/opt/sun/install directory does not exist.

6353576

Silent upgrade installation does not work.

6587776

Oracle iPlanet Web Proxy Server from Java ES 5 on Windows XP displays system error 1067.

6756659

Oracle iPlanet Web Proxy Server 4.0.9 can be installed on OpenSolaris by using the GUI installer only if the --javahome option of the setup command is used to specify a JDK 1.6 location.

6607551

On Windows, uninstalling the patch does not change the Oracle iPlanet Web Proxy Server release to the previous release number.

Reverting the patch through the Uninstaller script does not change the service description name to the previous Oracle iPlanet Web Proxy Server release due to the RenameService.exe utility limitations. Therefore, even after uninstalling the patch, the service description shows the latest Oracle iPlanet Web Proxy Server release instead of the previous release number.

12951802

Fix CR:6932016-Verisign EV cert chain issue with newly built in CA root 4.0.16

Workaround

If you are using Verisign EV 2048-bit SSL web proxy server certificates, some older browsers may have "Certificate Authority Not Trusted" warning after you upgrade from web proxy 4.x.x prior versions to web proxy 4.x.x update or later. Follow these steps to overcome this problem:

1. Stop the web proxy server.

2. Execute cd <proxy instance dir>/config

3. To list the Root Certs module, execute modutil -list -nocertdb -dbdir

4. Execute modutil -dbdir . -delete 'Root Certs'

5. Execute modutil -list -nocertdb -dbdir
The Root Certs module is removed.

6. Start the web proxy server.
If you upgrade to a higher version once the above process is implemented, make sure to follow the same process in the upgraded version as well.

2.4 Oracle iPlanet Web Proxy Server 4.0 Internationalization Issues

Table 2-4 lists the known issues related to internationalization.

Table 2-4 Known Issues in Internationalization

Issue ID

Summary

6233080

The Disable Proxying option does not work for the URL with multibyte data (URL encoded) when routing is set through another proxy server.

6233090

A URL with multibyte data (URL encoded) cannot be mapped.

6253844

Oracle iPlanet Web Proxy Server online help does not support the language zh-cn.

6297168

Starting the server in a different system encoding causes any errors returned by that particular system to be logged in the error log. When viewed through the Administration Server, the error log might have characters in the system encoding that do not display properly.

Workaround

Change the browser encoding to match the OS locale so that the error log can be properly viewed through the administration interface. But this will be needed every time you move to other pages and then return to View Error Log.

6300080

Oracle iPlanet Web Proxy Server's content rewriting function is inconsistent.

6526476 and 6526488

In a standalone installation of Oracle iPlanet Web Proxy Server on HP-UX, the installation in GUI mode results in the display of corrupted Japanese characters (ID no. 6526476). If the installation is continued, it results in error while creating an instance (ID no. 6526488).

Workaround

You can use either of the following workarounds:

- Use the CLI mode of installation for Japanese locale on HP-UX.

- Continue the installation even with the corrupted display of characters. When the installer fails to create an instance, log in to the administration interface and create an instance.

6550995

The following error message is not localized for all the locales:

HTTP7774: received extraneous data following response

2.5 Oracle iPlanet Web Proxy Server 4.0 Localization Issues

Table 2-5 lists the know issues related to Localization.

Table 2-5 Known Issues in Localization

Issue ID

Summary

6779070

The Oracle iPlanet Web Proxy Server online help has broken links for Terms of Use.

6253844

The set language option in the Oracle iPlanet Web Proxy Server online help does not support the language zh-cn.

6828246

The Korean characters are not displayed in the Oracle iPlanet Web Proxy Server installer on RHEL 5.2.

2.6 Oracle iPlanet Web Proxy Server 4.0 SOCKS Issues

Table 2-6 lists the known issues related to SOCKS.

Table 2-6 Known Issues in SOCKS

Issue ID

Summary

6245453

The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented.

6263389

No error is reported when two instances of SOCKS are started using the same port on Windows.

6285791

SOCKS server start command-line issue for Java ES 4 is resolved in release 4.0.5, but existing instances created in Java ES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in a standalone installation of Oracle iPlanet Web Proxy Server.

3 Product Documentation

The Oracle iPlanet Web Proxy Server 4.0 documentation is provided in a number of ways:

- Manuals - You can view the Oracle iPlanet Web Proxy Server 4.0 manuals and release notes in HTML and in printable PDF formats.

- Online help - Click the Help button in the graphical interface to search a context-sensitive help window.

Oracle iPlanet Web Proxy Server 4.0.14 is the last release for which the entire documentation set for Oracle iPlanet Web Proxy Server 4.0 was updated. Subsequent to the 4.0.14 release, updates and corrections to Oracle iPlanet Web Proxy Server 4.0 documentation are provided in this Release Notes document; see Section 3.2, "Corrections and Updates to 4.0 Documentation."

This chapter contains the following sections:

- Documentation Set

- Corrections and Updates to 4.0 Documentation

- Documentation, Support, and Training

3.1 Documentation Set

The Oracle iPlanet Web Proxy Server 4.0 documentation is available at:

http://docs.oracle.com/cd/E21692_01/index.htm

Table 3-1 Oracle iPlanet Web Proxy Server 4.0.14 Documentation Set

Document Title

Contents

Release Notes (this document)

Summarizing the Oracle iPlanet Web Proxy Server release:

- Late-breaking information about the software and the documentation

- New features

- Supported platforms and environments

- System requirements

- Known issues and workarounds

Installation and Migration Guide

Performing installation and migration tasks:

- Installing Oracle iPlanet Web Proxy Server

- Migrating from release 3.6 to release 4.0

Administration Guide

Performing administration and management tasks:

- Using the administration and command-line interfaces

- Configuring server preferences

- Managing users and groups

- Monitoring and logging server activity

- Using certificates and public key cryptography to secure the server

- Controlling server access

- Proxying and routing URLs

- Caching

- Filtering content

- Using a reverse proxy

- Using SOCKS

Configuration File Reference

Editing configuration files

NSAPI Developer's Guide

Creating custom Netscape Server Application Programming Interface (NSAPI) plugins

Performance Tuning, Sizing, and Scaling Guide

Tuning Oracle iPlanet Web Proxy Server to optimize performance

3.2 Corrections and Updates to 4.0 Documentation

The following sections describe corrections and updates to Oracle iPlanet Web Proxy Server 4.0.14 documentation:

- Section 3.2.1, "Clarification About JRE Information in the Certification Matrix"

- Section 3.2.2, "Increase in the Maximum Cache Capacity"

- Section 3.2.3, "%Req->vars.xfer-time% Option of the flex-init Function"

- Section 3.2.4, "clf-request-leading-whitespace Parameter of the flex-log SAF"

- Section 3.2.5, "New Parameters of the um-define-junction SAF"

- Section 3.2.6, "Clarification About Unit of Time Used for the%duration% Log Option"

- Section 3.2.7, "Clarification About the Need to Explicitly Select New Directory Services"

- Section 3.2.8, "Information About the admin.conf File"

- Section 3.2.9, "Date and Time Parameters of the <Client> Tag"

- Section 3.2.10, "Information About Parameters of the http-client-config SAF"

- Section 3.2.11, "<Include> Tag in the obj.conf File"

- Section 3.2.12, "lookup-ipv6-first Parameter of the dns-config SAF"

- Section 3.2.13, "regexp-redirect Function of the NameTrans Directive"

- Section 3.2.14, "status-code and status-desc Parameters of the send-error SAF"

- Section 3.2.15, "New Directives in the magnus.conf File"

- Section 3.2.16, "Description for Cache Finish Status in the Access Log File"

- Section 3.2.17, "maxrequestsperconnection parameter is supported for the LS Element"

- Section 3.2.18, "Description of virt-map SAF"

- Section 3.2.19, "Specifying IP Address in ACL Configurations"

- Section 3.2.20, "Manually Generating a PAC File"

- Section 3.2.21, "Regarding Cache Partition Size"

- Section 3.2.22, "Regarding In-memory File Cache in Oracle iPlanet Web Proxy Server"

- Section 3.2.23, "Using Proxy Arrays"

- Section 3.2.24, "Information About the forward-auth-user SAF"

- Section 3.2.25, "Information About New Attributes of FILECACHE Element"

- Section 3.2.26, "Information About the blockingaccept Parameter"

- Section 3.2.27, "Information About the timeout Property for dbswitch.conf Configuration File"

- Section 3.2.28, "Information About the URL-Filter Function"

- Section 3.2.29, "Information about the NetWriteTimeout magnus.conf Parameter"

- Section 3.2.30, "Information about the New Parameter enable-ipv6 for Internal dns-lookup"

- Section 3.2.31, "New SAF host-dns-cache-config to Control DNS Cache Behavior"

- Section 3.2.32, "Information about the -P option of the flexanlg command"

- Section 3.2.33, "Change in HTTP 407 Error Page from 4.0.10"

- Section 3.2.34, "Compressed Content Cannot be Rewritten by Content URL Rewriting"

- Section 3.2.35, "Change in the cbuild command from Proxy Server 4.0.5"

- Section 3.2.36, "keep-alive-timeout-absolute Parameter of the http-client-config SAF"

- Section 3.2.37, "Information about the sleepinterval server.xml Parameter"

- Section 3.2.38, "New Parameter in the socks5.conf file"

3.2.1 Clarification About JRE Information in the Certification Matrix

The Oracle iPlanet Web Proxy Server 4.0.14+ Certification Matrix currently (as of April 2011) shows only 1.6.0_19 as the certified JRE version.

Note the following:

- 4.0.13 and earlier releases of Oracle iPlanet Web Server are certified on (and include) JRE 5.

- 4.0.14, 4.0.15, and 4.0.16 are certified on both JRE 5 and JRE 6, but only JRE 5 is included with these releases.

- 4.0.17+: Certified on (and include) only JRE 6.

3.2.2 Increase in the Maximum Cache Capacity

The "Setting Cache Capacity" section of the Oracle iPlanet Web Proxy Server 4.0.13 Administration Guide mentions that the cache capacity can be up to a maximum of 32 GB.

Starting from the 4.0.10 release, the maximum cache capacity that can be configured through the administration interface is 128 GB.

Note:
You can manually configure the cache capacity to any value higher than 128 GB (no upper limit) by editing the server.xml configuration file. But if you opt for the manual configuration route and want to set the cache capacity to a value that is less than 128 GB, then only the following values are allowed: 125, 250, 500, 1000, 2000, 4000, 8000, 16000, 32000, 64000, 128000.

3.2.3 %Req->vars.xfer-time% Option of the flex-init Function

In the "Log Format" section of the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference, Table 5-4 lists the available flexible logging options. The %Req->vars.xfer-time% option is missing from the list.

The%Req->vars.xfer-time% option can be used to log the transfer time (in seconds).

3.2.4 clf-request-leading-whitespace Parameter of the flex-log SAF

Oracle iPlanet Web Proxy Server 4.0.16 supports a new parameter, clf-request-leading-whitespace, for the flex-log SAF of the AddLog directive. The following table provides information about the new parameter.

Parameter

Description

clf-request-leading-whitespace

(Optional) A boolean value indicating whether leading newlines in request lines should be removed before printing to the server access log.
The default value is yes.

Example:

AddLog fn="flex-log" name="access" clf-request-leading-whitespace="no"

For information about the other parameters of the flex-log SAF, see the "flex-log" section of the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

3.2.5 New Parameters of the um-define-junction SAF

Table 3-2 lists new parameters added for the um-define-junction SAF of the Init directive since the 4.0.14 release. Note that these parameters are not documented in the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

Table 3-2 New Parameters of the um-define-junction SAF

Parameter

Added in Release

Description

secure-cookie

4.0.21

(Optional) um-define-junction takes a new boolean parameter secure-cookie, which is disabled by default. If set to true, cookies set or rewritten by the URL mapping subsystem contains a secure attribute. At present, cookies that are generated (in the form of um_app_name_cookie) do not have a feature to make them secure. The um_jct cookie is also not secure.

Example usage:

Init fn="um-define-junction" jct-name="/test/" fe-uri-prefix="/test/"
be-url-prefix="http://eas97.in.oracle.com:17124/" secure-cookie="1"
onload-handler="yes"

Example output:

Set-cookie: um__/test/_name=test; path=/; secure
<script>document.cookie = "um_jct=/test/; path=/; secure";</script>

set-cookie-domain-from and set-cookie-domain-to

4.0.16

(Optional) These parameters can be used to specify the target and destination values for rewriting the domain parameter of Set-cookie: headers received from backend servers.

rewrite-set-cookie-domain

4.0.16

(Optional) If this parameter is set to true, the domain parameter of Set-cookie: headers received from backend servers are rewritten to the domain of the proxy server.

The default value is false.

insert-set-cookie-domain

4.0.16

(Optional) This parameter can be used to insert a domain parameter into Set-cookie: headers received from backend servers.

set-cookie-path-from and set-cookie-path-to

4.0.16

(Optional) These parameters can be used to specify the target and destination values for rewriting the path parameter of Set-cookie: headers received from backend servers.

disable-javascript-rewrite

4.0.15

(Optional) A regular expression matched against the names of JavaScript variables when the has-javascript parameter is set to yes. Variables whose names match the regular expression are not rewritten (as they typically would be with has-javascript set to yes). There is no default value for this parameter.

3.2.6 Clarification About Unit of Time Used for the%duration% Log Option

According to the "Log Format" section of the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference, the%duration% option indicates the time the server spent handling the request in microseconds.

Note the following clarification:

- On Solaris and AIX, the server calculates and records the time in microseconds.

- However, on Windows, HP-UX, and Linux, the server calculates the time in milliseconds and records it in microseconds.

3.2.7 Clarification About the Need to Explicitly Select New Directory Services

The "Configuring Directory Services" section of the Oracle iPlanet Web Proxy Server 4.0.14 Administration Guide describes how to create a directory service. Note that if you want to use the new directory service with a specific proxy server instance, you must select it as described in the "Selecting Directory Services" section.

3.2.8 Information About the admin.conf File

The admin.conf file, located in the install-dir/proxyadmserv/config directory, is an internal configuration file that Oracle iPlanet Web Proxy Server maintains. Do not modify this file.

3.2.9 Date and Time Parameters of the <Client> Tag

Oracle iPlanet Web Proxy Server 4.0.15 supports several new parameters for the <Client> tag, as described in the following table.

Parameter

Description

date-start and date-end

These two parameters specify the start date and end date, respectively, for a time interval. They take values of the format of the UNIX date command, excluding the time zone specification. Additionally, the weekday portion of the date command format is optional.

day-start and day-end

These two parameters specify the start day number and end day number, respectively, for a day interval in a month. They take values in the range 1 through 31.

month-start and month-end

These two parameters specify the start month and end month, respectively, for a month interval in a year. They take the values Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, and Dec.

time-start and time-end

These two parameters specify the start time and end time, respectively, for a time interval in a day. They take values of the form hour:minute:second on a 24-hour clock.

weekday-start and weekday-end

These two parameters specify the start day and end day, respectively, for a day interval in a week. They take the values Sun, Mon, Tue, Wed, Thu, Fri, and Sat.

Examples

- This example specifies a time interval of every Tuesday through Friday from 9:00 AM through 5:00 PM:

<Client weekday-start="Tue" weekday-end="Fri" time-start="09:00:00" time-end="17:00:00">

- This example specifies a time interval of the first through the fifteenth of every month from 12:00 AM through 4:00 AM:

<Client day-start="1" day-end="15" time-start="00:00:00" time-end="04:00:00">

3.2.10 Information About Parameters of the http-client-config SAF

Table 3-3 lists the parameters of the http-client-config SAF that existed in 4.0.14 or earlier releases, but are not documented in the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference at http://docs.oracle.com/cd/E21692_01/821-1883/aebjw/index.html.

Table 3-3 Parameters of the http-client-config SAF

Parameter

Description

forward-unread-request-body

(Optional) This boolean parameter indicates whether a request body that arrives in a TCP packet separate from the request header should be forwarded to the origin server. The default value is false, meaning that request bodies arriving in TCP packets separate from their request headers are not forwarded to the origin server.

rewrite-error

(Optional) When this boolean parameter is enabled, the proxy server runs the Error stage when the origin server returns an error status (HTTP status code of 400 or above). By default, this parameter is disabled.

timeout

(Optional) This parameter specifies the timeout period in seconds. It is used by the HTTP client while transferring data between clients and origin servers. The default value is 300 seconds.

3.2.11 <Include> Tag in the obj.conf File

Oracle iPlanet Web Proxy Server 4.0.15 supports a new tag in the obj.conf file. This tag, <Include>, includes the content of another file in the obj.conf file, effectively enabling you to divide the content of obj.conf across several files to make management of your configuration easier.

The syntax of the <Include> tag is:

<Include>
filename
</Include>

filename is the name of the file to be included in the obj.conf file where the <Include> tag occurs.

When using the <Include> tag, keep these points in mind:

- The <Include> tag can be used outside the context of <Object>. For example, you could put all the Init directives in a file and then include that file at the start of the obj.conf. file.

- An included file can contain other included files; that is, an included file can itself contain an <Include> tag.

- An included file cannot cross <Object> boundaries; that is, included file cannot end one object and start another.

3.2.12 lookup-ipv6-first Parameter of the dns-config SAF

Oracle iPlanet Web Proxy Server 4.0.15 supports a new parameter, lookup-ipv6-first, for the dns-config SAF of the DNS directive. The following table provides information about this new parameter.

Parameter

Description

lookup-ipv6-first

(Optional) A Boolean operator that specifies whether to look up IPv6 or IPv4 addresses first. The default value is false, meaning that IPv4 addresses are looked up first.

3.2.13 regexp-redirect Function of the NameTrans Directive

The section "NameTrans" in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference does not include information about the regexp-redirect function. Information about this function follows.

The regexp-redirect function is applicable in NameTrans-class directives.

The regexp-redirect function enables you to change URLs and send the updated URL to the client. When a client accesses your server with an old path, the server treats the request as a request for the new URL.

The following table describes parameters for the regexp-redirect function.

Parameter

Description

from

A regular expression for the prefix of the requested URL to match.

url/url-prefix

url specifies a complete URL to return to the client. url-prefix specifies the new URL prefix to return to the client. The from prefix is simply replaced by this URL prefix. You cannot use these parameters together.

escape

(Optional) A Flag that tells the server to use the util_uri_escape action on the URL before sending it. It should be yes or no. The default is yes.
For more information about util_uri_escape, see Oracle iPlanet Web Proxy Server 4.0.14 NSAPI Developer's Guide.

bucket

(Optional) This is common to all obj.conf functions.

3.2.14 status-code and status-desc Parameters of the send-error SAF

Oracle iPlanet Web Proxy Server 4.0.15 supports two new parameters for the send-error SAF of the Service and Error directives. The following table provides information about these new parameters.

Parameter

Description

status-code

(Optional) Specifies a status code to be set in the HTTP response. It differs from the code parameter in that code specifies which error code triggers execution of the send-error SAF, while status-code specifies a status code to be set in the response generated by the send-error SAF.

status-desc

(Optional) Specifies a reason string for the status code.

3.2.15 New Directives in the magnus.conf File

Table 3-4 lists directives added to the magnus.conf file. Note that these directives are not documented in "Syntax and Use of the magnus.conf File" in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

Table 3-4 magnus.conf Directives

Parameters

Valid Values

Description

ChannelPoolMonitorInterval

Any number of seconds

(Added in 4.0.14) Specify how frequently (in seconds) Oracle iPlanet Web Proxy Server checks the channel pool for stale or closed connections. This value is used when ChannelPoolValidate is set to true. The default value is 30.

ChannelPoolValidate

true, false

(Added in 4.0.14) Cause Oracle iPlanet Web Proxy Server to actively check the channel pool for stale or closed connections every ChannelPoolMonitorInterval seconds. The default value is false.

ChannelReuseValidate

true, false

(Added in 4.0.14) Cause Oracle iPlanet Web Proxy Server to validate channels in the channel pool before reusing them. The default value is false.

FtpPoolSize

1 to 65536

(Added in 4.0.12) Specify the size of the FTP connection pool. The default value is 256.

FtpPoolLife

1 to 65536

(Added in 4.0.12) Specify the life of the connection in seconds, that the FTP connection remain unused in the pool before the monitor thread closes it. The default value is 3600.

FtpPoolMonitorThread

OFF

(Added in 4.0.12) Specify the boolean value to monitor the FTP thread functionality. The default is ON.

FtpPoolMonitorLevel

0

(Added in 4.0.12) Specify an integer value. If set to 0 the pool monitor thread checks whether the connection is inactive or active.

If set to 1, the NOOP command is sent to the connection and awaits for the reply. Failure to get a response will cause the connection to be removed from the pool. The default level is 1.

FtpPoolMonitorInterval

30 to 65536

(Added in 4.0.12) Specify an integer value in seconds, after which the pool connections are monitored. The default value is 30.

LDAPPoolMonitorThread

Takes a Boolean value.

(Added in 4.0.12) If set to TRUE, an ldap pool monitor thread would be created, which monitors the ldap connection pool at regular intervals. The default value is FALSE.

LDAPPoolMonitorInterval

Takes an integer argument.

(Added in 4.0.12) Specify the interval at which the ldap pool monitor thread inspects the ldap connection pool. The default value is 30.

LDAPPoolRevalidate

Takes a boolean value.

(Added in 4.0.12) Revalidate the connection if set to TRUE for every connection that is picked off the connection pool; then pass on to the caller. The default value is FALSE.

RouteOfflineCheckInterval

Takes an integer value.

(Added in 4.0.15) Specify the interval, in seconds, at which Oracle iPlanet Web Proxy Server checks performance of the gateways marked as offline by the routing subsystem. The default value is 30.

3.2.16 Description for Cache Finish Status in the Access Log File

You can configure the Cache Finish Status option by turning it ON to record information about each status in the Access Log file. Table 3-5 lists each of the Cache Finish Status and its description.

Table 3-5 Cache Finish Status

Status

Description

WRITTEN

A new cache file is created

ABORTED

The response could not be cached because of invalid Last-modified:header or invalid Expires:header. For more information, switch the log status to fine.

UP-TO-DATE

The proxy receives a confirmation from the remote server that the proxy cache entry is updated and it may not be refreshed.

NO-CHECK

The remote server was not contacted for the request from the cache.

REFRESHED

The existing cache file was refreshed by the new contents from the origin server.

MUST-NOT-CACHE

The remote server response indicates that the response must not be cached.

DO-NOT-CACHE

The document received from the remote server is not cached by the proxy.

3.2.17 maxrequestsperconnection parameter is supported for the LS Element

Oracle iPlanet Web Proxy Server 4.0.18 supports a new parameter called maxrequestsperconnection for the LS element in the server.xml file. The following table provides information about this new parameter.

Parameter

Description

maxrequestsperconnection

(optional) the number of requests allowed through a single connection. The default value is "0", which indicates that there is no limit.

For more information about configuring the listener, see:

http://docs.oracle.com/cd/E19438-01/821-1883/aebbt/index.html

3.2.18 Description of virt-map SAF

The virt-map SAF is used to implement Virtual Multihosting. The virt-map SAF uses the request's Host: header to map a URI to a server URL. The corresponding reverse mapping is automatically inserted by virt-map SAF.

Parameter

Description

host-regex

Specifies a regular expression which is compared with the request's Host: header value. The virtual mapping is not applied in case of a mismatch.

from-prefix

Specifies the URI prefix to be mapped.

to-prefix

Specifies the URL prefix to which the request should be mapped.

For more information about Virtual Multihosting, see:

http://docs.oracle.com/cd/E21692_01/821-1882/adypx/index.html

3.2.19 Specifying IP Address in ACL Configurations

While specifying IP addresses in ACL configurations, a netmask can be used together with an IP address. The IP address and netmask must be separated by a '+' character.

Example:

allow (read,execute,info)

(user = "anyone") and

(ip = "10.12.171.97+255.255.255.0");

For more information about ACL configurations, see:

http://docs.oracle.com/cd/E21692_01/821-1882/adyhq/index.html

3.2.20 Manually Generating a PAC File

After manually generating a PAC file, you are not required to restart the proxy server.

For more information about generating a PAC file from a PAT file, see:

http://docs.oracle.com/cd/E21692_01/821-1882/adyow/index.html

3.2.21 Regarding Cache Partition Size

If GC (Garbage Collection) is disabled, or if the partition size happens to increase while GC is temporarily inactive, it is possible that the cache partition size can exceed the value specified in the maxsize parameter.

For more information about cache elements, see:

http://docs.oracle.com/cd/E21692_01/821-1883/aebcl/index.html

3.2.22 Regarding In-memory File Cache in Oracle iPlanet Web Proxy Server

Information pertaining to in-memory file cache is provided below:

1. The in-memory file cache is enabled only if the disk cache is enabled.

2. The in-memory file cache in Proxy server is used to cache the contents of frequently used disk cache files in memory.

3. The in-memory file cache configuration has a parameter named maxage, which, however, is currently not enforced. It is to avoid HTTP violations by serving aged/invalid content.

4. The contents of in-memory file cache closely follow that of the disk cache. If a disk file is updated, the disk file in-memory version gets updated during the next request.

For more information about in-memory file cache configuration, see:

http://docs.oracle.com/cd/E21692_01/821-1883/aebcm/index.html

3.2.23 Using Proxy Arrays

Note the following about proxy arrays.

- Once you create a proxy array, but before generating a PAC file from your PAT file, proxy array must be explicitly enabled using the Configure System Preferences page in the administration GUI.

- While configuring a non-master proxy array member, the URL field should be set to http://MasterProxy/pat where MasterProxy is the FQDN of the master proxy. Ensure that the master proxy is configured to have a pat mapping which maps /pat to the master proxy's pat file.

For more information about proxy arrays, see:

http://docs.oracle.com/cd/E21692_01/821-1882/6nmr9g0ap/index.html

3.2.24 Information About the forward-auth-user SAF

As a fix for bug 13693179, a new SAF forward-auth-user is introduced in Oracle iPlanet Web Proxy Server 4.0.19. This SAF is applicable for ObjectType directives.

The forward-auth-user SAF instructs the proxy server to forward the authenticated user name to remote servers. The SAF takes an optional parameter, hdr, which specifies the name of the HTTP request header used to communicate the authenticated user name. The default value of the hdr parameter is Proxy-auth-user.

The following is the syntax of the forward-auth-user SAF:

ObjectType fn="forward-auth-user" [hdr="request_header"]

request_header is the name of the HTTP request header that should be used to communicate the authenticated user name to the servers in the back end.

3.2.25 Information About New Attributes of FILECACHE Element

As a fix for bugs 13700698 and 13700670, the attributes listed in Table 3-6 are introduced in Oracle iPlanet Web Proxy Server 4.0.19 for the FILECACHE element in the server.xml configuration file.

Table 3-6 New Attributes Introduced in 4.0.19 for the FILECACHE Element

Attribute

Default

Description

tempfilespace

This attribute specifies a limit (in bytes) for the total size of files created in the file cache's temporary directory.

removetempdir

false

If this attribute is set to true, the file cache's temporary directory is removed when the server is shut down.

For information about the other attributes of the FILECACHE element, see the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference at:

http://docs.oracle.com/cd/E21692_01/821-1883/aebcm/index.html

3.2.26 Information About the blockingaccept Parameter

The fix for bug 13905244 introduces a new parameter blockingaccept to the <LS> element in server.xml configuration file.

This is a boolean parameter, and is set to false by default. If set to true, the listen socket will be of blocking nature.

However, client end points will continue to be non-blocking.

3.2.27 Information About the timeout Property for dbswitch.conf Configuration File

The fix for bug 13989967 introduces a property, timeout, for LDAP configurations in the dbswitch.conf configuration file. The timeout property specifies the duration (in seconds) after which LDAP operations should time out. The property is disabled by default; that is, by default, LDAP operations do not time out.

The following example shows the usage of the timeout property in the dbswitch.conf configuration file.

ldap://ldaphost:ldapport/dc%3D...
default:binddn cn=Directory Manager
default:encoded bindpw cGFzc3dvcmQ=
default:timeout 30

In this example, the timeout property is set to 30 seconds.

3.2.28 Information About the URL-Filter Function

In Oracle iPlanet Web Proxy Server 4.0.14 Administration Guide, the section titled Creating a Filter File of URLs has the following example:

The information mentioned in the example is not valid for filtering access to example.com.

- The correct URL filter to access example.com is .*://.*\.example\.com/.*

- Replace netscape.com with example.com.

3.2.29 Information about the NetWriteTimeout magnus.conf Parameter

The Web Proxy Server's http filter implements a magnus.conf parameter NetWriteTimeout that will enable timeout on write operations to clients.

The NetWriteTimeout magnus.conf parameter takes an integer value which specifies the client write timeout in seconds, and is disabled by default.

3.2.30 Information about the New Parameter enable-ipv6 for Internal dns-lookup

Oracle iPlanet Web Proxy Server 4.0.21 introduces a new parameter enable-ipv6 for internal dns-lookup. This parameter takes a boolean value and is false by default. Setting it to true will enable lookup of IPv6 DNS records.

Example:

DNS fn="dns-lookup" server="…" enable-ipv6="true"

Note:
enable-ipv6 for internal dns-lookup functionality is disabled on Windows.

3.2.31 New SAF host-dns-cache-config to Control DNS Cache Behavior

Oracle iPlanet Web Proxy Server 4.0.21 introduces a new SAF host-dns-cache-config to control DNS cache behavior. This can be used to modify per-request DNS cache behavior. host-dns-cache-config SAF takes the following parameters:

Parameter

Description

enabled

This is a boolean parameter and is "true" by default. When disabled, DNS cache is not used.

host-regex

Takes a regular expression as value, and can be used to apply host-dns-cache-config settings only to requests whose Host: header matches the provided value.

ttl

Accepts an integer value that specifies the "time to live" in seconds for DNS cache entries.

You can disable or enable DNS cache, or apply a specific ttl.

Examples:

- The following directive disables DNS cache for requests to backends with name of the pattern "backend.*":

ObjectType dns-cache-config host-regex="backend.*" enabled="false"

- The following directive enforces a specific ttl for 10 seconds on cached DNS entries to backend hostnames of the format "backend.*":

ObjectType dns-cache-config host-regex="backend.*" ttl="10"

3.2.32 Information about the -P option of the flexanlg command

"Working With the Log Analyzer", in Oracle iPlanet Web Proxy Server 4.0.14 Administration Guide, at: http://docs.oracle.com/cd/E21692_01/821-1882/adyjv/index.html, describes the -P option of the flexanlg command.

The following is the description of the -P option:

- The -P option enables generation of data related to the proxy-specific components like data related to client,proxy, cache, remote and matrix like cache hits, total remote connections, date retrieved from remote, data written to cache, and so on.

- The Generate Report link in the Administration Server interface uses the command flexanlg with -P specified.

3.2.33 Change in HTTP 407 Error Page from 4.0.10

The error page for HTTP 407 changes when you upgrade to Oracle iPlanet Web Proxy Server 4.0.10 or higher versions.

Before upgrading, you see the following message on the HTTP 407 error page:

Proxy Authentication Required An error has occurred

After upgrading to version 4.0.10 or higher, you see the following message that is more informative and specific:

Proxy Authentication Required
Proper authorization is required for this area.
Either your browser dose not perform autorization, or your authorization has failed.

3.2.34 Compressed Content Cannot be Rewritten by Content URL Rewriting

The section "Content URL Rewriting" in Oracle iPlanet Web Proxy Server 4.0.14 Administration Guide at http://docs.oracle.com/cd/E21692_01/821-1882/adypf/index.html, describes how to configure content URL rewriting.

Note that compressed content cannot be rewritten by content URL rewriting.

3.2.35 Change in the cbuild command from Proxy Server 4.0.5

The following is the difference in cache creation by the cbuild command when you upgrade from 4.0.4 to 4.0.5 or higher versions:

- In Proxy Server 4.0.4 you can create a cache partition in an existing directory.

- In Proxy Server 4.0.5 you cannot create a cache partition in an existing directory. When you try to create a cache partition in an existing directory, the following message is logged:

./cbuild -d /<install-directory>/<instance-name>/config -c /<install-directory>/<instance-name>/cache -n 4
Uninitialized partition /<install-directory>/<instance-name>/cache already exists

Note:
As a consequence to fix for bug 14703102, starting from 4.0.21 release, the cbuild command will accept an existing empty directory as target location for a new partition.

3.2.36 keep-alive-timeout-absolute Parameter of the http-client-config SAF

Oracle iPlanet Web Proxy Server 4.0.22 supports a new parameter, keep-alive-timeout-absolute, for the http-client-config SAF. The following table provides information about this new parameter.

Parameter

Description

keep-alive-timeout

Accepts an integer argument that specifies, in seconds, the absolute maximum life span of a pooled connection.

3.2.37 Information about the sleepinterval server.xml Parameter

The sleepinterval attribute of the GC (Garbage Collection) element in server.xml specifies the time, in seconds, the GC thread sleeps before waking up and inspecting the configured partitions to check if garbage collection should be initiated.

The default value for this parameter is 45 seconds. Hence if sleepinterval is set to its default value of 45 seconds, the GC thread would wake up every 45 seconds and inspect the configured partitions.

After the sleepinterval parameter is modified or set, the server must be restarted for the changes to take effect.

3.2.38 New Parameter in the socks5.conf file

Oracle iPlanet Web Proxy Server 4.0.22 supports a new parameter, SOCKS5_CONNECT_TIMEOUT, which has been added to the socks5.conf file. The following table provides information about this new parameter.

Parameter

Description

SOCKS5_CONNECT_TIMEOUT

Accepts an integer value that specifies the "timeout" in seconds for a connection attempt.

3.3 Documentation, Support, and Training

The Oracle web site provides information about the following additional resources:

- Documentation (http://www.oracle.com/technetwork/documentation/index.html)

- Support (http://support.oracle.com/)

- Training (http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=315)

A Features and Enhancements in Previous Oracle iPlanet Web Proxy Server 4.0 Releases

This appendix lists the following important features and enhancements provided in Oracle iPlanet Web Proxy Server release 4.0.14 and later releases. It contains the following sections:

- Features and Enhancements in 4.0.27

- Features and Enhancements in 4.0.26

- Features and Enhancements in 4.0.25

- Features and Enhancements in 4.0.24

- Features and Enhancements in 4.0.23

- Features and Enhancements in 4.0.22

- Features and Enhancements in 4.0.21

- Features and Enhancements in 4.0.20

- Features and Enhancements in 4.0.19

- Features and Enhancements in 4.0.18

- Features and Enhancements in 4.0.17

- Features and Enhancements in 4.0.16

- Features and Enhancements in 4.0.15

- Features and Enhancements in 4.0.14

The features and enhancements in Oracle iPlanet Web Proxy Server 4.0 releases prior to 4.0.14 are described in the individual Release Notes documents specific to those releases, which are available at:

http://docs.oracle.com/cd/E19438-01/legacy.html

A.1 Features and Enhancements in 4.0.27

There are no new features and enhancements in Oracle iPlanet Web Proxy Server 4.0.27.

A.2 Features and Enhancements in 4.0.26

There are no new features and enhancements in Oracle iPlanet Web Proxy Server 4.0.26.

A.3 Features and Enhancements in 4.0.25

Oracle iPlanet Web Proxy Server 4.0.25 provides support for additional Transport Layer Security (TLS) protocols. In addition to TLS 1.0, TLS 1.1 and TLS 1.2 are now supported. SSL3 has been disabled by default.

A.4 Features and Enhancements in 4.0.24

There are no new features and enhancements in Oracle iPlanet Web Proxy Server 4.0.24.

A.5 Features and Enhancements in 4.0.23

There are no new features and enhancements in Oracle iPlanet Web Proxy Server 4.0.23.

A.6 Features and Enhancements in 4.0.22

4.0.22 includes the following new features and enhancements:

- This release introduces a new SAF keep-alive-timeout-absolute, which allows absolute KA timeout for pooled backend connections. For more information, see Section 3.2.36.

- This release supports JRE7.

A.7 Features and Enhancements in 4.0.21

4.0.21 includes the following new features and enhancements:

- The following new buttons have been introduced in the Administration Server interface:

- The button Undo Unsaved Changes is displayed along with the existing buttons (Restart Proxy, Restart Socks, Load Configuration Files) when clicking the Restart Required link. This button can be used to undo any unsaved changes made through the Administration Server interface. When you click this button, the administration or working copies of all configuration files (the files under config directory) are returned to their last backup versions.

- The button Undo Manual Changes can be used to undo any manual edits done to the server configuration files. When you click this button, the server copies of all configuration files (the files under config) are returned to their last backup versions. The last backup versions are also stored in the config directory, and maintained by the Administration server.

- A new parameter enable-ipv6 has been introduced for internal dns-lookup. For more information, see Section 3.2.30.

- A parameter search-in has been introduced for internal dns-lookup to handle non-FQDN lookups. The dns-lookup SAF fails unless the target hostname is an FQDN. The parameter search-in specifies a comma-separated list of domain names.
Example: DNS fn="dns-lookup" server="..." search-in="in.example.com, us.example.com"

- A new dbswitch parameter referrals has been introduced that optionally disables referrals during LDAP search. This parameter is on by default. According to your requirement, you may turn the referral off by setting the default value as false.
Example:

directory default ldap:// ... default:referrals false

- In this release, um-define-junction takes a new boolean parameter secure-cookie. For more information, see Section 3.2.5.

- This release introduces a new SAF host-dns-cache-config to control DNS caching behavior. For more information, see Section 3.2.31.

A.8 Features and Enhancements in 4.0.20

4.0.20 includes the following new features and enhancements:

- Oracle iPlanet Web Proxy Server 4.0.20 supports the following platforms:

- Solaris 11 Express

- Oracle Enterprise Linux 6
For information about other supported platforms, see Section 1.4.1

- This release introduces a new timeout property for LDAP configurations in dbswitch.conf. For more information, see Section 3.2.27.

- A new boolean parameter blockingaccept has been introduced to the <LS> element in server.xml. For more information, see Section 3.2.26.

- Oracle iPlanet Web Proxy Server 4.0.20 supports the magnus.conf parameter NetWriteTimeout that will enable timeout on write operations to clients. The NetWriteTimeout parameter takes an integer value which specifies the client write timeout in seconds, and is disabled by default.

A.9 Features and Enhancements in 4.0.19

4.0.19 includes the following new features and enhancements:

- Oracle iPlanet Web Proxy Server 4.0.19 is certified on SUSE Linux Enterprise Server 11 Service Pack 1. For information about other supported platforms, see Section 1.4.1.

- This release introduces a new property usersearchfilter for the dbswitch.conf file. You can use the usersearchfilter property to specify an alternative attribute name (in place of uid) as a user search filter for LDAP operations, as shown in the following example:

default:usersearchfilter sAMAccountName

For information about the other dbswitch.conf properties, see the Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

http://docs.oracle.com/cd/E2169201/821-1883/aebnk/index.html

- Oracle iPlanet Web Proxy Server can now parse multipart responses.

- A new SAF forward-auth-user has been introduced to forward an authenticated user name to the server in the back end. For more information, see Section 3.2.24.

- New attributes have been introduced for the FILECACHE element in the server.xml configuration file to specify a limit for the size of the file cache's temporary directory and to enable removal of the directory when the server is shut down. For more information, see Section 3.2.25.

A.10 Features and Enhancements in 4.0.18

A new parameter called maxrequestsperconnection is introduced for the LS element in the server.xml file.

A.11 Features and Enhancements in 4.0.17

4.0.17 includes the following features and enhancements:

- Oracle iPlanet Web Proxy Server 4.0.17 is certified on SUSE Linux Enterprise Server 10 Service Pack 3.

- The JRE 6 version is being bundled with 4.0.17. For more information, see Section 3.2.1.

A.12 Features and Enhancements in 4.0.16

The um-define-junction SAF accepts several new parameters to configure cookie rewriting. For more information about this enhancement, see Section 3.2.5.

A.13 Features and Enhancements in 4.0.15

4.0.15 includes the following features and enhancements:

- Date and time parameters have been added to the <Client> tag to enable use of time intervals to limit execution of directives on requests received from specific clients. For more information, see Section 3.2.9.

- The disable-javascript-rewrite parameter has been added to the um-define-junction SAF to suppress JavaScript variable rewriting for specific JavaScript variables. For more information, see Section 3.2.5.

- The <Include> tag has been added to the obj.conf file syntax to support the inclusion of other files in obj.conf. For more information, see Section 3.2.11.

- The lookup-ipv6-first parameter has been added to the dns-config SAF to control whether IPv6 or IPv4 addresses are looked up first. For more information, see Section 3.2.12.

- The status-code and status-desc parameters have been added to the send-error SAF. For more information, see Section 3.2.14.

- The RouteOfflineCheckInterval directive has been added to the magnus.conf file to configure the frequency at which Oracle iPlanet Web Proxy Server checks the health of gateways marked as offline. For more information, see Section 3.2.15.

- The NSS version supported by Oracle iPlanet Web Proxy Server has been updated to 3.12.6, and the NSPR version has been updated to 4.8.4.

- The "Enter ACL List Cache Size" field has been added to the Admin GUI to support specification of this value interactively.

- The "Reset Status" button has been added to the Admin GUI Proxy-instance> Server Status> Monitor Current Activity page to reset the monitored values without restarting Oracle iPlanet Web Proxy Server.

- This release addresses the following documentation issues:

Issue ID

Description

6294290

Proxy 4: admin.conf has no documentation.
See Section 3.2.8.

6962675

Proxy 4 doc RFE - need some descriptions for regexp-redirect function in WPS docs/manual.
See Section 3.2.13.

6965246

DOCS: WPS4.0.14 introduces new parameter to the http-client-config function.
See Section 3.2.10.

A.14 Features and Enhancements in 4.0.14

4.0.14 includes the following features and enhancements:

- The ChannelPoolValidate directive has been added to the magnus.conf file. It controls whether the channel pool is actively checked for stale or closed connections.

- The ChannelPoolMonitorInterval directive has been added to the magnus.conf file. It specifies how frequently the channel pool is to be checked for stale or closed connections.

- The ChannelReuseValidate directive has been added to the magnus.conf file. It controls whether persistent connections are validated before they are reused.

- The always-retry-stale-keep-alive parameter has been added to the http-client-config SAF. It controls whether the HTTP client retries a failed request even when the number of retries is set to zero, provided that the request failure was due to a stale persistent connection.

B Issues Resolved in Previous Oracle iPlanet Web Proxy Server 4.0 Releases

This chapter lists the most important issues fixed in previous Oracle iPlanet Web Proxy Server 4.0 releases. It contains the following sections:

- Issues Resolved in 4.0.27

- Issues Resolved in 4.0.26

- Issues Resolved in 4.0.25

- Issues Resolved in 4.0.24

- Issues Resolved in 4.0.23

- Issues Resolved in 4.0.22

- Issues Resolved in 4.0.21

- Issues Resolved in 4.0.20

- Issues Resolved in 4.0.19

- Issues Resolved in 4.0.18

- Issues Resolved in 4.0.17

- Issues Resolved in 4.0.16

- Issues Resolved in 4.0.15

- Issues Resolved in 4.0.14

- Issues Resolved in 4.0.13

- Issues Resolved in 4.0.12

- Issues Resolved in 4.0.11

- Issues Resolved in 4.0.10

- Issues Resolved in 4.0.9

- Issues Resolved in 4.0.8

- Issues Resolved in 4.0.7

- Issues Resolved in 4.0.6

- Issues Resolved in 4.0.5

- Issues Resolved in 4.0.4

- Issues Resolved in 4.0.3

- Issues Resolved in 4.0.2

- Issues Resolved in 4.0.1

B.1 Issues Resolved in 4.0.27

Table B-1 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.27. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-1 Issues Resolved in Oracle iPlanet Web Server 4.0.27

Issue ID

Summary

22680134

NSS upgrade to 3.21

B.2 Issues Resolved in 4.0.26

Table B-2 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.27. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-2 Issues Resolved in Oracle iPlanet Web Server 4.0.26

Issue ID

Summary

18946640

Oracle iPlanet Web Proxy non-interactive upgrade unexpectedly asks for input

20597388

NSS 3.17.4 update

21104387

Version changes for 4.0.26

B.3 Issues Resolved in 4.0.25

Table B-3 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.25. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-3 Issues Resolved in Oracle iPlanet Web Server 4.0.25

Issue ID

Summary

18258370

HTTP3085 error when locking log file during access log rotation.

18359146

Unable to edit access control with Firefox 24.

19722851

NSS upgrade to 3.17.2.

20076135

The get-client-cert operation does not work when SSL3 is disabled.

20076181

Disable SSLV3 in OIWPS.

20227067

Version changes for 4.0.25.

20421870

Provide support for TLS 1.1 and TLS 1.2 in Oracle iPlanet Web Proxy Server 4.0.

20670092

Disable SSL3 by default in libproxy, and add support for TLS1.1 AND 1.2.

B.4 Issues Resolved in 4.0.24

Table B-4 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.24. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-4 Issues Resolved in Oracle iPlanet Web Server 4.0.24

Issue ID

Summary

18114821

The rewrite-set-cookie-domain parameter does not rewrite the domain parameter as expected when set to true.

18276429

Upgrade to NSS release 3.16.

18778567

Get request fails when it contains <tab> or extra <space> characters.

18789918

HTTP version check returns 400 instead of 505 in SSL mode.

18799089

.Version changes for 4.0.24.

B.5 Issues Resolved in 4.0.23

Table B-5 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.23. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-5 Issues Resolved in Oracle iPlanet Web Server 4.0.23

Issue ID

Summary

17793275

Enforce LDAP timeout.

17437126

Proxy Server incorrectly appends its port number to the redirected url.

17195208

Integrate NSS 3.14.3.

17233112

Version changes for 4.0.23.

17181916

cache-setting SAF's exclude parameter does not work.

17174272

cache-setting SAF: no-merge and replace not implemented.

17169053

Files with a css/js extension contain extra headers when served from the cache.

17355173

DOC: SUSE Linux packages for 4.0.22.

See Section 1.4.4.2.

B.6 Issues Resolved in 4.0.22

Table B-5 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.22. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-6 Issues resolved in Oracle iPlanet Web Proxy Server 4.0.22

Issue ID

Summary

12681544

Reverse proxy generates bad Location: headers.

13027513

Oracle iPlanet Web Proxy Server should rewrite/enforce set-cookie expiry information.

13565092

JRE7 support in Oracle iPlanet Web Proxy Server 4.0.

15888239

Remove license-specific text from the Proxy server installer.

15888240

Remove stray/unwanted text from installer resource text.

15888241

In the installer, change case of some text from uppercase to title case.

15888244

Fix spelling in installer resource text.

16162449

Verify SHA-2 support on Proxy server.

16219945

Allow absolute KA timeout for pooled backend connections.

16246744

Add verbose logging for host DNS cache subsystem.

16293698

Proxy should reject corrupted cache files.

16315577

Use SHA-2 while generating a CSR using administration GUI.

16359191

Administration server cannot show certificate correctly when external ssl module is used.

16365400

Remove Verisign-related options from administration GUI security panel.

16676972

Version changes for Proxy server 4.0.22.

16698239

DOC: Document new parameter keep-alive-timeout-absolute.

See Section 3.2.36

16766323

Translation text for Installer interface - fix formatting

16803942

DOC: Add more information about the parameter sleepinterval.

See Section 3.2.37

16818607

Administration copies of configuration files have incorrect timestamps.

16823886

Bad memory access while shutting down server under load.

16843729

SOCKS connect timeout should be configurable.

16957713

DOC: Document new SOCKS parameter socks5_connect_timeout.

See Section 3.2.38

For information about issues resolved in the previous Proxy Server releases, see Appendix B.

B.7 Issues Resolved in 4.0.21

Table B-7 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.21. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-7 Issues resolved in Oracle iPlanet Web Proxy Server 4.0.21

Issue ID

Summary

12181115

Proxy server 4.0.4 uninstaller leaves some residual folders after uninstallation.

12228605

In Proxy server 4.0.5, a url-filter which contains a single quote cannot be edited using the GUI.

12708828

When you manually generate a PAC file from a PAT file in Proxy Admin GUI, there is a crash of the admin program.

14207617

Admin GUI: Problem with system CGI.

14207632

Admin GUI: Problem with bupdate CGI.

14270380

How to turn off referrals in the LDAP search of Proxy server.

14281410

DOC: Clarify proxy log format and the -P option.

See Section 3.2.32

14374146

DOC: Document option cont="no" in new dns-lookup SAF and its limitations. For example, no IPv6.

See Section 1.5.4

14395969

Group search filter is not working.

14463408

Cannot search groups in MS active directory (MSAD) using Proxy Admin GUI.

14506319

Limitations of dns-lookup SAF. For example, IP based requests do not work.

14507518

Version changes for Proxy server 4.0.21.

14512385

Limitations of dns-lookup SAF: Non-FQDN hostnames.

14513563

Default installation path should not be $HOME/Oracle/Middleware/ProxyServer4.

14535268

cache local hosts can not be configured through Admin GUI.

14547807

DOC: HTTP 407 error page is changed from Proxy server 4.0.10.

See Section 3.2.33

14585403

DOC: Compressed content cannot be rewrote by Content URL Rewriting.

See Section 3.2.34

14688237

Proxy Server should compress contents with fn= "suppress-request-headers".

14703102

Cannot create cache partition with CLI cbuild for an existing directory.

14752900

DOC: Document changed behavior of CLI cbuild between 4.0.4 and 4.0.5.

See Section 3.2.35

15834572

host-dns-cache-init improvement required to get new IP to origin server.

15853677

Improve DNS dns-lookup with TTL information from DNS.

15869341

Change the words "You can undo your unsaved changes..." in Admin console.

15869349

Administration console has more accurate Required Restart.

15869537

Um-junction cookies are not secured.

15875532

Add IPv6 support to internal dns-lookup functionality.

15887424

Add option in Admin GUI to undo manual changes.

15887622

Proxy Admin: View server settings needs to be fixed.

15887740

URL mapping should be compatible with fix for bug 14688237.

15906186

Silent installation appears to be broken.

15906409

Allow internal dns-lookup to use custom ports (other than 53).

15951334

Proxy 4.0 crashes when dns-lookup is enabled while accessing host through IP.

B.8 Issues Resolved in 4.0.20

Table B-8 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.20. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-8 Issues Resolved in Oracle iPlanet Web Proxy Server 4.0.20

Issue ID

Summary

12207931

Validation in rename group page is not present while renaming group name

12237972

Proxy server does an invalid name look up when path element is missing

13508654

Request to support Oracle Solaris 11 express for Proxy Server 4.0.x

13510003

Request to support OEL 6/RHEL 6 for Proxy Server 4.0.x

13818057

Request to add timeout parameter for client connection while writing data

See Section 3.2.29

13905244

Proxy server needs to be able to block I/O on the OS socket

See Section 3.2.26

13963571

4.0.19 installer is not localized

13989967

Proxy server should implement a timeout parameter for its LDAP operations

See Section 3.2.27

14040829

Error: An error occurred during startup.The proxy-server1 <server> was not started

14073946

Unnecessary line is added in jvm.cfg after upgrading to 4.0.19

14094807

Attribute removetempdir is not recognized when you upgrade to 4.0.19

14094824

Attribute tempfilespace is not recognized when you upgrade to 4.0.19

14095432

On and Off buttons allow multiple click on Internet Explorer only

14096436

Proxy Server incorrectly modifies client HTTP header

14105836

Version changes for 4.0.20

14139947

Rename Group functionality should not allow empty group names

14144205

Doc: Document new configuration parameter blockingaccept

See Section 3.2.26

14144220

Doc: Document new timeout property for LDAP configurations

See Section 3.2.27

14150420

Doc: Sample of regular expression of url-filter is not correct

See Section 3.2.28

14161227

Doc: Document NSS version used by Proxy on HPUX

14166518

Verify NetWriteTimeout magnus.conf parameter

14200556

Avoid potential crash in GC subsystem during load conditions

14223733

Admin server crashes on Linux 2.6

14223922

Proxy startup failure on Solaris 11

14246878

Fix invalid error messages during Proxy startup on OEL6

B.9 Issues Resolved in 4.0.19

Table B-9 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.19. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-9 Issues Resolved in Oracle Proxy Server 4.0.19

Issue ID

Summary

13059290

Old server certificate is used after reconfiguration

13097307

A new dbswitch.conf property usersearchfilter has been introduced. For more information, see Section 1.1.

13241379

createinstance.exe memory error when creating a new instance after new installation in Windows XP

13241613

Doc: Bug 6558027 should be removed from list of known issues

13328380

"Startup on Boot" prompt requires input in lowercase

13390045

Range: header with multiple values is not parsed

13411845

Trace listed in Allow: header in a 405 response to a trace request

13426302

Cache metadata can get corrupted

13429806

Cache statistics need improvement (negative values shown for "files created")

13449891

Unable to log proxy-authorization header in access log

13472939

Cache file purging can cause garbage collection inaccuracy

13473022

Race condition in garbage collection functionality

13478112

Cache garbage collection: incorrect handling of dangling lock files

13483552

proxy-authorization header is moved from rq->headers to rq->vars

13521719

Implementation of redirect SAF modified in 4.0.17

13522912

Doc: Update release notes with SLES-specific dependencies

See Section 1.4.4.2.

13598316

% character in URL changed to %25 in the location header of a 302 response

13601633

Accessing cached object using newer if-modified-since results in 200 response

13601650

Proxy should give precedence to if-none-match over if-modified-since

13610163

Admin GUI support for new dbswitch.conf parameter usersearchfilter

13643378

Version changes for 4.0.19

13686086

Core: product name should be Oracle iPlanet Web Proxy Server

13690480

After migration, start error: core7503: invalid or missing GC configuration in server.xml

13690551

After migration, start error: core7152: can't open .../.cache-data/.size for reading

13693179

Optionally pass auth-user to the backend server in a request header

See Section 3.2.24.

13699840

Files return 200 with zero content length

13700670

Proxy server should remove aged temporary files from the file cache temporary directory

See Section 3.2.25.

13700698

Request to add a parameter for filecache function to limit the temporary directory size

See Section 3.2.25.

13712161

Proxy server does not log messages to the errors log if group-based LDAP authentication is used

13721532

LDAP connection parameter is incorrect

13725130

admingui/perf/stats changes related to bug# 13429806

13726719

Enhancement request for proxy server 4.0.19 + (32-bit) certification

13737050

'configure file cache' does not exist when proxy server is upgraded

13767826

Installer: product name should be Oracle iPlanet Web Proxy Server

13767847

Admin: product name should be Oracle iPlanet Web Proxy Server

13772160

Proxy chaining unable to log the header %req->headers.client-ip%

13797523

Doc: Document new SAF forward-auth-user (fix for 13693179)

See Section 3.2.24.

13797548

Doc: Document new attributes to filecache configuration in server.xml (fix for 13700698 and 13700670)

See Section 3.2.25.

13843527

Incorrect value is displayed for garbage collection in error log

B.10 Issues Resolved in 4.0.18

Table B-10 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.18. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-10 Issues Resolved in Proxy Server 4.0.18

Issue ID

Summary

12309210

Error processing long directive lines in Socks Co.

12397203

Proxy 4.0 does not support IPV6 addresses in ACL configuration.

12580207

IPV6: HTTP3127: [LS LS1] HTTP://[FE80::20C:29FF:FE2C:8ADB]:8080: Error creating

12589688

NO-FORMAT-STR.ACCESS of flex-init is invalid on Web Proxy 4.0.x.

12605750

Proxy NSFC always shows "Maxage: 0 Seconds".

12630518

Windows: Add Server page is not getting displayed at times.

12639709

Doc: RFE for docs in setting up Proxy Array. For more information, see Section 3.2.23.

12676751

Doc: Add more details for file cache. For more information, see Section 3.2.22.

12700707

Upgrade to newer version of NSS.

12700817

Doc: Maxsize description of partition attributes is not matched to actual caching BEH. For more information, see Section 3.2.21.

12713910

Version changes for 4.0.18.

12726248

Admin: Proxy Array: The "Redirect" option is not implemented.

12726319

Admin: ICP: The "Redirect" option is not implemented.

12733725

Web Proxy Server should log stop message to log file after the instance is stopped.

12748873

Doc: No need to restart the Web Proxy Server after the PAC file generation. For more information, see Section 3.2.20.

12753559

LD_LIBRARY_PATH may not be set correctly before invoking "parsexml" in the start command.

12754044

Admin: Edit listen socket: Listen socket is not associated to installed certificate.

12755285

Admin: Add listen socket: Listen socket is not associated with installed certificate.

12772070

Admin: "Set cache specifics" screen can be confusing.

12772085

The Service-Nfsc-dump should display memory used for storing small file contents.

12803279

Installer does not allow "-" for administration user name.

12812190

Web Proxy Server should log stop message to log file after socks server stopped.

12861774

Add a new parameter for GC sleep interval.

12862155

Proxy crash at GC_Log.

12862365

Cannot open file for "/.Cache-data/.status" file on the proxy server 4.0.18.

12867732

GC does not happen in some condition.

12870255

Administration GUI does not accept "+" as a valid input for the IP address list in the ACL file.

12870420

Doc: Document the syntax using subnet mask notation in proxy server 4.0 ACL file. For more information, see Section 3.2.19.

12929743

Windows event errors when start up Proxy 4.0.15.

12931809

Doc: Oracle iPlanet proxy server Virt-map SAF description is missing. For more information, see Section 3.2.18.

12931829

Oracle iPlanet proxy server virtual multihosting option "From-Prefix" is missing.

12932343

Needs IPV4 address validation in Administration GUI ACL configuration screen.

12951802

Doc: Fix CR: 6932016-Verisign EV Cert chain issue with new built-in CA root 4.0.16. For more information, see Section 2.3.

12990952

Administration GUI OLH changes required (BUG# 12327750).

12990962

Administration GUI OLH changes required (Bug# 12931829).

13004785

Need IPV6 address validation in the administration GUI ACL configuration screen.

13013946

Web proxy deletes slashes that precede JS comments.

13014098

Content URL rewriting of an HTML tag should be HTML encoded.

13022670

Doc: Request to add minimum required memory and minimum recommended disk space in the release notes. For more information, see Section 1.5.11.

13261035

Doc: Document new attribute to the <LS> element in the Server.xml file (Bug#13087905). For more information, see Section 3.2.17.

B.11 Issues Resolved in 4.0.17

Table B-11 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.17. The documentation issues are prefixed "Doc:" in the Summary column of the table.

Table B-11 Issues Resolved in Proxy Server 4.0.17

Issue ID

Summary

12087481

Proxy 4.0 must honour must-revalidate/proxy-revalidate/s-maxage whenever the server is not reachable.

12196137

Cache filter gets inserted or removed twice under certain conditions.

12199013

admin: Modify the GUI for "Create Mapping" option of Proxy Array Table (PAT).

12201262

admin: createInstance.exe error while creating new instance.

12206845

Log message not clear in the Web Proxy 4.0 FTP subsystem.

12207918

admin: User interface behavior is inconsistent when the proxy server is started or stopped.

12208047

The ON and OFF buttons are not at the same level while using Firefox 2.0 browser.

12306924

Redirect SAF generates bad Location: Headers.

12306995

Doc: Web Proxy 4.0.14+ release notes indicates that the minimum JDK version is 1.6 BU. For more information, see Section 3.2.1.

12307931

Web Proxy 4.0 should not cache "transfer-encoding: headers.

12308510

HTTP compression does not work with URL mapping.

12308516

Doc: No description provided for Cache Finish Status in the Access Log file. For more information, see Section 3.2.16.

12308568

admin: Wrong default values for PAC map in "Creating Mapping".

12308764

Negative value for the "total space collected" parameter in the garbage-collection log messages.

12308877

HTTP compression should update the flex-log parameter that represents the amount of response body sent to the client.

12309349

The client IP address is not found in headers within the proxy chain.

12309663

Doc: Rewrite-error option of http-client-config SAF needs to be added to Oracle iPlanet Web Proxy Server. For more information, see Section 3.2.10.

12327750

Need an interface to set or copy route cookie values in the routing configurations.

12328313

CR#6917211 AND CR#6917212 details not available in 4.0.15 release notes

12387354

Administration CGI does not consider the case of SHA1 fingerprint.

12393186

Doc: Timeout parameter is not available in the http-client-config SAF. For more information, see Section 3.2.10.

12396179

Once the customer enables user authentication, Oracle iPlanet Web Proxy Server cannot navigate to the HTTPS site. It can navigate to the HTTP site.

12396620

Version changes for 4.0.17.

12397532

Web Proxy 4.0 should bundle JDK 6U24

12405702

HTTP client: Request headers names longer than 21 bytes get distorted.

12412400

Request for certification of Oracle iPlanet Web Proxy Server 4.0.17 on SLES 10 SP3.

12610835

URL mapping: Server consumes the CPU memory when set to cookie. The value contains the backslashes.

12615471

Server startup message fails to display the version information.

12615577

Administration Server is not starting on Windows.

12615605

Newly created proxy instance does not start up HPUX.

B.12 Issues Resolved in 4.0.16

Table B-12 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.16.

Table B-12 Issues resolved in Proxy Server 4.0.16

Issue ID

Summary

6941325

Doc: Cache capacity needs to be updated in the admin guide.

See Section 3.2.2.

6943974

Doc: Flexible logging option %Req->vars.xfer-time% should be documented.

See Section 3.2.3.

6976513

Optionally strip newlines off clf-request while creating access log entries.

For more information, see Section 3.2.4.

6977597

admin: Need better documentation/awareness on "open proxy security hole" (bug# 6565436).

6977869

Event scheduler should report completion of scheduled commands by an appropriate message in the error log.

6981847

URL filter: Hash table lookups happen without locking.

6984479

WPS4.0.14 support matrix is not correct.

6987488

SOCKS server does not allow log file names longer than 128 characters.

6988564

admin: Place a consistent limit on the length of a new instance's server ID.

6989877

URL mapping neither rewrites nor forwards domain parameters in Set-cookie: headers.

Two new parameters—set-cookie-domain-from and set-cookie-domain-to have been introduced for the um-define-junction SAF. For more information, see Section 3.2.5.

6991199

Proxy should start correctly when there is a pid file with nonrelated PID.

6991975

URL mapping: Need feature to rewrite path parameters of Set-cookie: headers.

Two new parameters—set-cookie-path-from and set-cookie-path-to have been introduced for the um-define-junction SAF. For more information, see Section 3.2.5.

6994416

Doc: %duration% measured in milliseconds in Red Hat Linux (whereas documentation indicates microseconds).

See Section 3.2.6.

6997088

Should support Forwarded: header for compatibility with 3.6.

7001073

Doc: ACL database name does not work.

See Section 3.2.7.

7002721

Enhance verbose and finest logging for LDAP database errors.

7003922

cluster: Admin Server with SSL can't add server to cluster database and transfer files.

7006581

WPS4.0.12: High CPU usage.

7006595

Version changes for 4.0.16.

7006908

Doc: Document the cookie rewriting feature newly added to URL mapping.

See Section 3.2.5.

7006910

Doc: Document the new parameter added to the "flex-log" SAF.

For more information, see Section 3.2.4.

7007911

cluster: Admin CGI crashes while attempting to transfer configuration to slave.

7007928

cluster: SSL clients in admin CGIs should trust all server certs by default.

7009238

LDAP connection problem when in Windows 2008.

7010394

Server crash during startup while processing incorrectly formatted password.conf.

7011418

URL mapping: Redirects lose the query string.

7014437

URL mapping: Content/URL rewriting produces corrupted responses.

7015526

Blank page is displayed on clicking the Cluster tab in the Administration Server interface (HP-UX).

B.13 Issues Resolved in 4.0.15

Table B-13 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.15.

Table B-13 Issues Resolved in Proxy Server 4.0.15

Issue ID

Summary

6524998

Proxy 4.0 urldb utility fails when processing an invalid regular expression

6917211

Proxy 4.0 undergoes heap overflow for TRACE requests

6917212

While handling digest authentication Proxy 4.0 buffer overflows

6942431

Proxy 4.0: Consider adding time-related parameters to the <Client> tag

6945755

Proxy server cannot set the number of Acceptor Threads = number of CPUs as stated in docs

6946517

WPS4.0: OPTIONS method does not work in SSL

6946561

RFE: Proxy 4.0 - Ability to set ACLCacheMax through Admin GUI

6946565

RFE - need capability to reset Perf counters without server restart

6946566

RFE - Capability to manage obj.conf through separate include files, for example, managing URL list in another

6949070

Proxy 4.0: urldb: expired cache files are not removed

6951418

Proxy 4.0: Event scheduler: time "drift" causes events to be missed

6952442

Proxy 4.0 Admin cache program failure with <Client> tag in obj.conf

6955415

Proxy Server 4.0.13 - need rewrite-host parameter in virt-map function

6957135

WPS docs - new directives in magnus.conf need add to Configuration File Reference.

Going forward, all updates to 4.0 documentation will be documented only in the release notes.

6957675

Proxy 4.0 Admin GUI warnings when users edit NameTrans fn="regexp-redirect" (regular expression URL redirections)

6957676

WPS4.0 Basic authentication does not work with regular mapping only

6960464

Proxy 4.0 - health check in load-balancing likes to be configurable in timeout and frequency

6964554

Proxy 4.0 RFE - new lookup-ipv6-first to allow cu to select the order of DNS lookup

6965840

Query parameter of service SAFs do not work in forward proxy configurations

6965842

RFE: allow send-error to accept a "status" parameter

6965883

Version changes for 4.0.15

6966757

WPS 4.0.14: URL rewrite problem (um-output) with missing "/" slash

6968929

Integrate NSS 3.12.6

6970769

SOCKS log messages contain invalid session identification

6970776

Proxy 4.0: SOCKS server should print meaningful error log information

6972347

Proxy 4.0: proxy serves truncated responses from the cache

6974046

DTD file rename issue in Proxy Server 4.0.14 (SVR4 patch)

6974382

Proxy 4.0: "url mapping" should allow selective rewriting of javascript

6974692

SOCKS proxy host name resolution: Host name unresolved does not fail returning connection to port on client

6977431

proxy server number of Acceptor Threads in the admin GUI should be equal to the number of cups as stated in docs

B.14 Issues Resolved in 4.0.14

Table B-14 lists the issues resolved in Oracle iPlanet Web Proxy Server release 4.0.14.

Table B-14 Issues Resolved in Proxy Server 4.0.14

Issue ID

Summary

6914759

The pool monitor thread's interval should be configurable.

6916393

Proxy 4.0 channel pool implementation: Need optional validation of pooled channels.

6917624

Proxy 4.0: httpclient should (optionally) always retry when a keep-alive connection is stale.

6917655

Proxy 4.0: (optionally) Validate a connection before reusing.

6920803

Document the new directive: ChannelPoolValidate added as part of the fix for 6916393.

6920804

Document the new directive: ChannelPoolMonitorInterval added as part of the fix for 6914759.

6920805

Document the new directive: ChannelReuseValidate added as part of the fix for 6917624.

6920806

Document the new parameter: always-retry-stale-keep-alive added as part of the fix for 6917655.

6920836

CR#6648470 is not listed in Readme of patch#120981-19.

6921169

There's no description about "retries" parameter of http-client-config in the manual.

6921170

The behavior with retries="0" is not described.

6921721

Proxy 4.0: Failure under load on linux.

6923914

SJSPS 4.0.13 server instance fails to start for T5240 niagara cert token "Sun Metaslot".

6931137

Proxy 4.0 rebranding: Installer: change default install location.

6931138

Proxy 4.0 rebranding: Change product name/version string.

6931139

Proxy 4.0 rebranding: Admin OLH: modify image and links.

6931140

Proxy 4.0 rebranding: Top frame of admin GUI screen needs changes to reflect oracle rebranding.

6931141

Proxy 4.0 rebranding: Admin: The copyright text in the "Version" popup window should be modified.

6931142

Proxy 4.0 rebranding: Product README file should be updated as part of oracle rebranding.

6931143

proxy 4.0 rebranding: Installer: change installer's left pane image.

6931988

proxy 4.0 rebranding: Installer should not display any license.

6931989

Proxy 4.0 rebranding: Support browsers IE8 and FF 3.5.

6931990

Proxy 4.0 rebranding: Product License file should be updated as part of oracle rebranding.

6931991

Proxy 4.0 rebranding: Installer: Product name should be changed.

6931994

Proxy 4.0 rebranding: Installer: change installer's/uninstaller's log file name.

6931996

Proxy 4.0 rebranding: Installer: copyright string should change in instance/admin scripts/config.

6931997

Proxy 4.0 rebranding: DTD file names should be changed.

6932000

Proxy 4.0 rebranding: Default value of "Proxy-agent" header should be changed.

6932002

Proxy 4.0 rebranding: Default authentication prompt in ACL templates should be changed.

6932476

Proxy 4.0 NTLM support: Server keeps wrong count of idle connections in connection pool.

6932483

Proxy 4.0 NTLM: Server should not cache responses passing through an authenticated connection.

6933138

Proxy 4.0 rebranding: Change copyright strings in external header files.

6933148

Proxy 4.0.13 Admin GUI default security Cryptographic Module should not set to NSS Generic Crypto Ser.

6933175

WPS suffers from an input checking error which permits the reading of arbitrary files from local fs.

6933223

Version changes for 4.0.14.

6933599

Proxy 4.0: Issues with support of "Proxy-support:" header.

6933647

Proxy 4.0 rebranding: Admin OLH: Changes to reflect new product name.

6934367

Upgrade on Windows creates a "Oracle iPlanet Web Proxy Server" entry in add/remove programs.

6936445

Proxy 4.0.13 - 2 new CA root certificates cannot be displayed correctly from admin GUI.

6937256

Submit and revert button under ACL setting under admin GUI are not being displayed in firefox 3.6.

6937459

Proxy forwards POST headers without POST entity body.

6939617

Proxy 4.0 rebranding: installation: windows upgrade fails upon change of product name.

6939990

Proxy 4.0 rebranding: Admin GUI: Change images in the "Version" popup.

6940022

Proxy 4.0: Compiler version change: Move to Sun Studio 12.

6941325

Proxy 4.0 Docs: Cache capacity needs updating in Proxy Admin Guide.

6941493

Proxy 4.0 rebranding: Changes to package/rpm related files.

6941954

Proxy 4.0 rebranding: Admin server's realm string should not contain a "Web" prefix.

6941956

Proxy 4.0 rebranding: OLH: Modify/remove the "Document Information" page.

6944070

Proxy 4.0 rebranding: Admin GUI version window title needs to be changed.

6945311

Proxy 4.0: rebranding: Proxy Agent Header in the Admin GUI should show Oracle iplanet Proxy Server.

6945318

Proxy 4.0: urldb emits invalid warning/error message while expiring cache files.

6946167

Proxy 4.0 rebranding: Upgrade in windows should not create a new entry of start > programs >.

6955678

Problem with directory permissions.

6955684

Problem with file permissions.

6955723

Problem with JSESSIONID.

6955741

Problem with HTML pages.

6955759

Problem with admin console (param INSTANCE_NAME).

6955761

Problem with admin console (reflected XSS).

6955762

Problem with admin console (param absolute).

6955763

Problem with admin console (param mime).

6955764

Problem with admin console (param cmd).

6955765

Problem with admin console (param type).

6955766

Problem with admin console (adminReferrer).

6955769

Problem with admin console (resource).

6956084

Problem with admin console (target).

6956086

Problem with admin console (dscruser-lang).

6956143

Problem with admin console (clickjacking).

B.15 Issues Resolved in 4.0.13

Table B-15 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.13.

Table B-15 Issues Resolved in Proxy Server 4.0.13

Issue ID

Summary

6886805

Proxy Server 4.0 appears to go into a high CPU consumption loop while processing POST requests for ftp URLs. This is accompanied by memory growth.

6896637

Proxy Server 4.0 goes into high CPU consumption and memory leak while processing ftp HEAD requests.

6896640

Proxy Server 4.0 fails during startup if server.xml does not contain GC-related configuration.

6900117

Integrate NSS 3.12.5 which contains fixes for the SSL/TLS vulnerabilities.

6905852

Proxy Server 4.0 fails due to a bug in caching subsystem.

6862976

Proxy Server 4.0's "map" SAF should allow mappings to specific files on a remote server.

6875375

Proxy Server 4.0 Admin GUI Cache View (cv) program fails.

6878190

Proxy Server 4.0.x supports Sun Fire T-Series Crypto Accelerator when installation user and instance user are the same, such as root.

6878699

Proxy Server 4.0.8 has .htaccess issues with grpfile if this user belongs to multiple groups.

6885145

"HTTP3287: connection limit (XXXX) exceeded, closing socket"

Proxy Server 4.0 displays this error message every time when the requests exceed a ConnectionQueue size.

6888184

After upgrade, installer displays strangely worded message in Proxy Server 4.0.11.

6891353

Proxy Sever 4.0.x does not recognize $ character.

6895030

The cache finish status can be missing/empty due to existing lock file under heavy load conditions.

6897536

Proxy 4.0 currently does not support the behavior promised by a "Proxy-support: Session-Based-Authentication".

6898929

Proxy 4.0.13 supports Microsoft Windows 2008 Enterprise Edition.

6900151

When a cached object is being refreshed after its size has changed at the remote server, and chunked encoding is used, the cache-finish status is absent in the server's access logs.

6901079

The http client can be enhanced to optionally run the Error stage for any error responses that it receives from a back end server.

6906258

Proxy Server 4.0 needs to support arbitrary LDAP search filter in dbswitch.conf.

6906789

Corrupted cache files can be formed in a Proxy 4.0 installation cache under load.

6910914

URL mapping does not work with send-error.

B.16 Issues Resolved in 4.0.12

Table B-16 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.12.

Table B-16 Issues Resolved in Proxy Server 4.0.12

Issue ID

Summary

6856153

Proxy 4.0 fails in the ftp subsystem under stress.

6856800

Mapping cache breaks under a high load environment on Proxy Server 4.0.8.

6869927

Integrates NSS 3.12.

6882485

Proxy Server 4.0 fails during startup with ICP enabled and MaxProcs > 1.

6851886

Adds a dedicated thread to monitor the ldap connection pool for validation.

6863071

Proxy Server 4.0 caching does not happen for large query strings (> 150 characters, approximately).

6864966

Feature request to strip the version number out of the service name (Proxy Server 4.0.11).

6864967

Notifies the user when upgrading the custom Proxy Server installation to check javahome.

6868580

Version changes for 4.0.12.

6872808

Proxy Server 4.0 should support Windows 2003 R2 SP2.

6874449

Proxy Server 4.0 build patch scripts need to be notified for new buildpatch location.

6876811

SSL tunnel does not log initial wait time and full wait time in extended2 logging.

6882926

Proxy Server 4.0 ICP port not available on Solaris x86.

6883024

Proxy Server 4.0 byte range handling is broken.

6883480

Proxy Server 4.0 displays "Bad CIF entry" message while looking up a cache file.

6883492

Proxy Server 4.0 does not receive ICP messages by peers on x86.

6878213

send-error should choose error file path based on browser locale.

B.17 Issues Resolved in 4.0.11

Table B-17 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.11.

Table B-17 Issues Resolved in Proxy Server 4.0.11

Issue ID

Summary

6835885

The ftp subsystem of Proxy Server 4.0 has a bug that leads to memory corruption and server failure.

6837779

A memory leak is observed in Proxy Sever 4.0 ftp subsystem while accessing directories through ftp.

6842576

The caching subsystem of Proxy Server 4.0 has a bug that leads to memory corruption and returns incomplete response headers when served from the cache.

6844188

Proxy Server 4.0 can fail due to memory corruption, while serving ftp requests from the cache.

6847078

The caching subsystem of Proxy 4.0 should identify and avoid processing of corrupt cache files to serve requests.

6847467

Configuring the Proxy Server 4.0 to use the pre-filter SAF causes server to fail.

6853447

Proxy server fails when the script associated with the pre-filter SAF contains an empty line at the beginning.

6827602

The statistics generation in Proxy Server 4.0 should show data for both "Client DNS cache" (host-to-ip) and "Host DNS cache" (ip-to-host).

6836430

The Expires header is not handled correctly in Proxy Server 4.0.9.

6837471

Proxy Server 4.0.9 fails to display Statistics page on Linux and throws a "500 Error".

6838323

Proxy Server 4.0 displays wrong "504 Gateway Timeout Error" when <NameTrans fn="set-variable" error="504">.

6838907

Windows Installer for Proxy Server 4.0 does not allow port values less than 1024 for the server instance, while allows for Administration Server.

6843724

Garbage collection in Proxy Server 4.0 may produce a race condition under heavy load.

6847488

A bug in the Proxy Server 4.0 administration interface makes it difficult to edit template assignments that contain '+' characters.

6847849

The server.xml file is not updated on modifying the cache "Working Directory" in Proxy 4.0 administration interface.

6848296

Authentication problems are observed in Proxy 4.0, while using ACLCacheMax parameter.

6849204

A potential memory corruption and server failure occurs in Proxy Server 4.0 due to a parray module issue.

6849650

Proxy Server fails during restarts when configured for MaxProcs > 1.

6853436

While updating the cache size through "Set Cache Specifics", server.xml does not get updated.

6808135

Proxy Server 4.0.9 has a typo issue while accessing "Server Config Information" panel in both Admin GUI and CLI.

6825292

Proxy Server 4.0 should allow Admin GUI to enable or disable both types of DNS cache; ip-dns-cache-init and host-dns-cache-init.

6840526

Proxy Server 4.0 has potential problems with parray code.

6841509

During Proxy installation, selecting "Startup on Boot = yes" results in an error.

6843134

Verbose logging mode of automatic GC is required.

B.18 Issues Resolved in 4.0.10

Table B-18 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.10.

Table B-18 Issues Resolved in Proxy Server 4.0.10

Issue ID

Summary

6764910

Proxy Server 4.0 fails due to dynamic reconfiguration.

6783252

Proxy Server 4.0 should display cache finish status for responses marked as non-cacheable by the remote server.

6793247

Proxy Server should optionally ignore caching directives in HTTP request headers.

6559322

Proxy Server must support large web proxy cache size greater than 32 GB.

6773378

URL filtering must allow specifying relative URLs. This facilitates URL filtering to work along with load balancing.

6781954

The passthru-cookies parameter in the URL mapping feature, used to specify cookies, does not function properly in a few cases.

6785653

POST with proxy authentication fails with a 407 error if you have not authenticated before the POST.

6789769

The URL filter functionality does not consider CONNECT requests.

6791870

The Proxy Server's administration interface does not allow multiple reverse mappings to the same destination.

6798154

Certain url constructs, with a space and a single quotation, are not translated properly by the Proxy Emulator.

6804616

Proxy Server 4.0.10 supports the feature - Transparent Proxy Support for HTTP/1.1 requests.

6803379

The Proxy Server 4.0.9 patch, 120983-16 and prior versions, provides support for RHEL 3.0, 4.0, and 5.0.

6796045

In the Proxy Server's administration interface, the DNS cache information in Monitoring functionality should be updated appropriately.

6754044

Upgrading Proxy Server on Windows fails, because only a single installation of Proxy Server 4.0 is allowed on Windows.

6781259

The Java version information on the Proxy Server installation wizard is not updated.

6820625

URL rewriting fails, when a url has a space after a quotation mark.

6820622

Proxy Server inserts a wrong If-modified-since: request header when without-lastmod is enabled.

6817164

cbuild should include appropriate help message for the -R option.

6816997

Proxy Server 4.0 has a problem in the map SAF's HTTP redirect functionality.

6812802

Proxy statistics are not displayed for DNS on HP-UX, after enabling the Activate Statistics/Profiling.

6805450

Web Proxy Emulator problem while using DHML application.

B.19 Issues Resolved in 4.0.9

Table B-19 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.9.

Table B-19 Issues Resolved in Proxy Server 4.0.9

Issue ID

Summary

6712042

Proxy Server 4.0 encounters an instance hang in cache_filter_remove function.

6713723

In Proxy Server 4.0, the cache partition/section .size files do not always show accurate values.

6715885

Proxy Server 4.0 reported log error messages related to cache lock file problem.

6715891

In Proxy Server 4.0, templates meant for CONNECT requests do not function properly.

6721344

Proxy Server 4.0 should have the ability to rewrite client headers.

6722629

Proxy Server 4.0 leaks file descriptors in the ftp subsystem when configured in PORT mode.

6722646

Proxy Server 4.0 leaks file descriptors in the caching subsystem while handling partial HTTP responses.

6723344

In Proxy Server 4.0, the cache statistics collection logic performs a complete cache traversal during startup. This happens multiple times, contributing to a slow server startup.

6725741

Disabling statistics or profiling functionality in the Proxy Server 4.0 administration interface, does not function properly.

6727215

In Proxy Server 4.0, large negative values are seen for xfer-time in the access log.

6728447

In Proxy Server 4.0.7, digest authentication used to process an ACL fails when the URL contains a query string with backslashes.

6735228

In Proxy Server 4.0, the caching subsystem has a file descriptor leak under certain conditions.

6739585

Proxy Server 4.0 needs an alternative faster method to find out current cache size.

6740248

In Proxy Server 4.0.7, Admin GUI displays null for Processes and Listen Queue Size instead of default values.

6741262

Performance optimization is required for the Proxy Server 4.0 caching subsystem.

6745095

Proxy Server 4.0 should tolerate HTTP responses that contain embedded spaces in header names.

6745170

Proxy Server 4.0 should support on RHEL5.

6746138

Proxy Server 4.0 should have the capability to rewrite HTTP request bodies.

6747928

FTP requests going through Proxy Server 4.0 as URL ftp://user:password@server, where the password contains the @ character, generates an incorrect response.

6750791

Proxy Server 4.0.7 fails under load, due to a problem in the ACL subsystem.

6759153

Proxy Server 4.0.8 fails due to a problem in the URL mapping subsystem.

6762346

Improper handling of cache-control header in Proxy Server 4.0.

6768244

Improper functioning of channel pooling logic in Proxy Server 4.0, results in service unavailability and possible memory leak.

6275141

File cache functionality is not implemented in Proxy Server 4.0.

6767688

Proxy Server 4.0 should support the "only-if-cached" cache-control directive.

6767691

Proxy Server 4.0 should support the "stale-while-revalidate" cache-control extension.

B.20 Issues Resolved in 4.0.8

Table B-20 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.8.

Table B-20 Issues Resolved in Proxy Server 4.0.8

Issue ID

Summary

6648112

Proxy Server 4.0.6 and 4.0.7 do not provide a way to disable EPSV FTP Transfer Mode.

6655221

Increase the maximum timeout for idle connections on the Proxy SOCKS Server 4.x.

6660265

flexanlg/dpstats log analyzer is unable to deal with large access log files.

6660814

In Proxy Server 4.0, the block/fwd IP character of the most specific object is not enforced correctly.

6664392

In Proxy Server 4.0, improper handling of vary header occurs.

6664646

In Proxy Server 4.0, improper handling of via header occurs.

6670738

In Proxy Server 4.0, there is a possible 'High CPU Utilization' problem in the FTP subsystem.

6688600

Proxy Server 4.0.7 Admin GUI adds am into the server.xmlfile when using Caching-Schedule Garbage Collection page.

6692494

In Proxy Server 4.0, the cache filter masks the client write failures even when a cache file is not opened.

6692495

Proxy Server 4.0 can fail during Garbage Collection/Cache iteration code.

6695257

Integrate URL mapping feature.

6707473

Heap-based buffer overflow exists in FTP Proxy Server.

6708838

Upgrade to JDK 1.5 in Proxy Server 4.0.

6708842

Telemetry feature for Proxy Server 4.0.

6711396

dpstats dumps core in customer log file.

6454382

Reverse Proxy Server should allow changing cookie domain value in set-cookie.

B.21 Issues Resolved in 4.0.7

Table B-21 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.7.

Table B-21 Issues Resolved in Proxy Server 4.0.7

Issue ID

Summary

6729343

Proxy Server 4.0.7 - Upgrading on Windows 2003 while the server is running fails.

When upgrading on Windows from Proxy Server 4.0.6 to Proxy Server 4.0.7 without stopping the server, the process fails with errors.

Stopping the server before attempting the upgrade will ensure the upgrade runs successfully.

6261401

URL filter files should be created under the config directory instead of the conf_bk directory.

6590476

FTP subsystem is not closing the old connections appropriately.

6591980

The ownership of the URL filter is not set to that of the server instance user.

6592079

Backup files are getting created with wrong ownership.

6594729

Receives an HTTP 7756 invalid response header, but serves the file to the client.

6595773

FTP in Proxy Server 4.0.5 shows incorrect directory list.

6596860

Proxy Server should return a correct response when a pooled FTP connection receives the reset packet.

6599212

Add a dedicated thread that monitors the FTP connection pool for inactive connections.

6600193

Proxy-Agent header does not work.

6602044

Incorrect FTP response while reloading the page multiple times.

6602049

Need to improve handling of FTP requests for internal objects like file and folder icons.

6604108

Incorrect response while dealing with invalid response headers.

6605322

Provide an in-process cleaning facility to clean cache entries fast.

6613934

Digest authentication prompts user to authenticate repeatedly.

6619592

httpacl and alias directories exist for the removed instance.

6620274

Proxy Server 4.0.6 is unable to create new cache working directory if parent directory does not exist.

6621398

Proxy Server 4.0.6 fails to work with FTP server when you try to forward map to a back end of FTP server.

6622805

Proxy Server 4.0 does not respond and gets timed out, while accessing certain FTP URLs.

6622813

Proxy Server 4.0: Starts very slow when the cache size is huge.

6628381

A proxy instance for which the cache is disabled cannot be removed cleanly.

6634127

Memory corruption causes server failure.

6635864

Manage Certificates screen on the administration interface is not displayed correctly.

6639455

Proxy Server does not respond on stop or restart.

6641201

The Proxy-Authenticate headers are not passed correctly to the end client in a forward proxy.

6648470

Proxy 4.0: Possible memory corruption while processing responses that contain "Vary:"

B.22 Issues Resolved in 4.0.6

Table B-22 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.6

Table B-22 Issues Resolved in Proxy Server 4.0.6

Issue ID

Summary

6224535

Timeout functionality does not work.

6460215

Cannot connect to an IPv6-enabled web site when connecting through Proxy Server.

6478413

Uninstalling a Proxy Server instance does not result in the removal of the files corresponding to the instance from the alias and httpacl directories.

6494418

block-multipart-posts parameter does not block the request when content-type parameter is set.

6505578

sockd daemon can run out of worker threads when processing UDP associated requests.

6513846

Proxy Server 4.0.6 documents are updated to remove reference to HTTPS caching.

6514870

Removing a template through the Remove Template option does not remove all the assignments for that template.

6520593

A new section "Precedence of Regular Expressions Over Templates in Set Cache Configuration" is added to Chapter 16 in the Proxy Server 4.0.6 Administration Guide to explain why templates used within Set Configuration do not work but manually entered regular expressions do.

6526659

Incorrect server start command is displayed in the installer.

6529376

The default cache size for Proxy Server on Windows is 100 megabytes but the help page states that it is 1.6 gigabytes.

6530476

The path to the libjvm.sl file in the start script is not set correctly.

6534717

When cache-status is enabled in the access log, the access logs repeatedly show cache file as written and deleted for request headers that have cache-control set to no-cache.

6537346

Log entries show cache status as written even when cache file is not created.

6538613

cachegc dumps core if the Proxy Server instance's cache directory has been modified.

6541327

cachegc sometimes works incorrectly.

6545753

Error log shows a confusing error message when Proxy Server encounters an invalid request line.

6546256

On Windows, a regular expression is not registered correctly in the obj.conf file.

6546720

Cannot connect to certain sites when DNS cache is enabled.

6547808

On Windows, the watchdog process fails when the Proxy Server instance is stopped through the service manager.

6559837

Proxy server fails while handling an ftp request.

6560432

The Proxy Server 4.0.6 Administration Guide and the online help are updated to include a description for Source Port Number.

6562122

For an SSL Proxy Server instance, an incorrect password entry does not get written to the errors file.

6562165

Proxy Server 4.0.6 Administration Guide is updated to remove references to the file cache functionality.

6562585

Proxy Server 4.0.6 Release Notes is updated to provide the correct version number for NSPR.

6563262

During ftp access some error log messages are noticed that convey no information and can be confusing.

6564435

Details of the Cache Section Table on the administration interface are not displayed correctly.

6565004

Proxy Server 4.0.6 Release Notes is updated to provide correct link to the Proxy Server documentation page.

6565021

Internal log rotation rotates the files twice if the system time is changed between two scheduled rotations.

6565436

The section "Disabling the Forward Proxying feature in a Reverse Proxy Setup" under "Setting Up a Reverse Proxy" in Chapter 14 of the Proxy Server 4.0.6 Administration Guide is updated to add information about how to prevent a security vulnerability in a reverse proxy server configuration.

6566246

Cross-site scripting vulnerability in the View Error Log functionality.

6566309

Cross-site scripting vulnerability in the View URL Database functionality.

6566352

Cannot connect to an IPv6 FTP server through Proxy Server.

6566822

HTTP headers with a very long value can cause memory corruption in Proxy Server.

6566836

flexanlg dumps core.

6566889

After setting a value for Processes in the Configure System Preferences page, the value cannot be changed back to null.

6566924

Help page is updated to provide a clearer explanation for Processes in the Configure System Preferences page.

6568534

Reference to Proxy Server 3.6 documentation issue is removed from Proxy Server 4.0.6 Release Notes.

6569516

Proxy Server accepts and forwards responses whose header names contain spaces.

6572128

Localized online help is updated to provide the correct context-sensitive help page.

6572138

The access log does not include certain connection-related information.

6574401

Proxy Server supported browsers to be enhanced to include Internet Explorer (IE) v7.

6576044

Proxy Server 4.0.6 Configuration File Reference is updated to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT.

6576050

Proxy Server 4.0.6 online help is updated to specify the effect of the HTTP client's retry functionality.

6576065

Proxy Server 4.0.6 online help is updated to make it consistent with style guidelines and the Proxy Server's product user interface.

6577128

Proxy Server support to be extended for Sun Crypto Accelerator 6000.

6578024

LDAP connection failure errors.

6578560

In the message that Proxy Server displays after an upgrade to indicate how you can access the Administration Server, the server name and port name are indicated as null (http://null:null)

6579049

Proxy server creates an incorrect partition, which causes errors during startup.

6579781

An empty host-regex argument in the virt-map directive results in Proxy Server failure.

6581350

Proxy Server installation contains debug JDK binaries.

6584989

In the Version window, the label is not located in the center of the Close button when the browser is IE 7.

6594191

Localized online help has to be integrated to Proxy Server 4.0.6.

B.23 Issues Resolved in 4.0.5

Table B-23 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.5

Table B-23 Issues Resolved in Proxy Server 4.0.5

Issue ID

Summary

6240773

Deleting the listen socket and restarting the server does not clear the port.

6390867

On Windows, cv.exe fails when you try to view the information for a cached csv file.

6391439

Clearing the Enable DNS subdomains option in the administration interface does not remove the line DNS fn="dns-config" local-domain-levels="0" from the obj.conf file.

6413536

webservd must be used as the default user and not nobody.

6463455

Proxy Server 4.0.5 Release Notes is updated to state the version of Sun Crypto Accelerator that supports Proxy Server.

6466910

Proxy Server 4.0.5 Administration Guide is updated to describe the procedure to set up Sun Crypto Accelerator to work with Proxy Server.

6482102

Files cannot be retrieved from certain FTP sites through web browsers when connecting through Proxy Server.

6500200

Expired page is not displayed in the administration interface.

6500224

FTP through SOCKS routing does not work.

6500232

Proxy Server 4.0.5 online help is updated to mention Cache in the help page for the Monitoring Server Status page.

6500547

FTP through SOCKS routing occasionally results in file corruption.

6506550

Proxy server can fail due to null pointer access in caching subsystem.

6513846

Proxy Server 4.0.5 Release Notes is updated to state that Proxy Server does not support HTTPS caching.

6517969

Processing of obj.conf and ACL does not work as expected.

6520629

Configure Virtual Multihosting page in the administration interface does not allow user port number in host-regex.

6521610

When the Set Cache Specifics page in the administration interface is used to enable cache, it does not remove the "cache-disable" line in the obj.conf file.

6523139

Proxy Server debug build does not log all the information, such as disconnects.

6524253

Proxy Server watchdog core dump.

6524898

When the cache structure is created by cbuild.exe, the .sects file in the cache becomes empty after the instance starts.

6525294

The flexanlg utility dumps core if there are any syntax problems in the log file.

6526297

The Manage Section page in the Proxy Server administration interface lists all the sections of all the partitions, and offers a way to move sections from one partition to another. This feature does not work correctly.

6526354

When a new Partition is added, one section gets created.

6526964

SOCKS v5 server disconnects sessions unexpectedly.

6526990

The localized versions of Proxy Server 4.0.4 online help have a link that does not work properly.

6527840

Shutting down the SOCKS server using the administration interface results in a different message compared to the message that is displayed while starting.

6528069

Though the maximum cache partitions possible in Proxy Server is 32, there is a problem in creating 32 partitions in Proxy Server 4.0.3.

6529305

When using Virtual Multihosting, if you define the host in uppercase, it does not work.

6534208

The version string has to be changed for the 4.0.5 release.

6537410

Proxy Server sometimes waits to receive a new HTTP request until Proxy Server closes the connection.

6537736

Proxy Server has a domain buffer overflow vulnerability. The problem specifically exists in the handling of domain name address types within the sockd daemon.

6537745

Proxy Server has a domain buffer overflow vulnerability. The problem specifically exists in the s5auth_userpass() function within the sockd daemon.

6538060

The startsvr and stopsvr scripts of the Administration Server refer to proxy-admserv404 instead of proxy-admserv405.

6538173

On HP-UX, the Administration Server displays an error page when you try to add a listen socket to a proxy instance.

6539318

On Linux, the utility cbuild does not work.

6539689

On Linux, if the group ID 80 already exists, Proxy Server installation does not work and the installation failure does not result in proper installation log.

6544263

Localized versions of the Proxy Server 4.0.5 online help must be updated with the changes made to the English version of the online help.

6545267

Proxy Server 4.0.5 Configuration File Reference is updated with information about log parameters.

B.24 Issues Resolved in 4.0.4

Table B-24 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.4

Table B-24 Issues Resolved in Proxy Server 4.0.4

Issue ID

Summary

4973509

Cache-Control directive for private/no-cache headers is not supported for multiple values.

4973523

HEAD requests are not cached.

4973652

Proxy Server does not support 65536-byte long URLs.

4999184

When proxy server is configured in reverse proxy mode pointing to a web server, the error message displayed when the web server is down should not mention that it is Proxy Server.

5093104

The Proxy Server administration interface allows trailing white space for an HTTP header in client IP forwarding.

6208895

An FTP request through Proxy Server to a Microsoft IIS FTP server does not work.

6214329

Error in error log for HTTP4352:zlib internal error.

6233086

For client credentials forwarding with multibyte user name, validation check needs to be added.

6243358

A deleted user still appears as part of a group.

6245972

User's permission set through the Administer Access Control page does not get implemented.

6246562

Controlling a set of servers installed on different locales and platforms through clusters fails when stopping the set of servers.

6253844

There is no support for "zh-cn" for Proxy Server online help.

6255761

There is no content at the Installer Help page.

6255838

When a Proxy Server instance is removed without stopping the SOCKS server and a new instance is created, you will not be able to start the SOCKS server on the new instance because the port would be in use.

6256442

The installer displays the error message "Password should be at least 8 characters" only in English.

6266497

Administration interface allows duplicate port numbers in the Add Server page.

6268356

On Windows, SNMP service does not work if libnspr4.dll is not present in the system32 directory.

6274424

On Windows, the value for defaultInstallDirectory in the state file is wrong. The default installation directory in the installer is c:\sun\ProxyServer40, but the state file generated when you use the command setup --savestate does not have c:\sun\ProxyServer40 as the default installation directory. The state file displays the UNIX template value as the default installation directory.

6304981

Proxy Server installation fails on Linux if ksh is not installed on the system.

6310283

In the Proxy Server administration interface, sometimes the tabs display incorrect page content.

6312087

Localized online help is not context-sensitive.

6313904

The Administration Server does not allow you to set a listen socket with a port number that is used for another IP address.

6321797

Proxy Server 4.0.3 Configuration File Reference is updated with information for the flex-init parameter no-format-str.access.

6331035

Load balancing feature works only for regular expressions.

6333355

When the ACL caching is enabled, the user/group definition in the ACL has to exactly match the case of the LDAP entry for the ACL caching to happen.

6337657

Proxy Server displaying Internal Server Error message when the configuration of Distributed Administration is attempted.

6369549

Proxy patch installation on Java ES 5 results in some errors on Linux.

6371618

Cannot change Compression Level to NONE. Documentation should state what to select as the compression level.

6380736

Control does not transfer to Schedule GC page when Explicit GC is selected in the Set GC Preferences page.

6382393

Proxy Server is unable to perform FTP uploads.

6382692

During migration, the format string Req->vars.pauth-user in the 3.6 obj.conf should be changed to Req->vars.auth-user .

6383320

Cannot remove cache file when contents file name has space or Japanese characters.

6383435

sockd process uses high memory on Linux.

6387166

View Server Settings page in the Proxy Server administration interface does not display the MaxProcs value.

6388818

The SOCKS server requires the Directory Service ID to be the default.

6390034

libnspr4.dll should be referred to first on the directory <install-dir>\bin\proxy\bin instead of the directory system32.

6390054

Copyright year should be changed in the version window of the administration interface.

6399395

The Select Directory Services page does not reflect the directory service selection.

6402589

The function http-client-config does not take the setting from the most specific object.

6411505

The Redirect URLs page in the administration interface does not function as expected.

6412129

Proxy Server 4.0 migration tool must add the line fn="block-ip" if the setting is not found in the Proxy Server 3.6 instance.

6414355

Executing the command batchupdate with an invalid bu.conf file results in segmentation fault on Linux.

6415125

Change the compiler from Sun Studio 8 to Sun Studio 10.

6416272

Proxy Server fails to start properly after the server user is changed.

6417755

Links like Previous, Main, and Next not localized in the Proxy Server online help.

6419925

More cache-related statistics required in Proxy Server.

6423487

Detailed description on how to enable DNS statistics has been added to the online help.

6425025

The directive host-map does not work unless a url-prefix parameter is explicitly provided.

6425026

Proxy Server needs to distinguish cache objects based on Accept-Encoding headers.

6425038

Proxy Server does not consider query-maxlen when acting as reverse proxy with cache-local value set to 1.

6425601

The automatic garbage collection does not work in certain conditions.

6425752

There are duplicate headers in a 304 response from the cache.

6426543

Cache iterator leaks memory.

6427137

Proxy Server transmits micro version number in responses.

6433285

Some of the proxy core error messages are not localized.

6433776

.sects files are not created when the command cbuild is executed.

6433807

On Windows, Proxy Server and Administration Server display wrong version number in the start up message.

6434137

Proxy Server displays wrong error message on timeout.

6435491

In the Proxy Server 4.0.4 Configuration File Reference, in Chapter 5, the reference to the type parameter is removed in the section on Service derivative.

6441601

In the Proxy Server 4.0.4 Administration Guide, in Chapter 5, notes have been added to clarify the need to load the root keys of Certification Authority or the self-signing application.

6442054

In the Proxy Server 4.0.4 Administration Guide, in Chapter 5, the section Using SSL to Communicate with LDAP has been updated with information about importing LDAP root CA certificates to Proxy Server.

6442071

In the Proxy Server 4.0.4 Administration Guide, in Chapter 5, a new section is added to clarify about securing access to the Administration Server.

6442090

In the Proxy Server 4.0.4 Installation and Migration Guide, information has been added to clarify that:

- Proxy Server can be installed as a non root user

- Proxy Server can run as a non root user

6442091

Cache must correctly compute the value of current_age with the request delay added to the age.

6442641

Proxy Server 4.0 does not work well with CONNECT requests that specify a content-length.

6443160

On HP-UX, zlib library needs to be packaged with the product for Java ES 5.

6443720

Log analyzer can have issues when the access log file has no log information.

6443731

On Windows 2000 SP4, the system requires restart after configuration in the Java ES environment.

6444332

On HP-UX, executing batchupdate with invalid bu.conf results in segmentation fault.

6444363

On HP-UX, proxy instance does not get created with non root user.

6444942

Executing the command cachegc on a nonexistent instance fails.

6445440

Error messages are incompletely localized.

6446098

On HP-UX, there is an internal error in the View URL Database page.

6446349

On HP-UX, stress test results in mmap() failure.

6446933

In the Proxy Server 4.0.4 Configuration File Reference, references to docs directory are removed.

6447423

Proxy Server 4.0 leaks memory because the daemon structures are not freed properly.

6447427

Proxy Server 4.0 leaks memory while acquiring channel in common client.

6447476

The Proxy Server administration interface always displays the cache partition size as 0.

6450886

The new maximum value of 360 minutes for the socks5.conf parameter SOCKS5_TIMEOUT has been documented in the Proxy Server 4.0.4 Configuration File Reference.

6454032

Proxy Server binds to the same port each time the Address directive is set.

6455411

On Windows, Proxy Server needs to support coexistence of Java ES 4 and Java ES 5.

6459839

Migrating Proxy Server 3.6 to 4.0.3 with the cache disabled results in an unusable server instance.

6461889

HTML filter corrupts the transformed data.

6461896

HTML tag filter does not update the content length when it transforms the source document.

6461991

Typographic errors exist in the English source of proxyResources.properties file.

6462366

On HP-UX, Proxy Server fails to restart after configuring SOCKS name server.

6463404

Distributed administration does not work correctly when a user is given access to all programs.

6463927

The template file WPSProp.properties has entries for the Windows platform.

6465608

On Windows, the shortcut for Stop Admin Server is not created for the Administration Server when Proxy Server is installed.

6465984

The file proxyResources.properties contains duplicate keys.

6466452

Proxy Server should update the installer registry key from Entsys to Entsys5.

6467644

On Windows Server 2003 Enterprise platform, running reconfig.bat fails.

6470294

On Windows, running cbuild.exe to decrease the cache sections does not remove the sections properly.

6473677

On Java ES 4 system, Proxy Server does not start after applying the patch 120981-08/120982-08.

6478407

In the Proxy Server 4.0.4 Administration Guide, in Chapter 7, the section Starting SSL-Enabled Servers is modified to remove the suggestion for start script modification.

6480637

Proxy Server fails every hour.

6484781

After enabling disturbed administration, even unauthentic users can log in to the Administration Server.

6485988

In the Proxy Server 4.0.4 Configuration File Reference, the section on Send-Error in Chapter 5 is updated to add a note stating that send-error does not work for Web Server HTTP response.

6505480

In a standalone installation of proxy server on HP-UX, installation fails on HP-UX 11.11.

6519072

In the installer for a standalone installation of Proxy Server 4.0.4, the JRE version compatible with the U.S. DST changes 2007 needs to be shipped. The compatible JRE version is 1.4.2_13 on Solaris, Windows, and Linux. On HP-UX, the compatible JRE version is 1.4.2.12.

6519113

In the Proxy Server 4.0.4 Configuration File Reference, the section on Error in Chapter 5 is updated to remove references to error response codes 404 and 500.

6511549

In a standalone installation of Proxy Server on HP-UX, installation fails in CLI mode.

6520577

In the Proxy Server 4.0.4 Administration Guide, the section on Virtual Multihosting is updated to add a note to indicate that the reverse mapping should be specified before the other mappings.

B.25 Issues Resolved in 4.0.3

Table B-25 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.3

Table B-25 Issues Resolved in Proxy Server 4.0.3

Issue ID

Summary

6191615

Certain regular expressions when used as URL filters cause Proxy Server to fail while starting.

6213012

The ROTATELOGS event on Windows is not triggered at the time specified.

6213726

The Transfer Time Report reports a constant value of "0.00 sec/req".

6215659

The Transfer Time Distribution Report shows a constant value of "< 1 sec [100.0%]".

6239292

Log analyzer error with Extended2 format when access log file has no log information.

6242032

In the Proxy Server 4.0.2 Administration Guide, in Chapter 7, the section "Configuring System Preferences" has wrong description for Parent Array. The correct description is, "A parent array is a proxy array that a proxy or proxy array member routes through".

6264079

The administration interface overwrites default, which is the default value for Directory Service.

6275141

In Proxy Server 4.0.2, the File Cache feature is shown in the GUI and documented for the Server Manager > Caching > Configure File Cache page, but the feature is not implemented.

6270693

Sometimes the Filter directive is invoked twice per request.

6285076

SOCKS server cannot handle both the LDAP and password file for user authentication, when both the methods are configured.

6285183

PR_MemUnmap() call results in error in Windows.

6285791

SOCKS server start command-line issue for Java ES 4 is resolved in this release, but existing instances created in Java ES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in a standalone installation of Proxy Server.

6289188

When you install Proxy Server 4.0 as non root user and Administration Server as root user, any changes you make to the cache settings in the administration user interface result in the permissions for cache file and cache directory changing from non root to root.

6292729

The default setting for Client IP Addressing Forwarding should be blocked.

6294282

The Proxy Server 4.0 administration interface cannot set the ACL correctly for any resource that includes a backslash (\) in its pattern.

6294563

Default setting of the access log format to be different from the Web Server.

6295286

In the Proxy Server 4.0.2 Administration Guide, in Chapter 14, the section "Setting up a Reverse Proxy" needs to note in Step 5 that the "/" mapping is added only if the user does not change the contents of the "Map Source Prefix" text box provided automatically by the Administration GUI.

6296870

Details of the Cache Section Table on the administration interface are not displayed correctly.

6299913

The ConnAddress directive is not changed to Address during a migration from Proxy Server 3.6 to 4.0.

6300480

The setting of Cache tab is not migrated successfully during a migration from Proxy Server 3.6 to 4.0.

6300615

The meta tag is missing in localized core messages.

6301140

Migration creates invalid cache entries when migrating an instance of Proxy Server that has the cache disabled.

6303619

An ACL with a database that is registered with a name other than default does not work properly.

6304354

The "Do Not Log Client Accesses From" option creates an invalid configuration.

6311548

Proxy Server 4.0 uses pauth-user instead of auth-user for Access Log.

6312044

In the Proxy Server 4.0 administration interface, the Monitor Current Activity page under the Server Status tab is not updated for DNS, Keep-Alive, and Cache Statistics.

6313910

On Windows, the Rewrite Headername feature fails and displays the message "Internal server error occurred".

6313959

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section "To configure the file cache" provides the wrong description for Step 1. The correct description is, "From the Server Manager, click the Caching tab".

6313960

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section "To create a batch update" includes Step 10 that refers to a "Timing section". This step is an error. The Set Cache Batch Updates page does not have a Timing section.

6316289

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section "Building the Cache Directory Structure" includes an example that refers to Figure 12-1 instead of 12-2.

6325537

Not able to change RqThrottle value through the administration interface.

6325616

Scheduled (explicit) Garbage Collection does not clear cache.

6328678

Cannot set ICP timeout value to less than 400 milliseconds through the administration interface.

6334854

Inconsistency between documentation for Proxy Server and sun-web-proxy-server_4_0.dtd .

6337102

Proxy Server fails with DNS fn = "dns-config" local-domain-levels = "8"

6338719

Patch upgrade of Proxy Server on Linux AS 3.0 installs in a different location.

6338875

Proxy Server 4.0.1 FTP Client fails to process symbolic links correctly.

6350957

In the Proxy Server 4.0.2 Administration Guide, in Chapter 5, the section "Enabling Security for Listen Sockets" does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode.

Also, in Chapter 8, the section "Specifying Users and Groups" does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode.

6365433

Unable to create Proxy Server instance when the Automatic Start option is selected in the Proxy Server administration interface.

6367375

Mapping with CONNECT doesn't work when there is a parent proxy.

6369095

Memory leak in Proxy Server 4.0.

6371084

Requesting SSL site does not work in chained proxy environment when using IP address of the Web Server.

6371618

Cannot change Compression Level to NONE.

6371731

No "connect://.*:563" in the default resource.

6371793

pkginfo displays $distro for SUNWproxy-l10n.

6373101

Administration Server creates invalid parameter for ssl-client-config.

6373622

cache-disable SAF is not documented.

6374279

Response to webdav OPTIONS method not according to RFC2518.

6376065

max-uncheck function does not work as expected.

6376153

Proxy Server 4.0.2 does not update cache for ftp/gopher protocols.

6381373

Proxy Server fails during run after restart if the cache is already warmed.

6381419

The value in the cache-last-checked header is invalid.

6381424

Warning header should contain the host:port value of the agent adding this header.

6382729

Proxy Server does not accept utf-8 encoded parameters.

6383301

Proxy Server 4.0 has a problem in channel pooling.

6383456

Proxy Server 4.0.2 uses high CPU in Linux.

6384616

Proxy Server 4.0.3 online help has typographic errors.

6385902

The format in Set Access Log Preferences does not match the default format.

6387772

Changes in online help, due to bugs (6325537, 6303619) fixed, need to be localized.

6387901

In the Proxy Server 4.0.2 Administration Guide, in Chapter 11, the section "Chaining Proxy Servers" is not clear.

6388156

The headers of cached files can get corrupted.

6390237

Proxy Server passes incorrect content-length if the response contains double content-length headers.

6392875

regexp-map does not work for connection.

6393573

Proxy Server 4.0.2 fails when DNS fn="dns-config" local-domain-levels="1"

6394287

SOCKS process polls too often, which leads to socks process taking up as much as 50% of CPU.

6395473

High CPU utilization problem in Proxy Server 4.0 while handling "slow" clients.

6395889

Windows Server Update Service (WSUS) does not work using Proxy Server 4.0.2.

6400981

SOCKS5_TIMEOUT value set in socks5.conf is ignored.

6402698

High CPU utilization in FTP client.

6418214

Issues with Proxy Server 4.0 garbage collection feature.

6424527

Proxy Server fails while processing a request containing an empty cache-control header.

B.26 Issues Resolved in 4.0.2

Table B-26 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.2

Table B-26 Issues Resolved in Proxy Server 4.0.2

Issue ID

Summary

5097664

ssl-tunnel-timeout parameter does not work on Windows.

6225025

ftp-listing-width parameter does not work correctly.

6251805

Changes to archive logs results in a failure.

6262277

Changing the minimum timeout value for ICP from 400 to 50.

6292690

In Proxy Server 4, while using IE 6.0 to access the administration interface, cannot select the original partition using Manage Sections>Partition.

6292786

Proxy Server does not write transfer time (and other times) to access log.

6308714

Proxy Server fails to start if umask is not set to 022.

6310909

In Proxy Server 4.0.1 point product, version string of the product name was over translated for French locale from 2005Q3 to 2005T3.

6310910

In Proxy Server 4.0.1 point product, many missing apostrophes in installer messages on French locale.

6310944

In Proxy Server 4.0.1 point product, CLI installer fails to display the license.

6310961

In Proxy Server 4.0.1 point product, the "Yes" in the license installer screen on Spanish locale is not localized.

6312723

Cannot access SSL sites with IP address while using Proxy Server 4.0.

6313981

In Proxy Server 4.0, not able to change the value of Rewrite Content Location and Rewrite Headername after creating a new Reverse Mapping using the administration interface.

6315817

Multiple simultaneous CONNECT (SSL Tunneling) requests cause thread starvation.

6330348

High memory usage by Proxy Server process in Solaris 10 during stress run.

6333995

Memory leak while running stress tests for CONNECT.

6335919

Proxy Server FTP client does not close a connection when the FTP server has closed.

6335922

Proxy Server FTP client does not send USER request to FTP server.

6336550

Error when trying to install Proxy Server 4.0.1 into a directory that contains a Proxy Server 4.0 installation.

B.27 Issues Resolved in 4.0.1

Table B-27 lists the issues resolved in Oracle iPlanet Web Proxy Server 4.0.1.

Table B-27 Issues Resolved in Proxy Server 4.0.1

Issue ID

Summary

2126143

The same regular expression does not work in URL Filters, but works in Access Control and Routing.

2126380

Memory leak in the ICP process of Proxy Server.

6231283

The Administration Server on Linux Red Hat Advanced Server 3.0, fails to start.

6237346

The flexanlg utility dumps core while generating a log analysis report using the Extended2 log file format.

6240767

The add/edit listen sockets for the Administration Server and the Proxy Server instance do not verify for used ports.

6242627

Localized core messages are not getting displayed.

6243369

Entry of multibyte characters in the pages related to SOCKS needs to be prevented.

6244103

Internal server error is displayed when the Set Connectivity Mode page of the Proxy Server instances is accessed on a Linux Advanced Server 3.0, Korean locale.

6245408

An internal error is displayed when a newly added partition is accessed if the administration user and the proxy instance user are different.

6249166

Inconsistency in the display of the Control Cluster, Modify Server, and Remove Server pages in the Cluster tab when the host name in the URL is replaced with localhost while accessing Proxy Server.

6253014

Failure occurs in the init-proxy SAF when there are more than nine NameTrans directives in the obj.conf file on Linux Red Hat Advanced Server 3.0.

6254508

The batch update command exits with a segmentation fault.

6255214

Cannot edit or remove an entry in the content URL rewriting page consisting of multibyte characters.

6255216

Some LDAP entries in the socks5.conf lead to socksd failure.

6259314

Some of the localized online help pages are not synchronized with the English online help pages.

6261440

Duplicate English online help exists in the installation directory.

6263694

Online help is unavailable for the Add and Replace Compromised Key List and Certificate Revocation List pages.

6263721

The wrong help page is displayed for the Add/Replace Cert pages in the Server Manager.

6274186

Unable to delete a server instance.

6276398

Remove the localized online help from the base workspace.

6285078

Entry for authentication failure of SOCKS request missing from log files.

6285779

Unable to start the Proxy Server instance if the serverID has a white space.

6285788

SOCKS server failure when authentication is used.

6289242

HTTP smuggling in Proxy Server 4.0.

6293449

Proxy Server 4.0 does not close the connection immediately with the CONNECT method.

6295622

The function ConnAddress is not realized or documented in Proxy Server 4.0.

6296169

The header Cache-last-checked is broken in Proxy Server 4.0 installed on other locales.

6296225

The Proxy Server instance may intermittently fail when DNS caching is enabled.

6301786

Localized Core Message not getting displayed on Solaris 9 x86, Linux AS 3.0.

6311463

On the proxy process, the number of open file descriptors keeps increasing with time, resulting in the proxy running out of file descriptors and dropping connections.

Index
C  E  F  K  N  P  R  S  U  W

C

creating

custom NSAPI plugins, 3.1

custom

NSAPI plugins, 3.1

E

escape parameter, 3.2.13

F

features, Proxy Server, 3.1

K

known issues, more information about, 3.1

N

new features, Proxy Server, 3.1

NSAPI plugins, custom, 3.1

P

platforms, supported, 3.1

Proxy Server

features, 3.1

R

Release Notes, 3.1

S

supported platforms, 3.1

system requirements, 3.1

U

url parameter, 3.2.13

W

workarounds, more information about, 3.1

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2017, Oracle and/or its affiliates. All rights reserved.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Pre-General Availability Draft Documentation Notice

If this document is in public or private pre-General Availability status:

This documentation is in pre-General Availability status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

Private Pre-General Availability Draft Documentation Notice

If this document is in private pre-General Availability status:

The information contained in this document is for informational sharing purposes only and should be considered in your capacity as a customer advisory board member or pursuant to your pre-General Availability trial agreement only. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described in this document remains at the sole discretion of Oracle.

This document in any form, software or printed matter, contains proprietary information that is the exclusive property of Oracle. Your access to and use of this confidential material is subject to the terms and conditions of your Oracle Master Agreement, Oracle License and Services Agreement, Oracle PartnerNetwork Agreement, Oracle distribution agreement, or other license agreement which has been executed by you and Oracle and with which you agree to comply. This document and information contained herein may not be disclosed, copied, reproduced, or distributed to anyone outside Oracle without prior written consent of Oracle. This document is not part of your license agreement nor can it be incorporated into any contractual agreement with Oracle or its subsidiaries or affiliates.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.