http-service (Oracle GlassFish Server 3.0.1 Domain File Format Reference)

Oracle GlassFish Server 3.0.1 Domain File Format Reference

`http-service`

Defines the HTTP service.

Superelements

config

Subelements

The following table describes subelements for the http-service element.

Table 1–64 http-service Subelements


Element	Required	Description
`access-log`	zero or one	Defines access log settings for each `http-access-log` subelement of each `virtual-server`.
`http-listener`	one or more	Not implemented. See the element description for attribute and property remapping.
`virtual-server`	one or more	Defines a virtual server.
`request-processing`	zero or one	Not implemented. See the element description for attribute remapping.
`keep-alive`	zero or one	Not implemented. See the element description for attribute remapping.
`connection-pool`	zero or one	Not implemented. See the element description for attribute remapping.
`http-protocol`	zero or one	Not implemented. See the element description for attribute remapping.
`http-file-cache`	zero or one	Not implemented. See the element description for attribute remapping.
`property`	zero or more	Specifies a property or a variable.

Attributes

The following table describes attributes for the http-service element.

Table 1–65 http-service Attributes


Attribute	Default	Description
`access-logging-enabled`	`false`	If `true`, enables access logging for all `virtual-server` subelements that specify this attribute as `true` or `inherit`. If `false`, disables access logging for all `virtual-server` subelements that specify this attribute as `false` or `inherit`.
`sso-enabled`	`false`	If `true`, single sign-on is enabled by default for all web applications on all virtual servers on this server instance that are configured for the same realm. If `false`, single sign-on is disabled by default for all virtual servers, and users must authenticate separately to every application on each virtual server. A `true` or `false` setting of the `sso-enabled` attribute of the `virtual-server` element overrides this setting for an individual virtual server. An `inherit` setting of the `sso-enabled` attribute of the `virtual-server` element uses this setting for an individual virtual server. At the `http-service` level, you cannot change the `sso-max-inactive-seconds` and `sso-reap-interval-seconds` values from their defaults. However, you can change these values at the `virtual-server` level.

Properties

The following table describes properties for the http-service element that are still supported. These properties apply to all network-listener elements.

Most properties for this element are no longer supported. For information about how other properties have been remapped, see the Properties table for http-listener.

Table 1–66 http-service Properties


Property	Default	Description
`ssl-cache-entries`	`10000`	Specifies the number of SSL sessions to be cached.
`ssl3-session-timeout`	`86400`	Specifies the interval at which SSL3 sessions are cached.
`ssl-session-timeout`	`100`	Specifies the interval at which SSL2 sessions are cached.
`proxyHandler`	`com.sun.enterprise.web.ProxyHandlerImpl`	Specifies the fully qualified class name of a custom implementation of the `com.sun.appserv.ProxyHandler` abstract class, which allows a back-end server instance to retrieve information about the original client request that was intercepted by an SSL-terminating proxy server. An implementation of this abstract class inspects a given request for the custom request headers through which the proxy server communicates the information about the original client request to the GlassFish Server instance, and returns that information to its caller. The default implementation reads the client IP address from an HTTP request header named `Proxy-ip`, the SSL `keysize` from an HTTP request header named `Proxy-keysize`, and the SSL client certificate chain from an HTTP request header named `Proxy-auth-cert`. The `Proxy-auth-cert` value must contain the BASE-64 encoded client certificate chain without the `BEGIN CERTIFICATE` and `END CERTIFICATE` boundaries and with `\n` replaced with `% d% a`. Only used if the `auth-pass-through-enabled` attribute of the `network-listener` element's grandchild `http` element is set to `true`.
`connectionTimeout`	`30`	Specifies the number of seconds an HTTP `network-listener` waits, after accepting a connection, for the request URI line to be presented.