Installing Oracle® Solaris 11.2 Systems

Exit Print View

Updated: July 2014
 
 

Configuring the Web Server User Files Directory

The AI web server serves net images, AI manifests, and system configuration profiles that have been added using the installadm command. The AI web server can also serve files provided by the AI user or administrator.

You can store user files that do not need to be secured in the directory specified by the all_services/webserver_files_dir property of the svc:/system/install/server:default SMF service. This property does not have a default value. If you specify a value for this property, the value must be a directory on the local system. That directory can be viewed through the AI web server at the following URL, where server is the AI server's hostname or IP address and port is the AI web server port number discussed in Example 8–3:

http://server:port/files

User files that do need to be secured can be stored in the directory specified by the all_services/webserver_secure_files_dir property. This property does not have a default value. If you specify a value for this property, the value must be a directory on the local system. That directory can be viewed through the AI web server at the following URL, where server is the AI server's hostname or IP address, and secure-port is the secure AI web server port number discussed in Example 8–4 above:

https://server:secure-port/secure_files

If the AI manifest specifies an IPS package repository that requires a certificate and key, you can store those publisher credentials, and then specify this URI in the AI manifest. Only clients that have security credentials assigned can access this directory.


Tip  -  For greatest security, files in the webserver_secure_files_dir directory should be owned by user webservd and group webservd and have no world access.