Contents

Title and Copyright Information

Send Us Your Comments

Preface

Intended Audience

Documentation Accessibility

Related Documentation

1 Overview

1.1 Oracle HTTP Server Features

1.2 Oracle HTTP Server Components

1.2.1 Oracle HTTP Server Modules

1.3 Oracle HTTP Server Support

1.4 Oracle HTTP Server Management

1.4.1 Application Server Control Console

1.4.2 Oracle Application Server Command-line Tools

1.4.2.1 opmnctl

1.5 Starting, Stopping, and Restarting Oracle HTTP Server

1.5.1 Starting Oracle HTTP Server

1.5.2 Stopping Oracle HTTP Server

1.5.3 Restarting Oracle HTTP Server

2 Concepts

2.1 Understanding Oracle HTTP Server Directory Structure

2.2 Accessing Configuration Files

2.3 Configuration Files Syntax

2.4 Classes of Directives

2.5 Scope of Directives

2.5.1 Container Directives

2.5.1.1 <Directory>

2.5.1.2 <DirectoryMatch>

2.5.1.3 <Files>

2.5.1.4 <FilesMatch>

2.5.1.5 <Limit>

2.5.1.6 <LimitExcept>

2.5.1.7 <Location>

2.5.1.8 <LocationMatch>

2.5.1.9 <VirtualHost>

2.5.2 Block Directives

2.6 Understanding Modules

2.7 About .htaccess Files

3 Specifying Server and File Locations

3.1 Setting Server and Administrator Functions

3.1.1 ServerName

3.1.2 UseCanonicalName

3.1.3 ServerAdmin

3.1.4 ServerSignature

3.1.5 ServerTokens

3.1.6 ServerAlias

3.2 Specifying File Locations

3.2.1 CoreDumpDirectory

3.2.2 DocumentRoot

3.2.6 ScoreBoardFile

3.2.7 ServerRoot

4 Managing Server Processes

4.1 Oracle HTTP Server Processing Model

4.2 Handling Server Processes

4.2.1 ServerType

4.3 Configuring the Number of Processes and Connections

4.3.1 StartServers

4.3.2 ThreadsPerChild

4.3.3 MaxClients

4.3.4 MaxRequestsPerChild

4.3.5 MaxSpareServers

4.3.6 MinSpareServers

4.4 Running Oracle HTTP Server as Root

4.5 Security Considerations

4.6 Getting Information about Processes

5 Managing the Network Connections

5.1 Specifying Listener Ports and Addresses

5.1.1 BindAddress

5.2 Managing Interaction Between Server and Network

5.2.1 ListenBackLog

5.2.2 SendBufferSize

5.3 Managing Connection Persistence

5.3.1 KeepAlive

5.3.2 KeepAliveTimeout

5.3.3 MaxKeepAliveRequests

5.4 Obtaining Client IP Address

5.5 Configuring Reverse Proxies and Load Balancers

6 Configuring and Using Server Logs

6.1 Using Oracle Diagnostic Logging

6.1.2 Configuring Oracle HTTP Server

6.1.2.1 OraLogMode oracle | odl | apache

6.1.2.2 OraLogSeverity module_name <msg_type>{:msg_level]

6.1.2.3 OraLogDir <bus stop dir>

6.2 Specifying Log Level

6.3 Specifying Log Files

6.3.1 Access Log

6.3.1.1 Specifying LogFormat

6.3.2 CustomLog

6.3.3 Error Log

6.3.5 Piped Log

6.3.6 Rewrite Log

6.3.7 Script Log

6.3.9 Transfer Log

7 Application Server Control Console Management

7.2 Accessing Application Server Control Console

7.3 Accessing Oracle HTTP Server Home Page

7.4 Managing Oracle HTTP Server

7.4.1 Performing Basic Administration

7.4.1.1 Starting, Restarting, and Stopping Oracle HTTP Server

7.4.1.2 Managing Default Server Configuration

7.4.1.3 Monitoring Status

7.4.1.4 Monitoring Response and Load

7.4.1.5 Monitoring Performance

7.4.2 Managing Virtual Hosts

7.4.2.1 Requirements for Managing Virtual Hosts

7.4.2.2 Performing Basic Tasks on Virtual Hosts Page

7.4.2.3 Modifying Virtual Hosts

7.4.2.4 Administering Virtual Hosts

7.4.3 Administering Oracle HTTP Server

7.4.3.1 Server Properties

7.4.3.2 MIME Languages

7.4.3.3 MIME Types

7.4.3.4 MIME Encoding

7.4.3.5 PL/SQL Properties

7.4.3.6 Advanced Server Properties

8 Understanding Modules

8.1 List of Modules

8.3 mod_actions

8.7 mod_auth_anon

8.8 mod_auth_dbm

8.9 mod_autoindex

8.10 mod_cern_meta

8.11 mod_certheaders

8.13 mod_define

8.14 mod_digest

8.18 mod_example

8.19 mod_expires

8.20 mod_fastcgi

8.21 mod_headers

8.23 mod_include

8.25 mod_log_agent

8.26 mod_log_config

8.27 mod_log_referer

8.29 mod_mime_magic

8.30 mod_mmap_static

8.31 mod_negotiation

8.32.1 Configuring mod_oc4j

8.32.1.1 mod_oc4j Configuration File and Directives

8.32.1.2 mod_oc4j Sample Configurations

8.32.2 Load Balancing Using mod_oc4j

8.32.3 Enabling SSL between mod_oc4j and OC4J

8.32.3.1 Enabling SSL for mod_oc4j

8.32.3.2 Enabling SSL for OC4J

8.32.4 Integrating Generic Apache with Oracle Application Server

8.33 mod_onsint

8.33.1 Benefits of mod_onsint

8.33.2 Implementation Differences on UNIX and Windows

8.34 mod_oradav

8.37.1 Database Usage Notes

8.37.1.1 Using Perl to Access the Database

8.37.1.2 Testing Database Connection

8.37.1.3 Using SQL NCHAR Datatypes

8.39.1 Creating a DAD

8.39.2 Configuration Files

8.39.2.1 plsql.conf

8.39.2.2 dads.conf

8.39.2.3 cache.conf

8.39.3 Configuration Parameters

8.39.3.1 plsql.conf

8.39.3.2 dads.conf

8.39.3.3 cache.conf

8.41 mod_rewrite

8.41.1 mod_rewrite Rules Processing

8.41.2 mod_rewrite Directives

8.41.2.1 RewriteEngine

8.41.2.2 RewriteOptions

8.41.2.3 RewriteLog

8.41.2.4 RewriteLogLevel

8.41.2.5 RewriteBase

8.41.3 Rewrite Rules Hints

8.41.4 Redirection Examples

8.42 mod_security

8.43 mod_setenvif

8.44 mod_speling

8.45 mod_status

8.46 mod_unique_id

8.47 mod_userdir

8.48 mod_usertrack

8.49 mod_vhost_alias

8.50 mod_wchandshake

9 Configuring and Using mod_oradav

9.1 OraDAV Concepts

9.1.3 mod_oradav

9.2 OraDAV Architecture

9.3 OraDAV Users

9.4 OraDAV Usage Model

9.5 OraDAV Configuration Parameters

9.5.1 ORAAllowIndexDetails

9.5.2 ORAAltPassword

9.5.3 ORACacheDirectory

9.5.4 ORACacheMaxResourceSize

9.5.5 ORACachePrunePercent

9.5.6 ORACacheTotalSize

9.5.7 ORAConnect

9.5.8 ORAConnectSN

9.5.9 ORAContainerName

9.5.10 ORAException

9.5.11 ORAGetSource

9.5.12 ORALockExpirationPad

9.5.13 ORAPackageName

9.5.14 ORAPassword

9.5.15 ORARootPrefix

9.5.16 ORAService

9.5.17 ORATraceEvents

9.5.18 ORATraceLevel

9.6 DAV Directives

9.6.1 DAVDepthInfinity

9.6.2 DAVLockDB

9.6.3 DAVMinTimeout

9.6.4 DAVOraNLS

9.6.5 DAVOraReadOnly

9.6.6 DAVOraWebCacheReadOnly

9.6.8 LimitExcept

9.6.9 LimitXMLRequestBody

9.7 WebDAV Security Considerations

9.8 OraDAV Performance Considerations

9.8.1 Using Disk Caching with OraDAV

9.8.2 Bypassing Oracle Application Server Web Cache for WebDAV Activities

9.8.3 Using Oracle Application Server Web Cache for Browsing Activities

9.9 mod_oradav Usage Notes

9.9.1 Mapping Containers Under the Root Location

9.9.2 Globalization Support Considerations with OraDAV

9.9.3 PROPFIND Security

10 Managing Security

10.1 About Oracle HTTP Server Security

10.2 Classes of Users and Their Privileges

10.3 Resources Protected

10.4 Authentication and Authorization Enforcement

10.4.1 Host-based Access Control

10.4.1.1 Access Control for Virtual Hosts

10.4.1.2 Using mod_access and mod_setenvif for Host-based Access Control

10.4.2 User Authentication and Authorization

10.4.2.1 Using mod_auth to Authenticate Users

10.4.2.2 Using mod_osso to Authenticate Users

10.4.2.3 Using mod_ossl to Authenticate Users

10.5 Understanding Port Tunneling

10.5.1 Configuring Port Tunneling

10.5.1.1 Task 1: Configure opmn.xml

10.5.1.2 Task 2: Configure iaspt.conf

10.5.1.3 Task 3: Configure mod_oc4j.conf

10.5.2 Configuring SSL for Port Tunneling

10.5.3 Port Tunneling Configuration Reference

10.5.3.1 opmn.xml

10.5.3.2 mod_oc4j.conf

10.5.3.3 iaspt.conf

10.6 Leveraging Oracle Identity Management Infrastructure

10.6.1 Overview

10.6.2 Using Oracle Application Server Single Sign-On and mod_osso

11 Enabling SSL for Oracle HTTP Server

11.2 Configuring SSL

11.2.1 Task 1: Creating a Real Wallet

11.2.2 Task 2: Enabling SSL

11.2.3 Task 3: (Optional) Customizing Your Configuration

11.3 Additional SSL Features

11.3.1 Global Server ID Support

11.3.2 PKCS #11 Support

11.4 Using SSL Configuration Directives

11.4.1 Using mod_ossl Directives

11.4.1.1 SSLAccelerator

11.4.1.2 SSLCARevocationFile

11.4.1.3 SSLCARevocationPath

11.4.1.4 SSLCipherSuite

11.4.1.5 SSLEngine

11.4.1.6 SSLLog

11.4.1.7 SSLLogLevel

11.4.1.8 SSLMutex

11.4.1.9 SSLOptions

11.4.1.10 SSLPassPhraseDialog

11.4.1.11 SSLProtocol

11.4.1.12 SSLRequire

11.4.1.13 SSLRequireSSL

11.4.1.14 SSLSessionCache

11.4.1.15 SSLSessionCacheTimeout

11.4.1.16 SSLVerifyClient

11.4.1.17 SSLWallet

11.4.1.18 SSLWalletPassword

11.4.2 Using the iasobf Utility

11.4.3 Using mod_proxy Directives

11.4.3.1 SSLProxyCache

11.4.3.2 SSLProxyCipherSuite

11.4.3.3 SSLProxyProtocol

11.4.3.4 SSLProxyWallet

11.4.3.5 SSLProxyWalletPassword

A Using Oracle Application Server Proxy Plug-in

A.2 Downloading OracleAS Proxy Plug-in

A.3 Installing OracleAS Proxy Plug-in

A.4 Using Application Server Control Console

A.5 Configuring OracleAS Proxy Plug-in

A.5.1 Proxy Server Definition File

A.5.2 Proxy Configuration File Parameters

A.5.2.1 oproxy.serverlist

A.5.2.2 oproxy.servername.hostname

A.5.2.3 oproxy.servername.port

A.5.2.4 oproxy.servername.alias

A.5.2.5 oproxy.servername.resolveall

A.5.2.6 oproxy.servername.urlrule

A.5.3 Defining OracleAS Proxy Plug-in Behavior

A.6 Configuring Sun ONE Listener to Use OracleAS Proxy Plug-in

A.7 Configuring IIS Listener to Use OracleAS Proxy Plug-in

A.8 OracleAS Proxy Plug-in Usage Notes

A.9 Troubleshooting

B Using Oracle Application Server SSO Plug-in

B.2 Downloading OracleAS SSO Plug-in

B.3 Installing OracleAS SSO Plug-in

B.4 Registering with Single Sign-On

B.4.1 Using the Single Sign-On Registration Tool

B.4.2 Common Single Sign-On Registrar Command Arguments

B.5 Configuring OracleAS SSO Plug-in

B.5.1 OracleAS SSO Plug-in Configuration Directives

B.6 Resource Protection

B.7 Configuring Sun ONE Listener for Single Sign-on

B.7.1 Usage Notes for Sun ONE Enterprise Server Version 6.0

B.8 Configuring IIS Listener for Single Sign-On

B.9 Troubleshooting

C Using Oracle Application Server Containers for J2EE Plug-in

C.2 Downloading OC4J Plug-in

C.3 Installing OC4J Plug-in

C.4 Configuring OC4J Plug-in on Sun ONE

C.5 Configuring OC4J Plug-in for IIS

C.5.1 Configuring Anonymous Access for IIS

C.6 OC4J Plug-in Configuration File

C.7 Integrating Generic Apache with Oracle Application Server

C.7.1 Integration Requirements

C.7.2 Generic Apache Files

C.7.3 Setting Up a Static Configuration with mod_oc4j

C.7.4 Setting Up a Dynamic Configuration with mod_oc4j and mod_onsint

C.7.5 Integrating with Oracle Process Manager and Notification Server

D Load Balancing Using mod_oc4j

D.1 Load Balancing Policies

D.1.2 Round Robin

D.1.3 Random with Local Affinity

D.1.4 Round Robin with Local Affinity

D.1.5 Random using Routing Weight

D.1.6 Round Robin using Routing Weight

D.1.7 Metric Based

D.1.8 Metric Based with Local Affinity

D.2 Load Balancing Parameters

D.2.1 Oc4jSelectMethod

D.2.2 Oc4jRoutingWeight

D.3 Metric-based Load Balancing

D.3.1 Configuring Oracle HTTP Server

D.3.2 Configuring OC4J

D.3.2.1 Configuring Metric-based Load Balancing to Use the DMSMetricCollector

D.3.2.2 Building Your Own Metric Collector

E Configuration Files

E.2.1 httpd.conf File Structure

E.2.1.1 Global Environment

E.2.1.2 Main Server Configuration

E.2.1.3 Virtual Hosts Parameters

E.5 mod_oc4j.conf

E.6 mod_osso.conf

E.8 oracle_apache.conf

E.8.1 aqxml.conf

E.8.2 moddav.conf

E.8.3 ojsp.conf

E.8.4 plsql.conf

E.8.6 oiddas.conf

F Frequently Asked Questions

F.1 Creating Application-specific Error Pages

F.2 Offering HTTPS to ISP (Virtual Host) Customers

F.3 Using Oracle HTTP Server as Cache

F.4 Using Different Language and Character Set Versions of Document

F.5 Using OracleAS Web Cache as Front-end

F.6 Sending Proxy Sensitive Requests to HTTP Server Behind a Firewall

F.7 mod_oc4j Information

F.8 mod_oc4j Compatibility with Other Web Servers

F.9 mod_oc4j Communication to OC4J using SSL

F.10 Oracle HTTP Server Version Number

F.11 Applying Apache Security patches to Oracle HTTP Server

F.12 Compressing Output from Oracle HTTP Server

F.13 Supporting PHP

F.14 Creating Namespace that Works Across Firewalls, Clusters, Web Cache

F.15 Protecting Web Site From Hackers

G Troubleshooting Oracle HTTP Server

G.1 Problems and Solutions

G.1.1 Intermittent HTTP-500 errors

G.1.2 Firewall Between Oracle HTTP Server and OC4J Blocks Connections

G.1.3 Client IP Address Not Passed Through OracleAS Web Cache

G.1.4 Unable to Configure Verisign 128-bit Certificate

G.1.5 Certificate Information Lost When Using OracleAS Web Cache

G.1.6 Oracle HTTP Server Unable to Start Due to Port Conflict

G.1.7 Machine Overloaded by Number of HTTPD Processes

G.1.8 Permission Denied When Starting Oracle HTTP Server on Port Below 1024

G.1.9 Oracle HTTP Server May Fail To Start If PM Files Are Not Located Correctly

G.2 Need More Help?

H Third Party Licenses

H.1 Apache HTTP Server

H.1.1 The Apache Software License

H.2 Apache SOAP

H.2.1 Apache SOAP License

H.3.1 Perl Artistic License

H.3.1.1 Preamble

H.3.1.2 Definitions

H.4.1 Perl Kit Readme

H.4.2 mod_perl License

H.4.3 Perl Artistic License

H.4.3.1 Preamble

H.4.3.2 Definitions

H.5.1 The PHP License

H.7.1 FastCGI Developer's Kit License

H.7.2 Module mod_fastcgi License

Glossary

Index