Contents

Title and Copyright Information

Send Us Your Comments

Preface

Intended Audience

Documentation Accessibility

Related Documentation

1 Overview

1.1 Oracle HTTP Server Features

1.2 Oracle HTTP Server Components

1.2.1 Oracle HTTP Server Modules

1.3 Oracle HTTP Server Support

1.4 Oracle HTTP Server Management

1.5 Starting, Stopping, and Restarting Oracle HTTP Server

1.5.1 Starting Oracle HTTP Server

1.5.2 Stopping Oracle HTTP Server

1.5.3 Restarting Oracle HTTP Server

2 Configuring Standalone Oracle HTTP Server with Oracle Application Server

2.1 Configuration Checklist

2.2 Installing Standalone Oracle HTTP Server

2.3 Configuring OPMN

2.4 Configuring mod_oc4j

2.5 Configuring Single Sign-On

3 Specifying Server and File Locations

3.1 Setting Server and Administrator Functions

3.1.1 ServerName

3.1.2 UseCanonicalName

3.1.3 ServerAdmin

3.1.4 ServerSignature

3.1.5 ServerTokens

3.1.6 ServerAlias

3.2 Specifying File Locations

3.2.1 CoreDumpDirectory

3.2.2 DocumentRoot

3.2.6 ScoreBoardFile

3.2.7 ServerRoot

4 Managing Server Processes

4.1 Oracle HTTP Server Processing Model

4.2 Handling Server Processes

4.2.1 ServerType

4.3 Configuring the Number of Processes and Connections

4.3.1 StartServers

4.3.2 ThreadsPerChild

4.3.3 MaxClients

4.3.4 MaxRequestsPerChild

4.3.5 MaxSpareServers

4.3.6 MinSpareServers

4.4 Running Oracle HTTP Server as Root

4.5 Security Considerations

4.6 Getting Information about Processes

5 Managing the Network Connections

5.1 Specifying Listener Ports and Addresses

5.1.1 BindAddress

5.2 Managing Interaction Between Server and Network

5.2.1 ListenBackLog

5.2.2 SendBufferSize

5.3 Managing Connection Persistence

5.3.1 KeepAlive

5.3.2 KeepAliveTimeout

5.3.3 MaxKeepAliveRequests

5.4 Obtaining Client IP Address

5.5 Configuring Reverse Proxies and Load Balancers

6 Configuring and Using Server Logs

6.1 Using Oracle Diagnostic Logging

6.1.2 Configuring Oracle HTTP Server

6.1.2.1 OraLogMode oracle | odl | apache

6.1.2.2 OraLogSeverity module_name <msg_type>{:msg_level]

6.1.2.3 OraLogDir <bus stop dir>

6.2 Specifying Log Level

6.3 Specifying Log Files

6.3.1 Access Log

6.3.1.1 Specifying LogFormat

6.3.2 CustomLog

6.3.3 Error Log

6.3.5 Piped Log

6.3.6 Rewrite Log

6.3.7 Script Log

6.3.9 Transfer Log

7 Understanding Modules

7.1 List of Modules

7.3 mod_actions

7.7 mod_auth_anon

7.8 mod_auth_dbm

7.9 mod_autoindex

7.10 mod_cern_meta

7.11 mod_certheaders

7.16 mod_expires

7.17 mod_fastcgi

7.18 mod_file_cache

7.19 mod_headers

7.21 mod_include

7.23 mod_log_config

7.26 mod_mime_magic

7.27 mod_negotiation

7.28.1 Configuring mod_oc4j

7.28.1.1 mod_oc4j Configuration File and Directives

7.28.1.2 mod_oc4j Sample Configurations

7.28.2 Load Balancing Using mod_oc4j

7.28.3 Enabling SSL between mod_oc4j and OC4J

7.28.3.1 Enabling SSL for mod_oc4j

7.28.3.2 Enabling SSL for OC4J

7.29 mod_onsint

7.29.1 Benefits of mod_onsint

7.29.2 Implementation Differences on UNIX and Windows

7.32.1 Database Usage Notes

7.32.1.1 Using Perl to Access the Database

7.32.1.2 Testing Database Connection

7.32.1.3 Using SQL NCHAR Datatypes

7.35 mod_rewrite

7.35.1 mod_rewrite Rules Processing

7.35.2 mod_rewrite Directives

7.35.2.1 RewriteEngine

7.35.2.2 RewriteOptions

7.35.2.3 RewriteLog

7.35.2.4 RewriteLogLevel

7.35.2.5 RewriteBase

7.35.3 Rewrite Rules Hints

7.35.4 Redirection Examples

7.36 mod_setenvif

7.37 mod_speling

7.38 mod_status

7.39 mod_unique_id

7.40 mod_userdir

7.41 mod_usertrack

7.42 mod_vhost_alias

7.43 mod_wchandshake

8 Managing Security

8.1 About Oracle HTTP Server Security

8.2 Classes of Users and Their Privileges

8.3 Resources Protected

8.4 Authentication and Authorization Enforcement

8.4.1 Host-based Access Control

8.4.1.1 Access Control for Virtual Hosts

8.4.1.2 Using mod_access and mod_setenvif for Host-based Access Control

8.4.2 User Authentication and Authorization

8.4.2.1 Using mod_auth to Authenticate Users

8.4.2.2 Using mod_osso to Authenticate Users

8.4.2.3 Using mod_ossl to Authenticate Users

8.5 Understanding Port Tunneling

8.5.1 Configuring Port Tunneling

8.5.1.1 Task 1: Configure opmn.xml

8.5.1.2 Task 2: Configure iaspt.conf

8.5.1.3 Task 3: Configure mod_oc4j.conf

8.5.2 Configuring SSL for Port Tunneling

8.5.3 Port Tunneling Configuration Reference

8.5.3.1 opmn.xml

8.5.3.2 mod_oc4j.conf

8.5.3.3 iaspt.conf

8.6 Leveraging Oracle Identity Management Infrastructure

8.6.2 Using Oracle Application Server Single Sign-On and mod_osso

9 Enabling SSL for Oracle HTTP Server

9.2 Configuring SSL

9.2.1 Task 1: Creating a Real Wallet

9.2.2 Task 2: Enabling SSL

9.2.3 Task 3: (Optional) Customizing Your Configuration

9.3 Additional SSL Features

9.3.1 Global Server ID Support

9.3.2 PKCS #11 Support

9.4 Using SSL Configuration Directives

9.4.1 Using mod_ossl Directives

9.4.1.1 SSLAccelerator

9.4.1.2 SSLCARevocationFile

9.4.1.3 SSLCARevocationPath

9.4.1.4 SSLCipherSuite

9.4.1.5 SSLEngine

9.4.1.7 SSLLogLevel

9.4.1.8 SSLMutex

9.4.1.9 SSLOptions

9.4.1.10 SSLPassPhraseDialog

9.4.1.11 SSLProtocol

9.4.1.12 SSLRequire

9.4.1.13 SSLRequireSSL

9.4.1.14 SSLSessionCache

9.4.1.15 SSLSessionCacheTimeout

9.4.1.16 SSLVerifyClient

9.4.1.17 SSLWallet

9.4.1.18 SSLWalletPassword

9.4.2 Using the iasobf Utility

9.4.3 Using mod_proxy Directives

9.4.3.1 SSLProxyCache

9.4.3.2 SSLProxyCipherSuite

9.4.3.3 SSLProxyProtocol

9.4.3.4 SSLProxyWallet

9.4.3.5 SSLProxyWalletPassword

A Load Balancing Using mod_oc4j

A.1 Load Balancing Policies

A.1.2 Round Robin

A.1.3 Random with Local Affinity

A.1.4 Round Robin with Local Affinity

A.1.5 Random using Routing Weight

A.1.6 Round Robin using Routing Weight

A.1.7 Metric Based

A.1.8 Metric Based with Local Affinity

A.2 Load Balancing Parameters

A.2.1 Oc4jSelectMethod

A.2.2 Oc4jRoutingWeight

A.3 Metric-based Load Balancing

A.3.1 Configuring Oracle HTTP Server

A.3.2 Configuring OC4J

A.3.2.1 Configuring Metric-based Load Balancing to Use the DMSMetricCollector

A.3.2.2 Building Your Own Metric Collector

B Configuration Files

B.2.1 httpd.conf File Structure

B.2.1.1 Global Environment

B.2.1.2 Main Server Configuration

B.2.1.3 Virtual Hosts Parameters

B.5 mod_oc4j.conf

B.6 mod_osso.conf

B.8 oracle_apache.conf

C Frequently Asked Questions

C.1 Creating Application-specific Error Pages

C.2 Offering HTTPS to ISP (Virtual Host) Customers

C.3 Using Different Language and Character Set Versions of Document

C.4 Sending Proxy Sensitive Requests to HTTP Server Behind a Firewall

C.5 mod_oc4j Information

C.6 mod_oc4j Communication to OC4J using SSL

C.7 Oracle HTTP Server Version Number

C.8 Applying Apache Security patches to Oracle HTTP Server

C.9 Compressing Output from Oracle HTTP Server

C.10 Supporting PHP

C.11 Protecting Web Site From Hackers

D Troubleshooting Oracle HTTP Server

D.1 Problems and Solutions

D.1.1 Intermittent HTTP-500 errors

D.1.2 Firewall Between Oracle HTTP Server and OC4J Blocks Connections

D.1.3 Unable to Configure Verisign 128-bit Certificate

D.1.4 Oracle HTTP Server Unable to Start Due to Port Conflict

D.1.5 Machine Overloaded by Number of HTTPD Processes

D.1.6 Permission Denied When Starting Oracle HTTP Server on Port Below 1024

D.1.7 Oracle HTTP Server May Fail To Start If PM Files Are Not Located Correctly

D.2 Need More Help?

E Third Party Licenses

E.1 Apache HTTP Server

E.1.1 The Apache Software License

E.2 Apache SOAP

E.2.1 Apache SOAP License

E.3.1 Perl Artistic License

E.3.1.1 Preamble

E.3.1.2 Definitions

E.4.1 Perl Kit Readme

E.4.2 mod_perl License

E.4.3 Perl Artistic License

E.4.3.1 Preamble

E.4.3.2 Definitions

E.5.1 The PHP License

E.6.1 FastCGI Developer's Kit License

E.6.2 Module mod_fastcgi License

Glossary

Index