Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Configuring Standalone Oracle HTTP Server with Oracle Application Server

• 1.1 Configuration Checklist
• 1.2 Installing Standalone Oracle HTTP Server
• 1.3 Configuring OPMN
• 1.4 Configuring mod_oc4j
• 1.5 Configuring Single Sign-On

2 Specifying Server and File Locations

• 2.1 Setting Server and Administrator Functions
  • 2.1.1 ServerName
  • 2.1.2 UseCanonicalName
  • 2.1.3 ServerAdmin
  • 2.1.4 ServerSignature
  • 2.1.5 ServerTokens
  • 2.1.6 ServerAlias
• 2.2 Specifying File Locations
  • 2.2.1 CoreDumpDirectory
  • 2.2.2 DocumentRoot
  • 2.2.3 ErrorLog
  • 2.2.4 LockFile
  • 2.2.5 PidFile
  • 2.2.6 ScoreBoardFile
  • 2.2.7 ServerRoot

3 Managing Server Processes

• 3.1 Oracle HTTP Server Processing Model
• 3.2 Handling Server Processes
  • 3.2.1 Group
  • 3.2.2 User
• 3.3 Configuring the Number of Processes and Connections
  • 3.3.1 StartServers
  • 3.3.2 ThreadsPerChild
  • 3.3.3 MaxClients
  • 3.3.4 MaxRequestsPerChild
  • 3.3.5 MaxSpareServers
  • 3.3.6 MinSpareServers
• 3.4 Running Oracle HTTP Server as Root
• 3.5 Security Considerations
• 3.6 Getting Information about Processes

4 Managing Network Connections

• 4.1 Specifying Listener Ports and Addresses
• 4.2 Managing Interaction Between Server and Network
  • 4.2.1 ListenBackLog
  • 4.2.2 SendBufferSize
  • 4.2.3 TimeOut
• 4.3 Managing Connection Persistence
  • 4.3.1 KeepAlive
  • 4.3.2 KeepAliveTimeout
  • 4.3.3 MaxKeepAliveRequests
• 4.4 Configuring Reverse Proxies and Load Balancers

5 Configuring and Using Server Logs

• 5.1 Using Oracle Diagnostic Logging
  • 5.1.1 Overview
  • 5.1.2 Configuring Oracle HTTP Server
    • 5.1.2.1 OraLogMode oracle | odl | apache
    • 5.1.2.2 OraLogSeverity module_name <msg_type>{:msg_level]
      • 5.1.2.2.1 module_name
      • 5.1.2.2.2 msg_type
      • 5.1.2.2.3 msg_level
      • 5.1.2.2.4 Default
    • 5.1.2.3 OraLogDir <bus stop dir>
• 5.2 Specifying Log Level
• 5.3 Specifying Log Files
  • 5.3.1 Access Log
    • 5.3.1.1 Specifying LogFormat
  • 5.3.2 CustomLog
  • 5.3.3 Error Log
  • 5.3.4 PID File
  • 5.3.5 Piped Log
  • 5.3.6 Rewrite Log
  • 5.3.7 Script Log
  • 5.3.8 SSL Log
  • 5.3.9 Transfer Log

6 Understanding Modules

• 6.1 List of Modules
• 6.2 mod_access
• 6.3 mod_actions
• 6.4 mod_alias
• 6.5 mod_asis
• 6.6 mod_auth
• 6.7 mod_auth_anon
• 6.8 mod_auth_dbm
• 6.9 mod_autoindex
• 6.10 mod_cern_meta
• 6.11 mod_certheaders
• 6.12 mod_cgi
• 6.13 mod_cgid
• 6.14 mod_dir
• 6.15 mod_env
• 6.16 mod_expires
• 6.17 mod_fastcgi
• 6.18 mod_file_cache
• 6.19 mod_headers
• 6.20 mod_imap
• 6.21 mod_include
• 6.22 mod_info
• 6.23 mod_log_config
• 6.24 mod_logio
• 6.25 mod_mime
• 6.26 mod_mime_magic
• 6.27 mod_negotiation
• 6.28 mod_oc4j
  • 6.28.1 Configuring mod_oc4j
    • 6.28.1.1 mod_oc4j Configuration File and Directives
    • 6.28.1.2 mod_oc4j Sample Configurations
  • 6.28.2 Load Balancing Using mod_oc4j
  • 6.28.3 Enabling SSL between mod_oc4j and OC4J
    • 6.28.3.1 Enabling SSL for mod_oc4j
    • 6.28.3.2 Enabling SSL for OC4J
• 6.29 mod_onsint
  • 6.29.1 Benefits of mod_onsint
  • 6.29.2 Implementation Differences on UNIX and Windows
• 6.30 mod_ossl
• 6.31 mod_osso
• 6.32 mod_perl
  • 6.32.1 Database Usage Notes
    • 6.32.1.1 Using Perl to Access the Database
    • 6.32.1.2 Testing Database Connection
    • 6.32.1.3 Using SQL NCHAR Datatypes
      • 6.32.1.3.1 set_form
      • 6.32.1.3.2 set_default_form
• 6.33 mod_php
• 6.34 mod_proxy
• 6.35 mod_rewrite
  • 6.35.1 mod_rewrite Rules Processing
  • 6.35.2 mod_rewrite Directives
    • 6.35.2.1 RewriteEngine
    • 6.35.2.2 RewriteOptions
    • 6.35.2.3 RewriteLog
    • 6.35.2.4 RewriteLogLevel
    • 6.35.2.5 RewriteBase
  • 6.35.3 Rewrite Rules Hints
  • 6.35.4 Redirection Examples
• 6.36 mod_security
• 6.37 mod_setenvif
• 6.38 mod_speling
• 6.39 mod_status
• 6.40 mod_unique_id
• 6.41 mod_userdir
• 6.42 mod_usertrack
• 6.43 mod_vhost_alias

7 Managing Security

• 7.1 About Oracle HTTP Server Security
• 7.2 Classes of Users and Their Privileges
• 7.3 Resources Protected
• 7.4 Authentication and Authorization Enforcement
  • 7.4.1 Host-based Access Control
    • 7.4.1.1 Access Control for Virtual Hosts
    • 7.4.1.2 Using mod_access and mod_setenvif for Host-based Access Control
      • 7.4.1.2.1 Controlling Access by IP Address
      • 7.4.1.2.2 Controlling Access by Domain Name
      • 7.4.1.2.3 Controlling Access by Network or Netmask
      • 7.4.1.2.4 Controlling Access with Environment Variables
  • 7.4.2 User Authentication and Authorization
    • 7.4.2.1 Using mod_auth to Authenticate Users
    • 7.4.2.2 Using mod_osso to Authenticate Users
    • 7.4.2.3 Using mod_ossl to Authenticate Users
• 7.5 Understanding Port Tunneling
  • 7.5.1 Configuring Port Tunneling
    • 7.5.1.1 Task 1: Configure opmn.xml
    • 7.5.1.2 Task 2: Configure iaspt.conf
    • 7.5.1.3 Task 3: Configure mod_oc4j.conf
  • 7.5.2 Configuring SSL for Port Tunneling
  • 7.5.3 Port Tunneling Configuration Reference
    • 7.5.3.1 opmn.xml
    • 7.5.3.2 mod_oc4j.conf
    • 7.5.3.3 iaspt.conf
• 7.6 Leveraging Oracle Identity Management Infrastructure
  • 7.6.1 Overview
  • 7.6.2 Using Oracle Single Sign-On and mod_osso

8 Enabling SSL for Oracle HTTP Server

• 8.1 Overview
• 8.2 Configuring SSL
  • 8.2.1 Task 1: Creating a Real Wallet
  • 8.2.2 Task 2: (Optional) Customizing Your Configuration
• 8.3 Additional SSL Features
  • 8.3.1 Global Server ID Support
  • 8.3.2 PKCS #11 Support
• 8.4 Using SSL Configuration Directives
  • 8.4.1 Using mod_ossl Directives
    • 8.4.1.1 SSLAccelerator
    • 8.4.1.2 SSLCARevocationFile
    • 8.4.1.3 SSLCARevocationPath
    • 8.4.1.4 SSLCipherSuite
    • 8.4.1.5 SSLEngine
    • 8.4.1.6 SSLLog
    • 8.4.1.7 SSLLogLevel
    • 8.4.1.8 SSLMutex
    • 8.4.1.9 SSLOptions
    • 8.4.1.10 SSLPassPhraseDialog
    • 8.4.1.11 SSLProtocol
    • 8.4.1.12 SSLRequire
    • 8.4.1.13 SSLRequireSSL
    • 8.4.1.14 SSLSessionCache
    • 8.4.1.15 SSLSessionCacheTimeout
    • 8.4.1.16 SSLVerifyClient
    • 8.4.1.17 SSLWallet
    • 8.4.1.18 SSLWalletPassword
  • 8.4.2 Using the iasobf Utility
  • 8.4.3 Using mod_proxy Directives
    • 8.4.3.1 SSLProxyCache
    • 8.4.3.2 SSLProxyCipherSuite
    • 8.4.3.3 SSLProxyProtocol
    • 8.4.3.4 SSLProxyWallet
    • 8.4.3.5 SSLProxyWalletPassword

A Load Balancing Using mod_oc4j

• A.1 Load Balancing Policies
  • A.1.1 Random
  • A.1.2 Round Robin
  • A.1.3 Random with Local Affinity
  • A.1.4 Round Robin with Local Affinity
  • A.1.5 Random using Routing Weight
  • A.1.6 Round Robin using Routing Weight
  • A.1.7 Metric Based
  • A.1.8 Metric Based with Local Affinity
• A.2 Load Balancing Parameters
  • A.2.1 Oc4jSelectMethod
  • A.2.2 Oc4jRoutingWeight
• A.3 Metric-based Load Balancing
  • A.3.1 Configuring Oracle HTTP Server
  • A.3.2 Configuring OC4J
    • A.3.2.1 Configuring Metric-based Load Balancing to Use the DMSMetricCollector
      • A.3.2.1.1 How DMS Metrics are Converted for Metric-based Load Balancing
    • A.3.2.2 Building Your Own Metric Collector
      • A.3.2.2.1 oracle.oc4j.api.MetricCollector

B Configuration Files

• B.1 dms.conf
• B.2 httpd.conf
  • B.2.1 httpd.conf File Structure
    • B.2.1.1 Global Environment
    • B.2.1.2 Main Server Configuration
    • B.2.1.3 Virtual Hosts Parameters
• B.3 iaspt.conf
• B.4 mime.types
• B.5 mod_oc4j.conf
• B.6 mod_osso.conf
• B.7 opmn.xml
• B.8 oracle_apache.conf
• B.9 php.ini
• B.10 ssl.conf

C Frequently Asked Questions

• C.1 Creating Application-specific Error Pages
• C.2 Offering HTTPS to ISP (Virtual Host) Customers
• C.3 Using Oracle HTTP Server as Cache
• C.4 Using Different Language and Character Set Versions of Document
• C.5 Sending Proxy Sensitive Requests to HTTP Server Behind a Firewall
• C.6 mod_oc4j Information
• C.7 mod_oc4j Compatibility with Other Web Servers
• C.8 mod_oc4j Communication to OC4J using SSL
• C.9 Oracle HTTP Server Version Number
• C.10 Applying Apache Security patches to Oracle HTTP Server
• C.11 Compressing Output from Oracle HTTP Server
• C.12 Supporting PHP
• C.13 Creating Namespace that Works Across Firewalls and Clusters
• C.14 Protecting Web Site From Hackers

D Troubleshooting Oracle HTTP Server

• D.1 Problems and Solutions
  • D.1.1 Intermittent HTTP-500 errors
  • D.1.2 Firewall Between Oracle HTTP Server and OC4J Blocks Connections
  • D.1.3 Oracle HTTP Server Unable to Start Due to Port Conflict
  • D.1.4 Machine Overloaded by Number of HTTPD Processes
  • D.1.5 Permission Denied When Starting Oracle HTTP Server on Port Below 1024
  • D.1.6 Oracle HTTP Server May Fail To Start If PM Files Are Not Located Correctly
• D.2 Need More Help?

E Third Party Licenses

• E.1 Apache HTTP Server
  • E.1.1 The Apache Software License
• E.2 Apache SOAP
  • E.2.1 Apache SOAP License
• E.3 DBI Module
  • E.3.1 Perl Artistic License
    • E.3.1.1 Preamble
    • E.3.1.2 Definitions
• E.4 Perl
  • E.4.1 Perl Kit Readme
  • E.4.2 mod_perl License
  • E.4.3 Perl Artistic License
    • E.4.3.1 Preamble
    • E.4.3.2 Definitions
• E.5 PHP
  • E.5.1 The PHP License
• E.6 mod_dav
• E.7 FastCGI
  • E.7.1 FastCGI Developer's Kit License
  • E.7.2 Module mod_fastcgi License

Glossary

Index