Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

Part I Understanding Oracle HTTP Server

1 Introduction to Oracle HTTP Server

• 1.1 What is Oracle HTTP Server
  • 1.1.1 Key Features of Oracle HTTP Server
    • 1.1.1.1 Security: Encryption with Secure Sockets Layer
    • 1.1.1.2 Security: Single Sign-On
    • 1.1.1.3 Distributed Authoring and Versioning (DAV) Support
    • 1.1.1.4 URL Rewriting and Proxy Server Capabilities
    • 1.1.1.5 Oracle Process Manager and Notification Server
    • 1.1.1.6 Oracle Plug-Ins
    • 1.1.1.7 PL/SQL Server Pages
    • 1.1.1.8 Server-Side Includes
    • 1.1.1.9 Perl
    • 1.1.1.10 PHP
    • 1.1.1.11 C / C++ (CGI and FastCGI)
    • 1.1.1.12 Load Balancing
• 1.2 Understanding Oracle HTTP Server Directory Structure
• 1.3 Understanding Configuration Files
• 1.4 Oracle HTTP Server Support

2 Management Tools for Oracle HTTP Server

• 2.1 Overview of Oracle HTTP Server Management
• 2.2 Accessing Fusion Middleware Control
• 2.3 Accessing the Oracle HTTP Server Home Page
  • 2.3.1 Navigating Within Fusion Middleware Control
• 2.4 Using the opmnctl Command-line Tool

3 Understanding Oracle HTTP Server Modules

• 3.1 List of Included Modules
• 3.2 mod_certheaders
• 3.3 mod_dms
• 3.4 mod_onsint
• 3.5 mod_oradav
• 3.6 mod_ossl
• 3.7 mod_osso
• 3.8 mod_perl
  • 3.8.1 Using mod_perl with a Database
    • 3.8.1.1 Using Perl to Access the Database
    • 3.8.1.2 Testing a Database Connection
    • 3.8.1.3 Using SQL NCHAR Data Types
• 3.9 mod_plsql
  • 3.9.1 Creating a DAD
  • 3.9.2 Configuration Files for mod_plsql
    • 3.9.2.1 plsql.conf
    • 3.9.2.2 dads.conf
    • 3.9.2.3 cache.conf
  • 3.9.3 Configuration Files and Parameters
• 3.10 mod_security
• 3.11 mod_wl_ohs
  • 3.11.1 Configure the mod_wl_ohs Module on Oracle HTTP Server
  • 3.11.2 Using SSL With mod_wl_ohs
  • 3.11.3 Configuring IPv6 For mod_wl_ohs

Part II Managing Oracle HTTP Server

4 Getting Started with Oracle HTTP Server

• 4.1 Starting, Stopping, and Restarting Oracle HTTP Server
  • 4.1.1 Understanding the PID File
  • 4.1.2 Starting Oracle HTTP Server
    • 4.1.2.1 Using Fusion Middleware Control to Start Oracle HTTP Server
    • 4.1.2.2 Using opmnctl to Start Oracle HTTP Server
    • 4.1.2.3 Starting Oracle HTTP Server on a Privileged Port
  • 4.1.3 Stopping Oracle HTTP Server
    • 4.1.3.1 Using Fusion Middleware Control to Stop Oracle HTTP Server
    • 4.1.3.2 Using opmnctl to Stop Oracle HTTP Server
  • 4.1.4 Restarting Oracle HTTP Server
    • 4.1.4.1 Using Fusion Middleware Control to Restart Oracle HTTP Server
    • 4.1.4.2 Using opmnctl to Restart Oracle HTTP Server
• 4.2 Creating a New Oracle HTTP Server Component
• 4.3 Specifying Server Properties
  • 4.3.1 Using Fusion Middleware Control to Specify Server Properties
  • 4.3.2 Editing the httpd.conf File to Specify Server Properties
• 4.4 Configuring Oracle HTTP Server
  • 4.4.1 Configuring Secure Sockets Layer
    • 4.4.1.1 Using Fusion Middleware Control to Configure a Wallet and SSL
  • 4.4.2 Configuring MIME Settings
    • 4.4.2.1 Configuring MIME Types
    • 4.4.2.2 Configuring MIME Encoding
    • 4.4.2.3 Configuring MIME Languages
  • 4.4.3 Configuring the mod_perl Module
  • 4.4.4 Configuring the mod_wl_ohs Module
  • 4.4.5 Enabling the mod_osso Module
  • 4.4.6 Modifying an Oracle HTTP Server Configuration File
  • 4.4.7 Disabling the Options Method
• 4.5 Deleting an Oracle HTTP Server Component

5 Managing and Monitoring Server Processes

• 5.1 Oracle HTTP Server Processing Model
  • 5.1.1 Request Process Model
  • 5.1.2 Single Unit Process Model
• 5.2 Monitoring Oracle HTTP Server Performance
  • 5.2.1 Viewing Oracle HTTP Server Performance Metrics
  • 5.2.2 Understanding Oracle HTTP Server Performance Metrics
• 5.3 Configuring Oracle HTTP Server Performance Directives
  • 5.3.1 Using Fusion Middleware Control to Set the Request Configuration
  • 5.3.2 Using Fusion Middleware Control to Set the Connection Configuration
  • 5.3.3 Using Fusion Middleware Control to Set the Process Configuration
• 5.4 Understanding Process Security

6 Managing Connectivity

• 6.1 Viewing Port Number Usage
  • 6.1.1 Using the Fusion Middleware Control to View Port Number Usage
• 6.2 Managing Ports
  • 6.2.1 Using Fusion Middleware Control to Create Ports
  • 6.2.2 Using Fusion Middleware Control to Edit Ports
  • 6.2.3 Updating the Registration of Oracle HTTP Server with a WebLogic Domain After Changing the Administration Port
• 6.3 Configuring Virtual Hosts
  • 6.3.1 Using Fusion Middleware Control to Create Virtual Hosts
  • 6.3.2 Using Fusion Middleware Control to Configure Virtual Hosts

7 Managing Oracle HTTP Server Logs

• 7.1 Introducing Server Logs
  • 7.1.1 About Error Logs
  • 7.1.2 About Access Logs
    • 7.1.2.1 Log Format
  • 7.1.3 About Log Rotation
• 7.2 Configuring Oracle HTTP Server Logs
  • 7.2.1 Using Fusion Middleware Control to Configure Error Logs
    • 7.2.1.1 Configuring the Error Log Format and Location
    • 7.2.1.2 Configuring the Error Log Level
    • 7.2.1.3 Configuring Error Log Rotation Policy
  • 7.2.2 Using Fusion Middleware Control to Configure Access Logs
    • 7.2.2.1 Configuring the Access Log Format
    • 7.2.2.2 Configuring the Access Log File
• 7.3 Log Directives for Oracle HTTP Server
  • 7.3.1 Oracle Diagnostic Logging Directives
    • 7.3.1.1 OraLogMode
    • 7.3.1.2 OraLogDir
    • 7.3.1.3 OraLogSeverity
    • 7.3.1.4 OraLogRotationParams
  • 7.3.2 Apache Log Directives
    • 7.3.2.1 ErrorLog
    • 7.3.2.2 LogLevel
    • 7.3.2.3 LogFormat
    • 7.3.2.4 CustomLog
• 7.4 Viewing Oracle HTTP Server Logs

8 Managing Application Security

• 8.1 About Oracle HTTP Server Security
• 8.2 Classes of Users and Their Privileges
• 8.3 Resources Protected
• 8.4 Authentication, Authorization and Access Control
  • 8.4.1 Access Control
  • 8.4.2 User Authentication and Authorization
    • 8.4.2.1 Using Apache to Authenticate Users
    • 8.4.2.2 Using mod_osso to Authenticate Users

9 Configuring mod_oradav

• 9.1 Introduction to the mod_oradav Module
  • 9.1.1 WebDAV
  • 9.1.2 OraDAV
  • 9.1.3 OraDAV Architecture
  • 9.1.4 OraDAV Usage Model
  • 9.1.5 PROPFIND Security
• 9.2 Configuring mod_oradav
  • 9.2.1 OraDAV Configuration Parameters
    • 9.2.1.1 ORAAllowIndexDetails
    • 9.2.1.2 ORAAltPassword
    • 9.2.1.3 ORACacheDirectory
    • 9.2.1.4 ORACacheMaxResourceSize
    • 9.2.1.5 ORACachePrunePercent
    • 9.2.1.6 ORACacheTotalSize
    • 9.2.1.7 ORAConnect
    • 9.2.1.8 ORAConnectSN
    • 9.2.1.9 ORAContainerName
    • 9.2.1.10 ORAException
    • 9.2.1.11 ORAGetSource
    • 9.2.1.12 ORALockExpirationPad
    • 9.2.1.13 ORAPackageName
    • 9.2.1.14 ORAPassword
    • 9.2.1.15 ORARootPrefix
    • 9.2.1.16 ORAService
    • 9.2.1.17 ORATraceEvents
    • 9.2.1.18 ORATraceLevel
    • 9.2.1.19 ORAUser
  • 9.2.2 Using Fusion Middleware Control to Configure mod_oradav
• 9.3 WebDAV Security Considerations
• 9.4 OraDAV Performance Considerations
  • 9.4.1 Using Disk Caching with OraDAV
  • 9.4.2 Bypassing Oracle Web Cache for WebDAV Activities
• 9.5 Globalization Support Considerations with OraDAV
• 9.6 Location of DAV Files

Part III Appendixes and Glossary

A Using Oracle Plug-ins for Third-Party Web Servers

• A.1 Using Oracle Proxy Plug-In
  • A.1.1 Overview of Oracle Proxy Plug-In
  • A.1.2 Installing Oracle Proxy Plug-In
  • A.1.3 Configuring Oracle Proxy Plug-In
    • A.1.3.1 Proxy Server Definition File
    • A.1.3.2 Proxy Definition File Parameters
    • A.1.3.3 Defining Oracle Proxy Plug-In Behavior
  • A.1.4 Configuring Sun Java System Listener to Use Oracle Proxy Plug-In
  • A.1.5 Configuring Microsoft IIS 6.0 Listener to Use Oracle Proxy Plug-In
  • A.1.6 Configuring Microsoft IIS 7.0 Listener to Use Oracle Proxy Plug-In
  • A.1.7 Oracle Proxy Plug-In Usage Information
  • A.1.8 Troubleshooting Oracle Proxy Plug-In
• A.2 Using Oracle SSO Plug-In
  • A.2.1 Overview of Oracle SSO Plug-In
  • A.2.2 Installing Oracle SSO Plug-In
  • A.2.3 Registering with the Oracle Single Sign-On Server
  • A.2.4 Configuring the Oracle SSO Plug-In
    • A.2.4.1 Oracle SSO Plug-In Directives
    • A.2.4.2 Rules to Protect Resources
  • A.2.5 Configuring Sun Java System Listener for Single Sign-on
  • A.2.6 Configuring Microsoft IIS 6.0 Listener to Use Oracle Single Sign-On
  • A.2.7 Configuring Microsoft IIS 7.0 Listener to Use Oracle Single Sign-On
  • A.2.8 Troubleshooting Oracle SSO Plug-In

B Frequently Asked Questions

• B.1 How Do I Create Application-Specific Error Pages?
• B.2 What Type of Virtual Hosts Are Supported for HTTP and HTTPS?
• B.3 Can I Use Oracle HTTP Server As Cache?
• B.4 Can I Use Different Language and Character Set Versions of Document?
• B.5 How do I Send Proxy Sensitive Requests to Oracle HTTP Server Behind a Firewall?
• B.6 Can I Apply Apache Security Patches to Oracle HTTP Server?
• B.7 Can I Upgrade the Apache Version of Oracle HTTP Server?
• B.8 Can I Compress Output From Oracle HTTP Server?
• B.9 How Do I Create a Namespace That Works Through Firewalls and Clusters?
• B.10 How do I Protect the Web Site from Hackers?
• B.11 Do I Need to Re-register Partner Applications with the SSO Server If I Disable or Enable SSL?

C Troubleshooting Oracle HTTP Server

• C.1 Oracle HTTP Server Unable to Start Due to Port Conflict
• C.2 System Overloaded by Number of httpd Processes
• C.3 Permission Denied When Starting Oracle HTTP Server On a Port Below 1024
• C.4 Oracle HTTP Server May Fail To Start If PM Files Are Not Located Correctly
• C.5 Using Log Files to Locate Errors
  • C.5.1 Rewrite Log
  • C.5.2 Script Log
  • C.5.3 Error Log

Glossary

Index