test

Sun WebServer 2.1 Installation Guide

Sun WebServer Conversion

The example below shows a full conversion of Sun WebServer 1.0 httpd.conf and access.acl files to Sun WebServer 2.1. New 2.1 directives are ignored in the example below, unless they are explicitly required for the conversion.

Sun WebServer 1.0 httpd.conf to 2.1

  1. Given the following Sun WebServer 1.0 /etc/http/httpd.conf file: 


    server {
	server_root								"/var/http/demo"
	server_user								"root"
	mime_file										"/etc/http/mime.types"
	mime_default_type			text/html

	acl_enable									"yes"
	acl_file											"/etc/http/access.acl"
	acl_delegate_depth		3
	cache_enable							"yes"
	cache_small_file_cache_size	8
	cache_large_file_cache_size	256
	cache_max_file_size									1
	cache_verification_time					10

	map			 /cgi-bin/					/var/http/demo/cgi-bin/			cgi
	map				/sws-icons/			/var/http/demo/sws-icons/

	mime_add		"appication/java"				class
	mime_add		"audio/basic"								au
	mime_add		"audio/basic"								snd
}

url {
	doc_root									 "/var/http/demo/public"
	user_doc_enable			"no"
	user_doc_root					"public_html"
	cgi_enable							 "no"
	cgi_dns_enable		"no"
	cgi_suffix_enable	    "no"
	cgi_user										"nobody"
	log_type										"elf"
	log_prefix								"/var/http/logs/http"
	log_max_files						7
	log_cycle_time					1440
	log_max_file_size		1048576
	ssi_enable									"no"
	ssi_exec											"no"
	ssi_xbithack							"off"

	mime_add								"application/x-csh"		csh
	mime_add								"application/xsh"				sh
}

url //widgets {
	doc_root								 "/var/http/widgets/public"
	user_doc_enable		"yes"
	user_doc_root				"public_html"
	cgi_enable						 "yes"
	cgi_dns_enable			"yes"
	cgi_suffix_enable	 "yes"
	cgi_user									"nobody"

	log_type								"clf"
	log_prefix						"/var/http/logs/widgets"
	log_max_files				7
	log_cycle_time			1440
	log_max_file_size		1048576
	ssi_enable							"yes"
	ssi_exec									"yes"
	ssi_xbithack					"full"

	map 		/cgi-bin/				/var/http/widgets/cgi-bin/		cgi
	map 		/sws-icons/		/var/http/widgets/sws-icons/
}

port 80 {
	keepalive_enable			"yes"
	request_timeout				180
}

port 1880 {
	ip_address										129.128.127.126
	keepalive_enable			"yes"
	request_timeout				180
	hosts_supported				widgets
}

  2. Create a new server for conversion (we will modify the configuration files that are created for the new server with the 1.0 values): 


    #htserver add "server1"

  3. Add a web site, widgets: 


    # hthost add -i server1 -h widgets \
	-s /var/http/server1/websites/widgets

  4. Modify the server-level file /etc/http/server1.httpd.conf: 


    server {
	server_root						"/var/http/server1/"
	server_user						"root"
	mime_file								"/etc/http/mime.types"
	mime_default_type	 	text/html
	access_enable					"yes"
	cache_enable						"yes"
	cache_small_file_cache_size		8
	cache_large_file_cache_size		256
	cache_max_file_size									 1
	cache_verification_time					 10
}

url {
	site_path					/var/http/server1/websites/default_site
	site_config			"conf/default_site.site.conf"
	site_enable			"yes"
}

url //widgets {
	site_enable				"yes"
	site_path						"/var/http/server1/websites/widgets"
	site_config				"conf/widgets.site.conf"
	conn_end_points	129.128.127.126:1880 :80
}

port 80 {
	ip_address							0.0.0.0
	keepalive_enable	"yes"
	request_timeout		180
}

port 1880 {
	ip_address						129.128.127.126
	keepalive_enable	"yes"
	request_timeout			180
}

  5. Modify /etc/http/mime.types: 


    application/java				class
audio/basic									au snd

  6. Modify /var/http/server1/websites/default_site/conf/default_site.site.conf: 


    url {
	doc_root						/var/http/demo/public

	map_file						conf/map.conf
	realm_file				conf/realms.conf
	access_file			conf/access.conf
	content_file		conf/content.conf
	mime_file					conf/mime.types

	user_doc_enable		"no"
	user_doc_root				"public_html"
	cgi_enable							"no"
	cgi_dns_enable			"no"
	cgi_suffix_enable	"no"
	cgi_user									"nobody"
	log_type									"elf"
	log_prefix							"/var/http/server1/logs/default"
	log_max_files					7
	log_cycle_time				1440
	log_max_file_size	 1048576
	ssi_enable							"no"
	ssi_exec									"no"
	ssi_xbithack					"off"
}

  7. Create /var/http/server1/websites/default_site/conf/mime.types: 


    application/x-csh			csh
application/x-sh				sh

  8. Modify /var/http/server1/websites/default_site/conf/map.conf: 


    map 		/cgi-bin/				 /var/http/demo/cgi-bin/		cgi
map			/sws-icons/			/var/http/demo/sws-icons/

  9. Modify /var/http/server1/websites/widgets/conf/widgets.site.conf: 


    url {
	doc_root						/var/http/widgets/public

	map_file						conf/map.conf
	realm_file				conf/realms.conf
	access_file			conf/access.conf
	content_file		conf/content.conf
	mime_file					conf/mime.types

	user_doc_enable			"yes"
	cgi_enable							 "yes"
	cgi_dns_enable				"yes"
	cgi_suffix_enable	 "yes"
	cgi_user									 "nobody"
	log_type									 "clf"
	log_prefix							 "/var/http/server1/logs/widgets"
	log_max_files					7
	log_cycle_time				1440
	log_max_file_size		1048576
	ssi_enable								"yes"
	ssi_exec										"yes"
	ssi_xbithack					  "full"
}

  10. Modify /var/http/server1/websites/widgets/conf/map.conf: 


    map 	/cgi-bin/				 /var/http/widgets/cgi-bin/ 	cgi
map 	/sws-icons/			/var/http/widgets/sws-icons/
Sun WebServer 1.0 access.acl to 2.1

  1. Given the following Sun WebServer 1.0 /etc/http/access.acl file and delegated file /var/http/widgets/widgets.acl:

    • /etc/http/access.acl: 


      url "/sws-administration" {
	authentication_type			md5
	realm																serverAdmin
	password_file								 /etc/http/swsadmin.pw
	+ user															 *
}

url "/statistics" {
	authentication_type			basic
	realm																statsRealm
	password_file								/var/http/demo/stats/usrs
	group_file											/var/http/demo/stats/grps
	+ user															*
}

url "//widgets" {
	delegate										/var/http/widgets/widgets.acl
}

    • /var/http/widgets/widgets.acl: 


      url "/" {
	authentication_type			basic
	realm																widgetsRealm
	password_file								/var/http/widgets/users
	group_file											/var/http/widgets/groups

	+ user						 *
	- user						 Joe
	- group						thoseDenied
}

  2. Create a global serverAdmin realm (in /etc/http/realms/), and replace its users file with /etc/http/swsadmin.pw

    Note -

    If the realm already exists, then run just the copy command. 


    # htrealm add -r serverAdmin -s HTPASSWD
# cp /etc/http/swsadmin.pw /etc/http/realms/serverAdmin/users

  3. Create a global statsRealm and replace its users and groups files with those specified in the "/statistics" URL above. Add this new realm to the realms.conf files of both the default site and the widgets site:

    Note -

    <hostname> below refers to the hostname of the workstation, which is used to specify the default site.


    # htrealm add -r statsRealm -s HTPASSWD
# cp /var/http/demo/stats/usrs /etc/http/realms/statsRealm/users
# cp /var/http/demo/stats/grps /etc/http/realms/statsRealm/groups
# htrealm add -i server1 -h widgets -r statsRealm \
	-s HTPASSWD -d /etc/http/realms/statsRealm
# htrealm add -i server1 -h <hostname> -r statsRealm \
	-s HTPASSWD -d /etc/http/realms/statsRealm

  4. Create a local widgetsRealm at the widgets site and replace its users and groups files with those specified above: 


    # htrealm add -i server1 -h widgets -r widgetsRealm -s HTPASSWD
# cp /var/http/widgets/users \
	var/http/server1/websites/widgets/conf/realms/widgetsRealm/
# cp /var/http/widgets/groups \
	/var/http/server1/websites/widgets/conf/realms/widgetsRealm/

  5. Modify /etc/http/access.conf: 


    url /sws-administration {
	authentication_type				md5
	realm																	serverAdmin

	+ user																*
}

  6. Modify /var/http/server1/websites/default_site/conf/access.conf: 


    # Specify /sws-administration ACL here for site administration,
# 	create a siteAdmin realm and add administrators to that realm
# url "/sws-administration" {
# 	authentication_type			md5
# 	realm																siteAdmin
# 	+ user															*
# }

url "/statistics" {
	authentication_type				basic
	realm 																statsRealm

	+ user																*
}

  7. Modify /var/http/server1/websites/widgets/conf/access.conf: 


    # Specify /sws-administration ACL here for site administration
url "/statistics" {
	authentication_type				basic
	realm																	statsRealm

	+ user															*
}

url "/" {
	authentication_type				basic
	realm															 		widgetsRealm

	+ user																*
	- user																Joe
	- group															thoseDenied
}