Complete Contents
About This Guide
Chapter 1
Introduction to Enterprise Server
Chapter 2
Administrating Enterprise Servers
Chapter 3
Setting Administration Preferences
Chapter 4
Managing Users and Groups
Chapter 5
Working with Server Security
Chapter 6
Managing Server Clusters
Chapter 7
Configuring Server Preferences
Chapter 8
Understanding Log Files
Chapter 9
Using SNMP to Monitor Servers
Chapter 10
Configuring the Server for Performance
Chapter 11
Extending Your Server with Programs
Chapter 12
Working with Configuration Styles
Chapter 13
Managing Server Content
Chapter 14
Controlling Access to Your Server
Chapter 15
Configuring Web Publishing
Chapter 16
Using Search
Appendix A
HyperText Transfer Protocol
Appendix B
ACL File Syntax
Appendix C
Internationalized Enterprise Server
Appendix D
Server Extensions for Microsoft FrontPage
Appendix E
Enterprise Server User Interface
Glossary
Index
Netscape Enterprise Server Administrator's Guide
Contents
Index
Contents
About This Guide
What's In This Guide?
How This Guide Is Organized
Server Basics
Using Enterprise Administration Server
Configuring and Monitoring
Using Programs and Objects
Managing Content and Access
Appendixes
Conventions Used In This Guide
Using the Enterprise Server Documentation
Further Reading
Contacting Technical Support
Part 1
Server Basics
Chapter 1
Introduction to Enterprise Server
Netscape Enterprise Server
Enterprise Server Features
Administering and Managing Enterprise Servers
Netscape Enterprise Server Architecture
Content Engines
Server Extensions
Runtime Environments
Application Services
How Enterprise Server is Configured
Enterprise Server Component Options
Enterprise Server Configuration Files
Single-Server Configuration
All Platforms
Unix-Only Platforms
Multiple-Server Configuration
Enterprise Administration Server
Server Manager
Accessing the Server Manager
Using the Resource Picker
Wildcards Used in the Resource Picker
Netscape Console
Sending Error Information to Netscape
Details on Data Collected by the Quality Feedback Agent
Using the Quality Feedback Agent
Editing master.ini
Editing magnus.conf
Chapter 2
Administering Enterprise Servers
Accessing Enterprise Administration Server
Unix Platforms
Windows NT Platforms
Adding a Server: Running Multiple Servers
Hardware Virtual Servers
Software Virtual Servers
Multiple Server Instances
Installing Multiple Instances of the Server
Removing a Server
Migrating a Server From a Previous Version
Part 2
Using Enterprise Administration Server
Chapter 3
Setting Administration Preferences
Shutting Down Enterprise Administration Server
Changing Network Settings
Changing the User Account and Password
Changing the Port Number
Changing the Superuser Settings
Enabling Distributed Administration
Configuring Secure Sockets Layer (SSL)
Activating SSL
Setting Encryption Preferences
Setting Stronger Ciphers
Specifying Log File Options
Viewing the Access Log File
Viewing the Error Log File
Archiving Log Files
Using Cron Controls (Unix Only)
Configuring Directory Services
Restricting Server Access
Chapter 4
Managing Users and Groups
About Users and Groups
Creating Users
Guidelines for Creating User Entries
How to Create a New User Entry
Directory Server User Entries
Managing Users
Finding User Information
Building Custom Search Queries
Search Attribute Options
Search Type Options
Editing User Information
Managing a User's Password
Managing User Licenses
Renaming Users
Removing Users
Creating Groups
Static Groups
Guidelines for Creating Static Groups
To Create a Static Group
Dynamic Groups
How Enterprise Server 4.0 Implements Dynamic Groups
Groups Can Be Static and Dynamic
Dynamic Group Impact on Server Performance
Guidelines for Creating Dynamic Groups
To Create a Dynamic Group
Managing Groups
Finding Group Entries
The "Find all groups whose" Field
Editing Group Attributes
Adding Group Members
Adding Groups to the Group Members List
Removing Entries from the Group Members List
Managing Owners
Managing See Alsos
Removing Groups
Renaming Groups
Creating Organizational Units
Managing Organizational Units
Finding Organizational Units
The "Find all units whose" Field
Editing Organizational Unit Attributes
Renaming Organizational Units
Deleting Organizational Units
Managing a Preferred Language List
Chapter 5
Working with Server Security
About Enterprise Server Security
Encryption
FIPS-140 Compliance
Certificates
Client and Server Authentication
How Enterprise Server Uses Certificates to Authenticate Users
128-Bit Step-Up Certificates
Configuring Enterprise Server for SSL
Creating a New Server Instance
Creating a Certificate Trust Database
Requesting a Certificate
Required CA Information
Installing and Managing Certificates
Managing Certificates
Using Secure Sockets Layer (SSL)
Activating SSL
Specifying Ciphers
Setting Security (SSL) Preferences
Adding a PKCS #11Module
Guidelines for Installing a PKCS#11 Module
To Import a PKCS#11 Module
Using SSL Configuration File Directives
Security
SSL2
SSL3
Ciphers
SSL3Ciphers
SSL3SessionTimeout
SSLCacheEntries
SSLClientAuth
SSLSessionTimeout
Using Client Certificates
Mapping Client Certificates to LDAP
Using the certmap.conf File
Creating Custom Properties
Example Mappings
Changing the Trust Database/Key Pair File Password
Migrating Enterprise Server 3.X Certificates
Additional Server Security Considerations
Limit Physical Access
Limit Administration Access
Choose Good Passwords
Guidelines for Creating Hard-to-Crack Passwords
Secure Your Key-Pair File
Limit Other Applications on the Server
Prevent Clients from Caching SSL Files
Limit Ports
Know Your Server's Limits
Consider Additional Measures for Unprotected Servers
Chapter 6
Managing Server Clusters
About Clusters
Preliminary Guidelines for Using Server Clusters
Setting up a Cluster
Adding a Server to the Server List
Modifying Cluster Information
Removing Servers from a Cluster
Managing Server Clusters
Part 3
Configuring and Monitoring
Chapter 7
Configuring Server Preferences
Starting and Stopping the Server
Setting the Termination Timeout
Restarting the Server (Unix)
Restarting With Inittab (Unix)
Restarting With the System RC Scripts (Unix)
Restarting the Server Manually (Unix)
Stopping the Server Manually (Unix)
Restarting the Server (Windows NT)
Using the Automatic Restart Utility (Windows NT)
Viewing Server Settings
Configuring Network Settings
Changing the Server's Location (Unix)
Changing the Server's User Account (Unix)
Changing the Server's User Account (Windows NT)
Changing the Server Name
Changing the Server Port Number
Changing the Server Binding Address
Changing the Server's MTA Host
Customizing Error Responses
Working with Dynamic Configuration Files
Using .htaccess Files
Activating .htaccess checking
Using .nsconfig Files
Restricting Symbolic Links (Unix)
Using the Watchdog (uxwdog) Process (Unix)
Chapter 8
Understanding Log Files
About Log Files
Viewing an Access Log File
Viewing the Error Log File
Monitoring the Server Using HTTP
Archiving Log Files
Internal-daemon Log Rotation
Cron-based Log Rotation
Setting Log Preferences
Easy Cookie Logging
Relaxed Logging
Flushing the Log Buffer
Running the Log Analyzer
Using Performance Monitor (Windows NT)
Viewing Events (Windows NT)
Chapter 9
Using SNMP to Monitor Servers
SNMP Basics
SNMP Subagent
SNMP Master Agent
How SNMP Works
Netscape MIBs
The Enterprise Server MIB
Types of SNMP Messages
The Enterprise Server MIB
Setting Up SNMP on a Netscape Server
Using a Proxy SNMP Agent (Unix)
Installing the Proxy SNMP Agent
Starting the Proxy SNMP Agent
Restarting the Native SNMP Daemon
Reconfiguring the SNMP Native Agent
Installing the SNMP Master Agent
Enabling and Starting the SNMP Master Agent
Manually Configuring the SNMP Master Agent
Editing the Master Agent CONFIG File
Defining sysContact and sysLocation Variables
Configuring the SNMP Master Agent
Starting the SNMP Master Agent
Manually Starting the SNMP Master Agent
Starting the SNMP Master Agent Using Enterprise Administration Server
Configuring the SNMP Master Agent
Configuring the Community String
Configuring Trap Destinations
Enabling the Subagent
Chapter 10
Configuring the Server for Performance
About Server Performance
Performance Issues
Unix Platform-Specific Issues
Performance Buckets
Configuration
Performance Report
Miscellaneous magnus.conf Directives
Multi-process Mode
Accept Thread Information
CGIStub Processes (Unix)
Buffer Size
Native Thread Pool Size
About RqThrottle
The perfdump Utility
Sample Output
Using perfdump Statistics to Tune Your Server
ListenSocket Information
Address
ActiveThreads
WaitingThreads
BusyThreads
Thread limits <min/max>
KeepAlive Information
AcceptTimeout
KeepAliveCount <KeepAliveCount/KeepAliveMaxCount>
KeepAliveHits
KeepAliveFlushes
Cache Information
enabled
CacheEntries <CurrentCacheEntries / MaxCacheEntries>
CacheSize <CurrentCacheSize / MaxCacheSize>
Hit Ratio <CacheHits / CacheLookups (Ratio)>
pollInterval
maxFileSize
DNS Cache Information
enabled
CacheEntries <CurrentCacheEntries / MaxCacheEntries>
HitRatio <CacheHits / CacheLookups (Ratio)>
Native Threads Pool
Idle/Peak/Limit
Work queue length/Limit
Peak work queue length
Work queue rejections
PostThreadsEarly
Thread Pool Environmental Variables
Busy Functions
Asynchronous DNS Lookup (Unix)
enabled
NameLookups
AddrLookups
LookupsInProgress
File Cache in Enterprise Server 4.0
File Cache Configuration
FileCacheEnable
MaxAge
MaxFiles
FlushInterval
SmallFileSizeLimit
SmallFileSpace
MediumFileSizeLimit (Unix)
MediumFileSpace
TransmitFile
File Cache Dynamic Control and Monitoring
Cache-init
File Cache Tuning
MaxFiles, SmallFileSpace, and MediumFileSpace
MaxAge
FlushInterval
SmallFileSizeLimit
Improving Servlet Performance
Thread Pools
Common Performance Problems
Low-Memory Situations
Under-Throttled Server
Checking
Tuning
Cache Not Utilized
Checking
Tuning
KeepAlive Connections Flushed
Checking
Tuning
Log File Modes
Using Local Variables
Benchmarking the Netscape Enterprise Server
SPECweb96 Tuning
WebStone Tuning
Sizing Issues
Processors
Memory
Drive Space
Networking
Part 4
Using Programs and Objects
Chapter 11
Extending Your Server With Programs
Overview of Server-Side Programs
Types of Server-Side Applications That Run on the Server
How Server-Side Applications are Installed on the Server
Java Servlets and JavaServerPages (JSP)
Overview of Servlets and JavaServerPages
What Does the Server Need to Run Servlets and JSP?
Enabling Servlets and JSP
Making Servlets Available to Clients
Specifying Servlet Directories
Configuring Global Attributes
Configuring Servlet Attributes
Configuring Servlet Virtual Path Translations
Configuring JRE/JDK Paths
Configuring JVM Attributes
Deleting Version Files
Installing CGI Programs
Overview of CGI
Specifying a CGI Directory
Specifying CGI as a File Type
Downloading Executable Files
Installing Windows NT CGI Programs
Overview of Windows NT CGI Programs
Specifying a Windows NT CGI Directory
Specifying Windows NT CGI as a File Type
Installing Shell CGI Programs for Windows NT
Overview of Shell CGI Programs for Windows NT
Specifying a Shell CGI Directory (Windows NT)
Specifying Shell CGI as a File Type (Windows NT)
Using the Query Handler
Server-Side JavaScript Programs
Activating Server-Side JavaScript
Running the Application Manager
Securing the Application Manager
Installing Server-Side JavaScript Applications
Application URLs
Controlling Access to a Server-Side JavaScript Application
Modifying Installation Parameters
Removing a Server-Side JavaScript Application
Starting, Stopping, and Restarting a Server-Side JavaScript Application
Running a Server-Side JavaScript Application
Configuring Default Settings
Enabling WAI Services
Chapter 12
Working With Configuration Styles
Creating a Configuration Style
Removing a Configuration Style
Editing a Configuration Style
Assigning a Configuration Style
Listing Configuration Style Assignments
Part 5
Managing Content and Access
Chapter 13
Managing Server Content
Changing the Primary Document Directory
Setting Additional Document Directories
Customizing User Public Information Directories (Unix)
Enabling Remote File Manipulation
Configuring Document Preferences
Entering an Index Filename
Selecting Directory Indexing
Specifying a Server Home Page
Specifying a Default MIME Type
Parsing the Accept Language Header
Setting Up Hardware Virtual Servers
Setting Up Hardware Virtual Servers for ISPs
Migrating Hardware Virtual Server Configuration Files
Setting up Software Virtual Servers
Changing the Character Set
Chapter 14
Controlling Access to Your Server
What Is Access Control?
User-Group Authentication
Username and Password Authentication
Client Certificate Authentication
Host-IP Authentication
Access Control Files
How Does Access Control Work?
Restricting Access to Your Web Site
Setting Access Control Actions
Specifying Users and Groups
Specifying Host Names and IP Addresses
Setting Access Rights
Access to Programs
Writing Customized Expressions
Selecting "Access control on"
Responding When Access is Denied
Access Control Examples
Restricting Access to the Entire Server
Restricting Access to a Directory (Path)
Restricting Access to a URI (Path)
Restricting Access to a File Type
Restricting Access Based on Time of Day
Access Control For Web Publishing
Ownership of Files and Folders
Chapter 15
Configuring Web Publishing
Using Netshare
Setting Up the Server and Creating Netshare Home Directories
Before You Start
Server Features That Must Be Enabled
Netshare Directory Naming Conventions
The Netshare Configuration File
Marking Users As Licensed
Access Control For Netshare
Using the Server Manager
The Set Up Netshare Page
The Create Netshare Page
Using the Netshare Command-line Utility
Syntax of the Netshare Utility
Netshare Utility Examples
Accessing the Web Publisher Home Page
Setting Access Control For Web Publisher Owners
Indexing and Updating Properties
Changing the Web Publishing State
Maintaining Web Publishing Data
Unlocking Files
Adding Custom Properties
Managing Properties
Customizing Your Netshare Home Page
Customizing the Web Publisher User Interface
The Web Publisher Attributes
The Web Publisher Pattern Files
Pointing Pattern Variables
Conditional Variables
Chapter 16
Using Search
About Search
Configuring Text Search
Controlling Search Access
Mapping URLs
Deciding Which Words Not to Search
Turning Search On or Off
Configuring the Search Parameters
Configuring Your Pattern Files
Configuring Manually
The Configuration Files
Adjusting the Maximum Number of Attributes
Restricting Memory for Indexing
Restricting Your Index File Size
Removing Access to the Web Publishing Collection
Indexing Your Documents
About Collections
About Collection Attributes
Installing Filters
Creating a New Collection
Configuring a Collection
Updating a Collection
Maintaining a Collection
Scheduling Regular Maintenance
Unscheduling Collection Maintenance
Performing a Search: The Basics
Search Home Page
A Search Query
Guided Search
Advanced Search
The Search Results
Listing Matched Documents
Sorting the Results
Displaying a Highlighted Document
Displaying Collection Contents
Using the Query Operators
Default Assumptions
Search Rules
Angle Brackets
Combining Operators
Using Query Operators as Search Words
Canceling Stemming
Modifying Operators
Determining Which Operators To Use
Using Wildcards
Non-alphanumeric Characters
Wildcards as Literals
Customizing the Search Interface
Dynamically Generated Headers and Footers
HTML Pattern Files
Search Function Syntax
URL Encodings
Required Search Arguments
Using Pattern Variables
User-defined Pattern Variables
Configuration File Variables
Macros and Generated Pattern Variables
Appendixes
Appendix A
HyperText Transfer Protocol
About HyperText Transfer Protocol (HTTP)
Requests
Request Method
Request Header
Request Data
Responses
Status Code
Response Header
Response Data
Appendix B
ACL File Syntax
ACL File Syntax
Authentication Statements
Authorization Statements
Hierarchy of Authorization Statements
Attribute Expressions
Operators For Expressions
The Default ACL File
General Syntax Items
Referencing ACL Files in obj.conf
Appendix C
Internationalized Enterprise Server
General Information
Installing the Server
Entering 8-bit Text
File or Directory Names
LDAP Users and Groups
Using the Accept Language Header
Language Settings in Configuration Files
Server-side JavaScript Information
Specifying the Character Set for the Compiler
Specifying the Character Set With the <META> Tag
Using Server-side Javascript With Oracle's Japanese Database
Installing Oracle and Setting Up Your Environment
Verifying the Connection
Verifying the Language Setup
Putting the Oracle Client and Database Server On Separate Hosts
Search Information
International Search and Auto Catalog
Searching in Chinese, Japanese, and Korean
Query Operators
Document Formats
Searching in Japanese
Getting Support for Accented Characters in Filenames
Appendix D
Server Extensions for Microsoft FrontPage
Overview
Types of FrontPage Webs
Domain Names And Frontpage Webs
Security Issues
Downloading the Extensions
Getting Ready for Installation
Space Requirements
Preliminary Tasks
Some Additional Considerations
Installing FrontPage Server Extensions
Installing FrontPage Server Extensions on Windows NT Systems
Installing FrontPage97 Server Extensions on Unix Systems
Installing FrontPage98 Server Extensions on Unix Systems
Further Information
Appendix E
Enterprise Server User Interface
Enterprise Administration Server
The Servers Tab
The Manage Servers Page
The Add Server Page
The Remove Server Page
The Migrate Server Page
Migrate Server
Installed Servers
The Migration Parameters Page
General Migration Parameters
Users and Groups
Keys and Certificates
Document Root
Web Publishing
Search Collections
The Preferences Tab
The Shut Down Page
The Daemon Configuration Page
The Superuser Access Control Page
The Distributed Administration Page
The Encryption On/Off Page
The Encryption Preferences Page
The Log Preferences Page
The View Access Log Page
The View Error Log Page
The Global Settings Tab
The Configure Directory Service Page
The Restrict Access Page
The Edit Access Control Page
Upper Frame
Lower Frame
Allow/Deny
User/Group
From Host
Programs
Customized Expressions
Access Denied Response
The NS Cron Control Page (Unix)
The Community Strings Page (Unix)
The Manager Entries Page (Unix)
The SNMP Master Agent Control Page (Unix)
The Users & Groups Tab
The New User Page
The Edit Users Page
General
Password
License
The Manage Users Page
The New Group Page
The Edit Groups Page
The Edit Members Page
The Group Cert Members Page
The Manage Groups Page
The New Organizational Unit Page
The Manage Organizational Units Page
The Edit Organizational Unit Page
The Manage Language Selection List Page
The Security Tab
The Create a Trust Database Page
The Request a Server Certificate Page
The Install a Server Certificate Page
The Change the Key Pair File Password Page
The Manage Server Certificates Page
The Install a New PKCS#11 Module Page
The Migrate a 3.x Cert Page
The Cluster Management Tab
The Cluster Control Page
The Add Remote Servers to Cluster Database Page
The Modify Server Settings in Cluster Database Page
The Remove Servers from Cluster Database Page
Server Manager
The Preferences Tab
The Server On/Off Page
The View Server Settings Page
The Restore Configuration Page
The Performance Tuning Page
The Global MIME Types Page
The Network Settings Page
The Custom Error Responses Page
The Dynamic Configuration Files Page
The Limit Symbolic Links Page (Unix)
The Access Control List Management Page
Pick a Resource
Pick an Existing ACL
Type in the ACL Name
The Edit Access Control Page
Upper Frame
Lower Frame
Allow/Deny
User/Group
From Host
Rights
Customized Expressions
Access Denied Response
The Encryption On/Off Page
The Encryption Preferences Page
The Enforce Strong Security Requirements Page
The Programs Tab
The CGI Directory Page
The CGI as a File Type Page
The Query Handler Page
The Activate Server-Side JavaScript Page
The WAI Administration Page
The WINCGI Directory Page (Windows NT)
The Shell CGI Directory Page (Windows NT)
The Information for "JavaScript" Page
The Modify "JavaScript" Page
The Add Application Page
The Default Values When Adding Applications Page
The Servlets Tab
The Enable Servlets Page
The Path Variables for Location JAR/Class Files for Servlets Page
The Servlet Directory Page
The Configure Global Attributes for Servlets Page
The Configure Servlet Attributes Page
The Configure Servlet Virtual Path Translation Page
The Configure JVM Attributes Page
The Delete Version Files Page
The Security Tab
The Create a Trust Database Page
The Request a Server Certificate Page
The Install a Server Certificate Page
The Change the Key Pair File Password Page
The Manage Server Certificates Page
The Migrate a 3.x Cert Page
The Status Tab
The View Access Log Page
The View Error Log Page
The Monitor Current Activity Page
The Archive Log Files Page
The Log Preferences Page
The Generate Report Page
The SNMP Configuration Page
The SNMP Subagent Control Page (Unix)
The Styles Tab
The Create a New Style Page
The Remove an Existing Style Page
The Edit a Style Page
The Apply a Configuration Style Page
The View, Edit, or Remove Style Assignments Page
The Content Management Tab
The Primary Document Directory Page
The Additional Document Directories Page
The User Document Directories Page (Unix)
The File Manipulation Page
The Document Preferences Page
The URL Forwarding Page
The Hardware Virtual Servers Page
The Software Virtual Servers Page
The International Characters Page
The Document Footer Page
The Parse HTML Page
The Cache Control Directives Page
The Web Publishing Tab
The Set Up Netshare Page
The Create Netshare Page
The Web Publishing State Page
The Choose Web Publishing Language Page
The Maintain Web Publishing Data Page
The Unlock File Page
The Add Custom Property Page
The Manage Properties Page
The Index and Update Properties Page
The Search Tab
The Search State Page
The Create a Collection Page
The Configure Collection Page
The Update Collection Page
The Maintain Collection Page
The Schedule Collection Maintenance Page
The Remove Scheduled Collection Maintenance Page
The Search Configuration Page
The Search Pattern Files Page
Glossary
Index
© Copyright © 1999 Sun Microsystems, Inc. Some preexisting portions Copyright © 1999 Netscape Communications Corp. All rights reserved.