Release Notes for Sun Java™ System Web Server 6.1 2005Q1 SP4

Release Notes for Sun Java™ System Web Server

Version 6.1 SP4

Part Number 819-0290

February 2005

Sun Java™ System Web Server 6.1 2005Q1 SP4 (hereafter referred to as Sun Java System Web Server 6.1 SP4) contains important security vulnerability fixes. All users of Sun Java System Web Server, especially those with sites that utilize Secure Sockets Layer (SSL) version 3 or Transport Security Layer (TLS), are strongly encouraged to install this service pack. This release also provides support for the HP-UX and AIX platforms.

These release notes contain important information available at the time of release of Sun Java System Web Server 6.1 SP4, including information about features and enhancements, known limitations and problems, technical notes, and pointers to additional resources. Review the release notes prior to installing and configuring your software, and then periodically thereafter for the most up-to-date information.

Complete Sun Java System Web Server 6.1 documentation can be found at the following location:
http://docs.sun.com/db/prod/s1websrv#hic

These release notes contain the following sections:

Features and Enhancements

Sun Java System Web Server provides the following features and enhancements:

Java Servlet 2.3 and JavaServer Pages (JSP) 1.2 Support

Sun Java System Web Server includes a Java™ 2 Platform, Enterprise Edition (J2EE™)-compliant implementation of the Java™ Servlet 2.3 and JavaServer Pages™ (JSP™) 1.2 specifications. A J2EE-compliant web container provides the flexibility and reliability needed to design and deploy web applications that comply with Java™ technology standards. Web applications can be deployed on a per virtual server basis.

For information about these technologies, see the following resources:

For information about developing servlets and JSPs in Sun Java System Web Server, see the Sun Java System Web Server 6.1 Programmer’s Guide to Web Applications.

J2SE Platform 1.4.2_04 JDK/JRE Support

Sun Java System Web Server supports Java™ 2 Platform, Standard Edition (J2SE™) 1.4.2_04 and greater (32-bit only; 64-bit is not supported). J2SE software is bundled with the Web Server and installed during installation, if you choose to install it. You can also install your own JDK at a later time, following installation of the Web Server. If you plan to use the Administration server, a JDK must be installed.

HP-UX Platforms

Note that Sun Java System Web Server 6.1 for HP-UX platforms includes JDK 1.4.1.

J2SE Platform 1.5.0 JDK/JRE Support

Sun Java System Web Server supports Java™ 2 Platform, Standard Edition (J2SE™) 1.5.0 certified with 1.5.0_01-b08 on Solaris, Linux and Windows platforms.

WebDAV Support

Sun Java System Web Server supports the Web-based Distributed Authoring and Versioning (WebDAV) protocol, which enables collaborative web publishing with the following features:

WebDAV provides integrated support for content metadata, name space management, and overwrite protection. These technologies, combined with the many authoring tools that support WebDAV, provide an ideal development platform for collaborative environments.

NSAPI Filters Support

As of the 6.1 release, Sun Java System Web Server extends the Netscape Server Application Programmer's Interface (NSAPI) to support NSAPI filters.

Filters enable the custom processing of HTTP request and response streams, allowing a function to intercept and potentially modify the content presented to or generated by another function. For example, a plugin could install an NSAPI filter to intercept an XML page generated by another plugin's Server Application Function (SAF), then transform that XML page into an HTML, XHTML, or WAP page appropriate for the client. Alternatively, an NSAPI filter could decompress data received from a client before presenting it to another plugin.

For more information, see the Sun Java System Web Server 6.1 NSAPI Programmer’s Guide.

HTTP Compression Support

Sun Java System Web Server supports content compression, which allows you to increase delivery speed to clients and serve higher content volumes without incurring a corresponding increase in hardware expenses. Content compression reduces content download time, a benefit most apparent to users of dial-up and high-traffic connections.

For more information, see the Sun Java System Web Server 6.1 Administrator’s Guide.

Search Engine Support

Sun Java System Web Server supports a Java-based search engine that provides full-text search indexing and retrieval. The search feature allows users to search documents on the server and display results on a web page. Server administrators create the indexes of documents against which users will search, and can customize the search interface to meet specific needs.

The default URL end-users can use to access search functionality is:

http://<server-instance>:port number/search

Example:

http://plaza:8080/search

When the end-user invokes this URL, the Search page, which is a Java web application, is launched.

For detailed information about conducting basic and advanced searches, including information about keywords and optional query operators, see the online Help provided with the search engine. To access this information, click the Help link on the Search page.

For more information, see the Sun Java System Web Server 6.1 Administrator’s Guide.

Enhanced Security

Sun Java System Web Server allows you to restrict access using flat file authentication. As of the 6.1 release, Sun Java System Web Server now supports the Java Security Manager. The Security Manager is disabled by default when you install the product, which may improve performance significantly for some types of applications. Enabling the Security Manager may improve security by restricting the rights granted to your J2EE web applications. To enable the Security Manager, "uncomment" entries in the server.xml file:

<JVMOPTIONS>-Djava.security.manager</JVMOPTIONS>
<JVMOPTIONS>-Djava.security.policy=instance_dir/config/server.policy</JVMOPTIONS>

where instance_dir is the path to the installation directory of this server instance.

For more information about server.xml, see the Sun Java System Web Server 6.1 Administrator’s Configuration File Reference.

JNDI Support

Sun Java System Web Server supports the Java Naming and Directory Interface™ (JNDI), which provides seamless connectivity to heterogeneous enterprise naming and directory services.

JDBC Support

Sun Java System Web Server provides out-of-the-box, seamless Java™ DataBase Connectivity (JDBC™), and supports a wide range of industry-standard and customized JDBC drivers.

Sun ONE™ Studio 5 Support

Sun Java System Web Server supports Sun™ ONE Studio 5, Standard Edition. Sun ONE Studio technology is Sun's powerful, extensible, integrated development environment (IDE) for Java technology developers. Sun ONE Studio 5 is based on NetBeans™ software, and integrated with the Sun ONE platform. (Sun Java System Web Server 6.1 and above also supports NetBeans 3.5 and 3.5.1.)

Sun ONE Studio support is available on all platforms supported by Sun Java System Web Server 6.1 SP4. The plugin for the Web Server can be obtained in the following ways:

Please note that the Sun ONE Studio 5 plugin for Sun Java System Web Server 6.1 SP4 works only with a local Web Server (that is, with the IDE and the Web Server on the same machine).

The behavior of the Sun ONE Studio 5 plugin for Sun Java System Web Server is the same as that for Sun ONE™ Application Server 7. For information about using the web application features in Sun ONE Studio 5, see the following tutorial
http://developers.sun.com/prodtech/javatools/jsenterprise/learning/tutorials/cdshop.pdf

Set the Sun Java System Web Server 6.1 SP4 instance as the default, and then take the same actions described in the tutorial.

Also see the following NetBeans tutorial
http://usersguide.netbeans.org/tutorials/webapps/index.html

For more information about Sun ONE Studio 5, visit
http://www.sun.com/software/sundev/jde/

For additional developer resources, see Additional Sun Resources in these release notes.

Using Sun ONE Studio 5 for Debugging

Sun ONE Studio 5 can be used for "remote debugging" if you want to manually attach the IDE to a remote Web Server started in debug mode. The steps are as follows:

  1. Using the Sun Java System Web Server Administration interface, restart the server instance in debug mode (Server Manager > JVM General > Debug Enabled).
  2. Note the JPDA port number.
  3. Start the IDE.
  4. Choose Debug > Start.
  5. Select the dt_socket method, and then enter the remote machine name and the JPDA port number.
  6. At that moment, any breakpoint created in the IDE on servlet source code of a deployed application will be active.

Active Server Pages Support

Sun Java System Web Server 6.1 SP4 supports the Active Server Pages 3.0 specification through Sun ONE™ Active Server Pages version 4.0.1 (formerly Sun Chili!Soft ASP). Sun ONE Active Server Pages adds a secure, enterprise-grade Active Server Pages engine to the Sun Java System Web Server.

Sun Java System Web Server 6.1 SP4 provides support for Sun ONE Active Server Pages 4.0.1 on the following platforms:

A license is not required for Sun ONE Active Server Pages if you are installing to the Sun Java System Web Server. The Sun ONE Active Server Pages installer is available on the Companion CD if you purchased the Sun Java System Web Server Media Kit, or by download from the following location:
http://wwws.sun.com/software/chilisoft/index.html

Please note the following:

For more information about Sun ONE Active Server Pages, visit the URL listed above.

PHP Compatibility

Sun Java System Web Server 6.1 SP4 is compatible with PHP, the versatile and widely-used Open Source web scripting language. PHP runs on all major operating systems.

PHP version 4.3.2 is recommended for use with Sun Java System Web Server 6.1 SP4. For PHP-related installation and configuration information specific to Sun Java System Web Server, see
http://www.php.net/manual/en/install.netscape-enterprise.php

NSS 3.9.5 and NSPR 4.5.1 Support

NSS support in Sun Java System Web Server 6.1 SP4 has been upgraded from 3.3.10 (in version 6.1 SP3) to 3.9.5. NSS is a set of libraries designed to support cross-platform development of security-enabled server applications. Sun Java System Web Server 6.1 SP4 also supports NSPR 4.5.1.

Enhanced Hardware Accelerator Encryption Support

Sun Java System Web Server provides hardware accelerator support for Sun™ Crypto Accelerator 4000, a cryptographic accelerator board that enhances the performance of SSL on the Web Server.

Supported Platforms

Sun Java System Web Server 6.1 SP4 can be installed on the Solaris, HP-UX, AIX, Linux, and Windows platforms. The following table summarizes platform support. For more information about installation requirements, see Required Patches in these release notes, and Chapter 2 in the Sun Java System Web Server 6.1 Installation and Migration Guide.

Note: HP-UX 11i is supported only on PA-RISC platforms.

Table 1  Sun Java System Web Server 6.1 SP4 Supported Platforms

Vendor

Architecture

Operating System

Minimum Required Memory

Recommended Memory

Recommended Disk Space

IBM

PowerPC

IBM AIX 5.1, 5.2*

64 MB

192 MB

256 MB

Hewlett-Packard

PA-RISC 2.0

HP-UX 11i

64 MB

192MB

256 MB

Microsoft

Intel x86

Windows 2000 Server SP4
Windows XP
Windows Server 2003, Enterprise Edition

64 MB

192MB

256 MB

Sun

UltraSPARC*

Solaris 8, 9

64 MB

192MB

256 MB

Sun

x86

Solaris 9

64 MB

192MB

256 MB

Sun

x86

and SPARC

Trusted Solaris 8 (Pro Serve Only)**

64 MB

192MB

256 MB

Linux***

RedHat Intel x86

Red Hat Linux Advanced Server 2.1

Kernel 2.4.9-e.3smp
glibc-2.2.4-26
ncurses-4-5.0-5.i386.rpm

You may also create a symbolic link from libncurses5.so to libcurses4.so, although we recommend that you install ncurses4-5.0-5.i386.rpm.

and Red Hat Advanced Server 3.0

64 MB

192MB

256 MB

*As of iPlanet Web Server 6.0, older SPARC CPUs are not supported. Sun Java System Web Server 6.1 continues to support the UltraSPARC architecture.

**Sun or iForce partner professional services highly recommended

***Support for the following Linux operating system is now listed as Deprecated and will be removed with the "next" release of the Sun Java System Web Server 6.0 product:

Please take needed action to move or migrate your Web Servers to a supported operating system.

Required Patches

It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.

Solaris Patches

For the Solaris platform, Sun’s recommended patch list can be found at
http://sunsolve.sun.com/pubpatch

Note that patch 108993-22 (SPARC) or 108994-22 (x86) is required on Solaris 8 when Solaris is configured to use LDAP for authentication.

The following patches are required to use Sun Java System Web Server 6.1 SP4.

Solaris 8 (SPARC)

Solaris 9 (SPARC and x86)

HP-UX Patches

The following patches are required to use Sun Java System Web Server 6.1 SP4.

HP-UX 11i

Note: HP-UX 11i is supported only on PA-RISC platforms.

The Java Out-of-Box tool is used to configure the necessary kernel tunable parameters. Use of this tool is the recommended method for modifying kernel values. If necessary, modify the following tunable parameters to reflect a value equal to or greater than the following:

Caution: Modifying the kernel tunable parameters can have adverse impacts on your system. Do not modify the parameters unless you fully understand what you are doing.

AIX Patches

The following patches are required to use Sun Java System Web Server 6.1 SP4.

AIX 5.1

AIX 5.2

If Java web applications are deployed on the Web Server, then per the IBM JDK documentation the following environment variables must be set to the values specified below before the server is started:

The above snippet can be added directly to the Web Server start script.

Installation, Upgrade, and Migration Notes

This section includes notes about installing, upgrading, and migrating your Sun Java System Web Server. For detailed information about these topics, review the information in the Sun Java System Web Server 6.1 Installation and Migration Guide. References to Sun Java System Web Server 6.1 in the guide also apply to Sun Java System Web Server 6.1 SP4. For known issues in this release of Sun Java System Web Server, see Known Issues in these release notes.

Installation

Do not install Web Server into a directory with spaces in the name.  
It is very important to note that the Web Server will not start if it is installed into a directory with spaces in the name, for instance, Program Files. You will not receive an error message about this during installation, but following installation the server will not start.

Web Server cannot be setup on RHLAS 3.0 without compat-libstdc++
Web Server cannot be installed without installing compat-libstdc++.

Upgrade

When you install Sun Java System Web Server 6.1 SP4 over an existing installation of Sun Java System Web Server, the installer automatically detects and carries out the upgrade.

If you have Sun ONE Web Server 6.1 SP1 installed, have the installer for 6.1 SP4 point to the 6.1 SP1 installed location and then upgrade.

If you have the Sun Java Enterprise System 1 installed on your system and you wish to upgrade the Sun ONE Web Server 6.1 that is part of Sun Java Enterprise System 1 to Sun Java System Web Server 6.1 SP4, refer to the following documentation: http://docs.sun.com/source/817-5760/upgrading.html#wp28053

Migration

Direct migration from a version of iPlanet™ Web Server lower than 4.1 to Sun Java System Web Server 6.1 SP4 is not supported. You must first migrate your legacy server to iPlanet Web Server 4.1, and then to Sun Java System Web Server 6.1 SP4.

For detailed migration information, see the Sun Java System Web Server 6.1 Installation and Migration Guide. This guide contains information about migrating from version 4.1 to 6.1 SP4, and from version 6.0 to 6.1 SP4. Again, references to Sun Java System Web Server 6.1 in the guide also apply to Sun Java System Web Server 6.1 SP4.

Product Documentation

Sun Java System Web Server includes a complete set of product documentation, which can be found at the following location:
http://docs.sun.com/db/prod/s1websrv#hic

Sun Java System Web Server manuals are available as online files in PDF and HTML formats. References to Sun Java System Web Server 6.1 in the documentation also apply to Sun Java System Web Server 6.1 SP4. The following table lists the tasks and concepts described in each manual.

Table 2  Sun Java System Web Server Documentation Roadmap

For Information About

See the Following

Late-breaking information about the software and documentation

Release Notes

Getting started with Sun Java System Web Server, including hands-on exercises that introduce server basics and features (recommended for first-time users)

Getting Started Guide

Performing installation and migration tasks:

  • Installing Sun Java System Web Server and its various components, supported platforms, and environments
  • Migrating from a previous version of Sun Java System Web Server

Installation and Migration Guide

The guide can also be accessed from your Web Server installation: server_root/manual/https/ig/

Performing the following administration tasks:

  • Using the Administration and command-line interfaces
  • Configuring server preferences
  • Using server instances
  • Monitoring and logging server activity
  • Using certificates and public key cryptography to secure the server
  • Configuring access control to secure the server
  • Using Java™ 2 Platform, Enterprise Edition (J2EE™ platform) security features
  • Deploying applications
  • Managing virtual servers
  • Defining server workload and sizing the system to meet performance needs
  • Searching the contents and attributes of server documents, and creating a text search interface
  • Configuring the server for content compression
  • Configuring the server for web publishing and content authoring using WebDAV

Administrator’s Guide

The guide can also be accessed from your Web Server installation: server_root/manual/https/ag/

Using programming technologies and APIs to do the following:

  • Extend and modify Sun Java System Web Server
  • Dynamically generate content in response to client requests
  • Modify the content of the server

Programmer’s Guide

Creating custom Netscape Server Application Programmer’s Interface (NSAPI) plugins

NSAPI Programmer’s Guide

Implementing servlets and JavaServer Pages™ (JSP™) technology in Sun Java System Web Server

Programmer’s Guide to Web Applications

Editing configuration files

Administrator’s Configuration File Reference

Tuning Sun Java System Web Server to optimize performance

Performance Tuning, Sizing, and Scaling Guide

Resolved Issues

This section lists the most important issues fixed in the following releases:

Issues Resolved in 6.1 SP4

The following table lists the issues resolved in Sun Java System Web Server 6.1 SP4.

Table 3  Issues Resolved in Sun Java System Web Server 6.1 SP4

Problem ID

Description

2120372

Problems using ACL_LDAPSessionFree()

6066252

client certs with AKI extension causes SEC_ERROR_UNKNOWN_ISSUER error.

6092498

SJWS 6.1 fails to validate a client cert with LDAP if the cert contains Czech characters.

6171311

Frequent errors encountered when running Web Server with JDK 1.5.

6171784

Web Server performance issue with certain error logging configuration.

4925875

i18-ko: no asterix search result with Korean word.

6171950

precompiled JSPs not working as expected with reload-interval param in sun-web.xml.

Workaround

Use the property "use-precompiled" (set to "true" under jsp-config in sun-web.xml) to specify that the JSPs are precompiled and should never need to be compiled at runtime.

Sample sun-web.xml

<sun-web-app>
<session-config>
<session-manager/>
</session-config>
<jsp-config>
<property name="use-precompiled" value="true" />
</jsp-config>
</sun-web-app>

5048940

Superuser Access Control page in Admin UI not accessible after upgrade from SP1.

6186415

Sun Java Enterprise System Web Server 6.1 2005Q1 needs to "unlock" DataDirect driversNone.

6177544

libpassthrough.so not present after RPM installation of plugin.

6176231

Sun Java System Web Server 6.1 SP4 admin delete certificate (bin/https/admin/security) core dumps with NSS 3.9.3 beta.

6173365

Multiple package installers for same build of Web Server of Solaris SPARC/x86.

5039633

Update NSS to 3.9 series.

6171784

Infinite loop problem causes high cpu.

5063134

Java ES symlink not used for J2SE location.

6066252

Client certs with AKI extension causes SEC_ERROR_UNKNOWN_ISSUER error.

6067407

Problems using ACL_LDAPSessionFree().

6173293

Web Server always sets content type to text/html when servlet filter is set.

6171311

JSP invoking command line execution failed on Web Server 6.1 SP4 using jdk1.5.

6176264

Web Server 6.1 SP4 Solaris x86 unable to start the SSL instance through the Admin GUI.

6180677

Web Server SP4 for JES3 is unable to upgrade on top of Web Server SP2 for JES2.

6066139

JSTLTCK - 16 tests fail while running Web Server with jdk1.5_beta2 release.

6088595

Admin throws exception with JDK 1.5.0_beta2 while creating/editing classes.

4904913

I18N search: "?" wildcard search with Japanese causes wrong match.

Issues Resolved in 6.1 SP3

The following table lists the issues resolved in Sun Java System Web Server 6.1 SP3.

Table 4  Issues Resolved in Sun Java System Web Server 6.1 SP3

Problem ID

Description

6021151

Problem using HttpServerAdmin to create a JNDI resource containing an LDAP DN.

4798461

GUI does not correctly reflect when "Transmit File" is turned off.

4904896

I18N search: sort encoding list of Default Encoding on search admin GUI.

4905412

UI doesn't seem to permit manage users in keyfile db.

4991338

Web Server admin console does not show all the tabs (in Mozilla browser).

5001819

Web Server 6.1 Nova Search Engine sometimes misses to pick up document.

5014693

Java filters, HTTP compression, and SHTML fail to interoperate.

5021077

Encountering java.lang.NullPointerException if you click on OK button without selecting the Directory Server.

5025617

Web Server's JNDI needs to map resource-env-ref's from sun-web.xml.

5042676

Request flow problem with Client tag code=302.

5056989

Enable prefixing of hostname in session ID.

Note: you can enable prefixing hostname in session ID (as in 6.0SPx) for the webapp by setting the value of the property prefixSessionIDWithHostname under manager-properties to any of the values, yes, true, or on, in the webapp's sun-web.xml.

In the following example, prefixing hostname in session ID is enabled for the web-app by setting the parameter value to true. The sun-web.xml looks like:

<session-config>
<session-manager>
<manager-properties>
<property name="prefixSessionIDWithHostname" value="true"/>
</manager-properties>
</session-manager>
</session-config>

5057749

Web Server 6.1 SP2: Plugin defined in certmap.conf does not load.

6041356

Memory leak when AdminLanguage and/or DefaultLanguage is specified in magnus.conf.

6057426

The load balancer plugin (formerly Resonate plugin), loadbal.so, does not work on SPARC Solaris.

Note that the location of the loadbal.so plugin is: /plugins/loadbal.so

5065017

Servlet session data problem.

5048051

Create collection fails on Linux with RPM install.

5029954

StackSize is ignored when ConnQueueSize/RqThrottle is 0.

5060906

Authorization dialog pops up for an unprotected directory without index file.

4898077

Inconsistent behavior b/w HttpServerAdmin and iWS console.

5013100

Two ports like 2500 and 02500 are added in server.xml as different ports.

5046634

2 byte character in http header and plugin programs.

You can enable response header encoding at either at the web-app level by setting the value of the configuration parameter use-responseCT-for-headers to any of the values, yes, true, or on, in the webapp's sun-web.xml. In the following example, response header encoding is enabled for the web-app setting the parameter value to true. The sun-web.xml looks like:

<sun-web-app>

<parameter-encoding form-hint-field="j_encoding"/>

<property name="use-responseCT-for-headers" value="true" />

<session-config>

<session-manager/>

</session-config>

<jsp-config/>

</sun-web-app>

Issues Resolved in 6.1 SP2

The following table lists the issues resolved in Sun Java System Web Server 6.1 SP2.

Table 5  Issues Resolved in Sun Java System Web Server 6.1 SP2

Problem ID

Description

4536102

ADM:i18n: SNMP community name doesn't show up on Solaris Netscape.

4536194

CGI subsystem makes blocking calls from NSPR user threads.

4536739

Admin ACL and Superuser AC: Allow only "from host" does not work.

4615933

CORE:SHTML: can't set Content-encoding for .shtml files.

4629796

ADM:i18n: French Thread pool name displaying garbage on JA-NT (IE & Netscape).

4651056

Web Server returns 404 for files starting with "..".

4651206

After adding new mime type file, there is no way of verifying addition from the GUI.

4651207

On Document preference web page, file to use for error responses needs to be provided.

4652009

Customized access log file is not reflected in GUI in View Access Log tab.

4657465

Need to disable cookie-encoding.

By default, the Sun Java System Web Server URL encodes the cookies before sending them to the client. If you do not want the cookies to be encoded, add the following line to sun-web.xml:

<property name="encodeCookies" value="false"/>

For the above example, put the line directly under the tag; do not embed them in any other tag.

4664945

Internal Error from URL forwarding form.

4666409

Clearing the ErrorResponse CGI files name.

4676934

dist-admin: Override default ACI in Web Server 6.0 SP2.

4676946

No validation of virtual server settings form.

4676950

Internal Error on removing http:// from URL forwarding form.

4682434

CGI script fails that grabs environment variables fails to execute.

4682894

Cluster management - Selection of source server deselects target servers.

4684775

Async DNS is disabled by default.

4707989

WEB-APP/JSP: load-on-startup not working on JSP files.

4704385

Cluster: Null message in modify cluster when ok is clicked soon after reset.

4705181

User and group is not validating for the users and accepting blank spaces in cgi.

4705204

Newly added acl files are not getting deleted after selecting delete.

4706063

Chroot and Directory are not validating correctly.

4711353

Admin: Global|SNMP Master Trap Warning displays "Form Element Missing:manager?".

4718914

Turn the security ON for any instance server without installing certificate.

4724503

After enabling IPv6 on UI Edit listen socket, server will not start.

4727597

Admin GUI gets cluttered when a new server is added with a duplicate Port.

4721021

Unable to access absolute URI on SSL enabled server.

4727444

Access Log reports incorrect data.

4732877

Urlhosts field does not accept more that one hostname.

4745314

$id variable in Docroot in a VSCLASS is not working on Windows.

4749239

ACLI: Incorrect processing of ACL.

4753601

MaxRqHeader directive in magnus.conf is not working as desired.

4754934

Vignette NSAPI plugin on Web Server 6.0 not functioning correctly when using HTTP1.1.

4761188

LDAP: Improve LDAP dynamic group performance for ACI's.

For performance reason, a new ldap config parameter, "dyngroups fast" is introduced for SP2. With this config, Web Server will make assertion about group memebership bypassing nested individuals among dynamic groups.

For example, assuming that user "alpha" belongs to group "a", group "a" is a member of group "b" by group "b" memberURL definition (dynamic group), and your acl only grants group "b" access. In such case, Web Server will deny access from "alpha" because "alpha" is not regarded as memeber of group "b".

If you want to support nested group in such case, don't define this new config for ldap authentication service. (and you won't get performance gain consequently.) Sample config: directory ldapregular ldap://localhost:389/o=TestCentral
ldapregular: dyngroups fast

4763653

Validation required for the form elements in document preferences page.

4764307

Magnus.conf: Performance settings: accepting -ve numbers.

4765709

ADMIN: 'Configure Directory Service' not validating binddn/password.

4770294

Web Server 6 on Windows should add CR character to the end of line in access log.

4786612

The Web Server treats ':' as a separator between hostname/IP and port in several places. This code needs to be updated to recognize when the ':' is actually part of an IPv6 address.

4787310

Eviction fails in NSFC when SmallFileSpace is set to low value.

4788075

Setting the PATH variable in magnus.conf for Web Server 6.0 SP5 does not work.

4800173

Performance issue with large ACL file in conjunction with many Virtual Servers.

4808402

Native authenticator support.

4814097

Unable to select "none" as program item under program groups in GUI.

4822720

Keep-alive subsystem should be dynamically tuned.

The keep-alive subsystem requires tuning for optimal performance. In Web Server 6.0, this subsystem was tuned for heavy load and performs poorly when there are only a handful of concurrent keep-alive connections. The keep-alive subsystem was modified for Web Server 6.1 SP2 so it performs some dynamic tuning to accomodate the actual load.

4849907

Shtml is parsed when execute permission is not set and configured.

4855807

AIX: Web Server hangs after restarted by watchdog.

4858152

Access log entries in server.xml of the migrated instance points to invalid path.

4869527

SNMP: protos test no. 3 fails for RH Linux 6.2/7.2/Adv Server 2.1 & Sun Linux 5.

4862498

New directory Service Screen not connected to interface.

4870613

Back button not working for frames in Netscape 7.

4873766

upload-file does not work correctly with chunked requests.

4882838

Unable to specify protocol for URL in generated redirects.

The server generates a self-referencing URL whenever it sends a redirect to a client. As of Web Server 6.1 SP1, the servername attribute of the LS element in server.xml can be used to configure the scheme used in server-generated self-referencing URLs.

For example, if an SSL offloader sits between the Internet and the Web Server instance, decrypting SSL-encrypted traffic for www.sun.com and relaying it to the Web Server on port 8080, an LS element such as the following could appear in server.xml:

The "https://" prefix in the servername value instructs the server to use the https scheme in self-referencing URLs even though the LS is not configured to handle SSL traffic.

4889081

Internal log rota creates empty logs.

4894033

dist-admin: Functioning of admin ACL "Allow only from host/ip" is not as per doc.

4896881

While untaring the Web Server bits, the ownership and group information is not correct.

4897074

On Linux only: When you create a collection, PDF files will not be indexed and added to the collection.

4899105

The highlighting of the connection value in edit virtual server is not correct.

4905175

WebDAV ACL settings are inherited into new Virtual Servers.

4909378

Help Button for edit webdav is not pointing to the correct help page.

4903449

Performance affected with multi-process mode and one thread.

4905681

The AsyncDNS setting is ignored in Sun Java System Web Server 6.1 SP1. The Web Server never performs asynchronous DNS lookups.

Note that even when the magnus.conf contains AsyncDNS on, that Asyncronous DNS is still turned off.

4908631

An error message status is returned when user tries to stop the server when it is not running.

4907288

Cluster Management file transfer not working on Windows.

4909678

Web Server 6.1 Digest authentication is not working for flat files.

4910266

Web Server 6.1: Creating Digest file users via GUI duplicates users in exponential order.

4904088

Migration final page needs to html encode the "<" and ">" characters.

4908986

Jdbc: blob sample: Servlet code UploadServlet mishandles SQL exceptions.

4904896

i18n search: sort encoding list of Default Encoding on search admin gui.

4908010

Unable to remove search collection for a newly created VS before doing an apply.

4908401

i18n: unlocalized timestamp for each search returned documents.

4903319

Does not add a JSP file to the collection.

4910222

Error on Windows when trying to create a collection with a docroot with backslashes.

Workaround:
 This behavior occurs when you specify a docroot that has backslashes or mixed slashes. Use forward slashes.

4911548

Server returns ConfigException while creating the duplicate search collection.

4911656

I18N: Can not go to "sort by date" link while searching multibyte characters.

4913909

i18n: error adding file with Korean filename - skipping since no read permission.

4913228

Missing quote in oracle script for jdbcRealm sample application.

4910869

NSFC enhancement needed.

Add the ReplaceFiles nsfc.conf directive.

When ReplaceFiles=true (default), the existing file cache behaviour is preserved.

ReplaceFiles=false indicates that once a file is cached, its file cache entry should never be discarded to make room for another file; this is useful in benchmark scenarios because it allows us to eliminate contention on the hit list lock.

4910272

Server should not accept mixed slashes for the doc root while adding a new server.

4912254

WebServer installation failed due to 'set -o noclobber' in .env.

4911070

Web Server 6.1: Add listen socket protocol family field is missing for IPv6 address.

4911630

Many of the fields in the magnus editor doesn't have validations as they are accepting negative integer values.

4911550

Getting ServletException while trying to access the server with additional doc.

4911633

Change Password for the user is not working.

4913566

The URL Forwarding Editing Page is not consistent.

4919473

Updating Security Realm properties from Admin GUI not reflected in server.xml.

4913289

Help on "Edit Virual Class" doesn't give complete criteria for VS class deletion.

4916331

Keep-alive connections can hang under light load.

4925475

The server.xml createconsole attribute is ignored.

4925938

Getting Null Pointer exception if user mistakenly edits the VS admin url.

4929848

Performance: Web Server polls kstat once per second.

4926414

i18n-ko: reindexing collection hangs when missing 1 or more existing docs.

4935797

certmap.conf file location mis-represented.

4930327

Destination headers are not URL decoded in MOVE/COPY requests.

4933483

SIGCHLD signals are reported on startup.

4935582

TCP_NODELAY need not be set for AF_NCA.

4930642

Source returned when the file's mime.types entry does not end with a carriage return.

4930329

Default values of maxpropdepth is poorly chosen.

4932995

The leading '/' is being removed when deleting web application through admin GUI.

4935420

Resource picker for restrict access fails for migrated instance of 6.1.

4944850

Address directive not properly migrated when migrating from Web Server 4.1 to 6.1.

4946829

Admin: creating new vs after migration causes $user: unable to find value.

4941027

Cross site scripting in Sun Web server Webadmin interface.

4948397

Web Server 6.1 SP1 SNMP is not working.

4946187

dist-admin: "Allow Authenticated Users": after enabling dist-admin, if an ACL is set to allow authenticated users only, the server still allows access to other users in the admin group.

4947005

Add server instance is not working on Solaris x86.

4940418

3rd party profiler support for bytecode instrumentation.

4940040

Administrator's Configuration File Reference defines nonexistent TYPE element.

4942750

Search example is incorrect.

4943631

Wrong documentation on Thread pool config file.

4941741

Web Server 6.1 SP1 server on Solaris 8 SPARC fails to start due to libCld.so.

4945994

fc_net_write should result in a single system call.

4940418

Third-party profiler support for bytecode instrumentation.

4943329

IWSSessionManager doesn't work as expected with Web Server 6.1.

4947065

The search webapp shows only a maximum of 11 collections.

4947624

Ineffective alert message displayed while Reindexing On Windows.

4950552

Wrong no of results for particular output results (11, 21, 31...).

4954789

Web Server deployment fails with ClassCastException.

4956415

Web Server 6.1 Search: requesting an ability to display the meta tag description.

4950644

Ineffective alert message displayed while creating a duplicate collection on Lin.

4951860

httpagt depends on NETSITE_ROOT variable.

4957158

fc_open fails when running specweb99 on x86 build.

4952492

MOVE method should "rename" files when possible.

4958571

PR_NetAddrToString performance is less than expected.

4951264

Server crash during Java-triggered reconfiguration and server shutdown.

4958755

ServletContext.getContext(String) does not return other contexts when called from root context. It simply returns the root context.

4950653

"Null" is displayed for QoS vsclass values.

4951982

Invalid error message is displayed while configuring LDAP with wrong credentials.

4953147

Cron-based log rotation fails when admin user is root, and instance is non-root.

Workaround:
Change the user to be same as admin server user in the scheduler.conf file.

4961864

Web Server hangs when using rotate-callback.

4962059

Admin passwd stored as plain text in file setup.inf.

4969637

Minor coding error in send-error SAF.

4961999

After adding a VS, the top frame does not show the VS in the drop down box.

4962624

Admin: No Validation for protocol value in Edit Listen socket.

4963483

The UI gets cluttered if one tries to create an ACL file path with forward slash.

4964069

The commit.exe utility crashes on Windows platforms.

4968422

Showing up invalid ACL file on the browser in the webdav screen.

4966497

Perf Dump data for Average Queueing Delay is not correct.

4970955

Cross-site security issue with Apache sample(\plugins\java\samples\webapps\simple).

4972573

Incorrect behaviour in Webapps-Simple sample application in Web Server 6.1 SP1.

4972587

Incorrect instructions in index.html of i18n Sample Application.

4976454

Samples shipped with Web Server 6.1.

4970273

FastCGI beta libraries are in RTM Web Server packages.

4976953

AIX 6.0 SP6: forbidden error to a GET for a file with correct group permissions.

4976490

Log messages truncated.

4975675

Dynamic reconfiguration fails when server is under load.

4976910

NSFC_GetEntryPrivateData() calls NSFC_ExitCacheMonitor() when no entry exists.

4973079

The GUI retains dismissed invalid port entries and populates it when servername field validation fails.

4975788

classpath edited using IExplorer is broken; server JVM can't start.

4975798

Can't add path to classpath suffix using web-admin.

4975782

Can't delete external JNDI reference.

4970188

Rpm can't locate system umask.

4971298

pkgchk -n fails for Webserver package in JES.

4986761

Web Server 6.0 migration fails.

4989231

Server fails to start up on Linux platform. Wrong JDK path during build.

4988104

Edit virtual servers page should update the connections value correctly.

4986700

Last-modified and Etag are suppressed when Servlet filters are used.

4991888

Storing the wrong file name for key file configuration.

4992739

Cannot start webserver instance, after modifying its classpath suffix.

4995447

Web Server 6.1 SP2 RHlinux unable to access admin GUI; throws error message after login.

4995489

Solaris x86: distributed admin cannot be enabled.

4991775

Validation of cookie name in cookie example servlet.

5002905

Super User Access Control cannot be set even when Distributed Admin is not enabled.

5012107

POST request body consumed twice when using bad plugin.

4962659

Search criteria is getting truncated to 100 characters.

4967580

Search displays wrong hyperlinks for the SSL enabled instance.

4970181

Stellent filters need to be added to the Linux and Solaris x86 builds.

4975327

indexMetatags of the nova search should be set automatically.

4975367

Indexing for the meta tag should be case-insensitive.

4997149

Remove documents with *.* pattern is not removing all the files when the excludeExtensions property is set.