Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Overview

• 1.1 Oracle HTTP Server Features
• 1.2 Oracle HTTP Server Components
• 1.2.1 Oracle HTTP Server Modules
• 1.3 Oracle HTTP Server Support
• 1.4 Oracle HTTP Server Management
• 1.5 Starting, Stopping, and Restarting Oracle HTTP Server
• 1.5.1 Starting Oracle HTTP Server
• 1.5.2 Stopping Oracle HTTP Server
• 1.5.3 Restarting Oracle HTTP Server

2 Configuring Standalone Oracle HTTP Server with Oracle Application Server

• 2.1 Configuration Checklist
• 2.2 Installing Standalone Oracle HTTP Server
• 2.3 Configuring OPMN
• 2.4 Configuring mod_oc4j
• 2.5 Configuring Single Sign-On

3 Specifying Server and File Locations

• 3.1 Setting Server and Administrator Functions
• 3.1.1 ServerName
• 3.1.2 UseCanonicalName
• 3.1.3 ServerAdmin
• 3.1.4 ServerSignature
• 3.1.5 ServerTokens
• 3.1.6 ServerAlias
• 3.2 Specifying File Locations
• 3.2.1 CoreDumpDirectory
• 3.2.2 DocumentRoot
• 3.2.3 ErrorLog
• 3.2.4 LockFile
• 3.2.5 PidFile
• 3.2.6 ScoreBoardFile
• 3.2.7 ServerRoot

4 Managing Server Processes

• 4.1 Oracle HTTP Server Processing Model
• 4.2 Handling Server Processes
• 4.2.1 ServerType
• 4.2.2 Group
• 4.2.3 User
• 4.3 Configuring the Number of Processes and Connections
• 4.3.1 StartServers
• 4.3.2 ThreadsPerChild
• 4.3.3 MaxClients
• 4.3.4 MaxRequestsPerChild
• 4.3.5 MaxSpareServers
• 4.3.6 MinSpareServers
• 4.4 Running Oracle HTTP Server as Root
• 4.5 Security Considerations
• 4.6 Getting Information about Processes

5 Managing the Network Connections

• 5.1 Specifying Listener Ports and Addresses
• 5.1.1 BindAddress
• 5.1.2 Port
• 5.1.3 Listen
• 5.2 Managing Interaction Between Server and Network
• 5.2.1 ListenBackLog
• 5.2.2 SendBufferSize
• 5.2.3 TimeOut
• 5.3 Managing Connection Persistence
• 5.3.1 KeepAlive
• 5.3.2 KeepAliveTimeout
• 5.3.3 MaxKeepAliveRequests
• 5.4 Obtaining Client IP Address
• 5.5 Configuring Reverse Proxies and Load Balancers

6 Configuring and Using Server Logs

• 6.1 Using Oracle Diagnostic Logging
• 6.1.1 Overview
• 6.1.2 Configuring Oracle HTTP Server
• 6.1.2.1 OraLogMode oracle | odl | apache
• 6.1.2.2 OraLogSeverity module_name <msg_type>{:msg_level]
• 6.1.2.3 OraLogDir <bus stop dir>
• 6.2 Specifying Log Level
• 6.3 Specifying Log Files
• 6.3.1 Access Log
• 6.3.1.1 Specifying LogFormat
• 6.3.2 CustomLog
• 6.3.3 Error Log
• 6.3.4 PID File
• 6.3.5 Piped Log
• 6.3.6 Rewrite Log
• 6.3.7 Script Log
• 6.3.8 SSL Log
• 6.3.9 Transfer Log

7 Understanding Modules

• 7.1 List of Modules
• 7.2 mod_access
• 7.3 mod_actions
• 7.4 mod_alias
• 7.5 mod_asis
• 7.6 mod_auth
• 7.7 mod_auth_anon
• 7.8 mod_auth_dbm
• 7.9 mod_autoindex
• 7.10 mod_cern_meta
• 7.11 mod_certheaders
• 7.12 mod_cgi
• 7.13 mod_define
• 7.14 mod_digest
• 7.15 mod_dir
• 7.16 mod_dms
• 7.17 mod_env
• 7.18 mod_example
• 7.19 mod_expires
• 7.20 mod_fastcgi
• 7.21 mod_headers
• 7.22 mod_imap
• 7.23 mod_include
• 7.24 mod_info
• 7.25 mod_log_agent
• 7.26 mod_log_config
• 7.27 mod_log_referer
• 7.28 mod_mime
• 7.29 mod_mime_magic
• 7.30 mod_mmap_static
• 7.31 mod_negotiation
• 7.32 mod_oc4j
• 7.32.1 Configuring mod_oc4j
• 7.32.1.1 mod_oc4j Configuration File and Directives
• 7.32.1.2 mod_oc4j Sample Configurations
• 7.32.2 Load Balancing Using mod_oc4j
• 7.32.3 Enabling SSL between mod_oc4j and OC4J
• 7.32.3.1 Enabling SSL for mod_oc4j
• 7.32.3.2 Enabling SSL for OC4J
• 7.33 mod_onsint
• 7.33.1 Benefits of mod_onsint
• 7.33.2 Implementation Differences on UNIX and Windows
• 7.34 mod_oradav
• 7.35 mod_ossl
• 7.36 mod_osso
• 7.37 mod_perl
• 7.37.1 Database Usage Notes
• 7.37.1.1 Using Perl to Access the Database
• 7.37.1.2 Testing Database Connection
• 7.37.1.3 Using SQL NCHAR Datatypes
• 7.38 mod_php
• 7.39 mod_plsql
• 7.39.1 Creating a DAD
• 7.39.2 Configuration Files
• 7.39.2.1 plsql.conf
• 7.39.2.2 dads.conf
• 7.39.2.3 cache.conf
• 7.39.3 Configuration Parameters
• 7.39.3.1 plsql.conf
• 7.39.3.2 dads.conf
• 7.39.3.3 cache.conf
• 7.40 mod_proxy
• 7.41 mod_rewrite
• 7.41.1 mod_rewrite Rules Processing
• 7.41.2 mod_rewrite Directives
• 7.41.2.1 RewriteEngine
• 7.41.2.2 RewriteOptions
• 7.41.2.3 RewriteLog
• 7.41.2.4 RewriteLogLevel
• 7.41.2.5 RewriteBase
• 7.41.3 Rewrite Rules Hints
• 7.41.4 Redirection Examples
• 7.42 mod_security
• 7.43 mod_setenvif
• 7.44 mod_speling
• 7.45 mod_status
• 7.46 mod_unique_id
• 7.47 mod_userdir
• 7.48 mod_usertrack
• 7.49 mod_vhost_alias
• 7.50 mod_wchandshake

8 Configuring and Using mod_oradav

• 8.1 OraDAV Concepts
• 8.1.1 WebDAV
• 8.1.2 mod_dav
• 8.1.3 mod_oradav
• 8.1.4 OraDAV
• 8.2 OraDAV Architecture
• 8.3 OraDAV Users
• 8.4 OraDAV Usage Model
• 8.5 OraDAV Configuration Parameters
• 8.5.1 ORAAllowIndexDetails
• 8.5.2 ORAAltPassword
• 8.5.3 ORACacheDirectory
• 8.5.4 ORACacheMaxResourceSize
• 8.5.5 ORACachePrunePercent
• 8.5.6 ORACacheTotalSize
• 8.5.7 ORAConnect
• 8.5.8 ORAConnectSN
• 8.5.9 ORAContainerName
• 8.5.10 ORAException
• 8.5.11 ORAGetSource
• 8.5.12 ORALockExpirationPad
• 8.5.13 ORAPackageName
• 8.5.14 ORAPassword
• 8.5.15 ORARootPrefix
• 8.5.16 ORAService
• 8.5.17 ORATraceEvents
• 8.5.18 ORATraceLevel
• 8.5.19 ORAUser
• 8.6 DAV Directives
• 8.6.1 DAVDepthInfinity
• 8.6.2 DAVLockDB
• 8.6.3 DAVMinTimeout
• 8.6.4 DAVOraNLS
• 8.6.5 DAVOraReadOnly
• 8.6.6 DAVOraWebCacheReadOnly
• 8.6.7 Limit
• 8.6.8 LimitExcept
• 8.6.9 LimitXMLRequestBody
• 8.7 WebDAV Security Considerations
• 8.8 OraDAV Performance Considerations
• 8.8.1 Using Disk Caching with OraDAV
• 8.8.2 Bypassing OracleAS Web Cache for WebDAV Activities
• 8.8.3 Using OracleAS Web Cache for Browsing Activities
• 8.9 mod_oradav Usage Notes
• 8.9.1 Mapping Containers Under the Root Location
• 8.9.2 Globalization Support Considerations with OraDAV
• 8.9.3 PROPFIND Security

9 Managing Security

• 9.1 About Oracle HTTP Server Security
• 9.2 Classes of Users and Their Privileges
• 9.3 Resources Protected
• 9.4 Authentication and Authorization Enforcement
• 9.4.1 Host-based Access Control
• 9.4.1.1 Access Control for Virtual Hosts
• 9.4.1.2 Using mod_access and mod_setenvif for Host-based Access Control
• 9.4.2 User Authentication and Authorization
• 9.4.2.1 Using mod_auth to Authenticate Users
• 9.4.2.2 Using mod_osso to Authenticate Users
• 9.4.2.3 Using mod_ossl to Authenticate Users
• 9.5 Understanding Port Tunneling
• 9.5.1 Configuring Port Tunneling
• 9.5.1.1 Task 1: Configure opmn.xml
• 9.5.1.2 Task 2: Configure iaspt.conf
• 9.5.1.3 Task 3: Configure mod_oc4j.conf
• 9.5.2 Configuring SSL for Port Tunneling
• 9.5.3 Port Tunneling Configuration Reference
• 9.5.3.1 opmn.xml
• 9.5.3.2 mod_oc4j.conf
• 9.5.3.3 iaspt.conf
• 9.6 Leveraging Oracle Identity Management Infrastructure
• 9.6.1 Overview
• 9.6.2 Using OracleAS Single Sign-On and mod_osso

10 Enabling SSL for Oracle HTTP Server

• 10.1 Overview
• 10.2 Configuring SSL
• 10.2.1 Task 1: Creating a Real Wallet
• 10.2.2 Task 2: Enabling SSL
• 10.2.3 Task 3: (Optional) Customizing Your Configuration
• 10.3 Additional SSL Features
• 10.3.1 Global Server ID Support
• 10.3.2 PKCS #11 Support
• 10.4 Using SSL Configuration Directives
• 10.4.1 Using mod_ossl Directives
• 10.4.1.1 SSLAccelerator
• 10.4.1.2 SSLCARevocationFile
• 10.4.1.3 SSLCARevocationPath
• 10.4.1.4 SSLCipherSuite
• 10.4.1.5 SSLEngine
• 10.4.1.6 SSLLog
• 10.4.1.7 SSLLogLevel
• 10.4.1.8 SSLMutex
• 10.4.1.9 SSLOptions
• 10.4.1.10 SSLPassPhraseDialog
• 10.4.1.11 SSLProtocol
• 10.4.1.12 SSLRequire
• 10.4.1.13 SSLRequireSSL
• 10.4.1.14 SSLSessionCache
• 10.4.1.15 SSLSessionCacheTimeout
• 10.4.1.16 SSLVerifyClient
• 10.4.1.17 SSLWallet
• 10.4.1.18 SSLWalletPassword
• 10.4.2 Using the iasobf Utility
• 10.4.3 Using mod_proxy Directives
• 10.4.3.1 SSLProxyCache
• 10.4.3.2 SSLProxyCipherSuite
• 10.4.3.3 SSLProxyProtocol
• 10.4.3.4 SSLProxyWallet
• 10.4.3.5 SSLProxyWalletPassword

A Load Balancing Using mod_oc4j

• A.1 Load Balancing Policies
• A.1.1 Random
• A.1.2 Round Robin
• A.1.3 Random with Local Affinity
• A.1.4 Round Robin with Local Affinity
• A.1.5 Random using Routing Weight
• A.1.6 Round Robin using Routing Weight
• A.1.7 Metric Based
• A.1.8 Metric Based with Local Affinity
• A.2 Load Balancing Parameters
• A.2.1 Oc4jSelectMethod
• A.2.2 Oc4jRoutingWeight
• A.3 Metric-based Load Balancing
• A.3.1 Configuring Oracle HTTP Server
• A.3.2 Configuring OC4J
• A.3.2.1 Configuring Metric-based Load Balancing to Use the DMSMetricCollector
• A.3.2.2 Building Your Own Metric Collector

B Configuration Files

• B.1 dms.conf
• B.2 httpd.conf
• B.2.1 httpd.conf File Structure
• B.2.1.1 Global Environment
• B.2.1.2 Main Server Configuration
• B.2.1.3 Virtual Hosts Parameters
• B.3 iaspt.conf
• B.4 mime.types
• B.5 mod_oc4j.conf
• B.6 mod_osso.conf
• B.7 opmn.xml
• B.8 oracle_apache.conf
• B.9 php.ini
• B.10 ssl.conf

C Frequently Asked Questions

• C.1 Creating Application-specific Error Pages
• C.2 Offering HTTPS to ISP (Virtual Host) Customers
• C.3 Using Different Language and Character Set Versions of Document
• C.4 Sending Proxy Sensitive Requests to HTTP Server Behind a Firewall
• C.5 mod_oc4j Information
• C.6 mod_oc4j Communication to OC4J using SSL
• C.7 Oracle HTTP Server Version Number
• C.8 Applying Apache Security patches to Oracle HTTP Server
• C.9 Compressing Output from Oracle HTTP Server
• C.10 Supporting PHP
• C.11 Protecting Web Site From Hackers

D Troubleshooting Oracle HTTP Server

• D.1 Problems and Solutions
• D.1.1 Intermittent HTTP-500 errors
• D.1.2 Firewall Between Oracle HTTP Server and OC4J Blocks Connections
• D.1.3 Oracle HTTP Server Unable to Start Due to Port Conflict
• D.1.4 Machine Overloaded by Number of HTTPD Processes
• D.1.5 Permission Denied When Starting Oracle HTTP Server on Port Below 1024
• D.1.6 Oracle HTTP Server May Fail To Start If PM Files Are Not Located Correctly
• D.1.7 SSO Client Authentication Fails with Webcache Reverse Proxy
• D.2 Need More Help?

E Third Party Licenses

• E.1 Apache HTTP Server
• E.1.1 The Apache Software License
• E.2 Apache SOAP
• E.2.1 Apache SOAP License
• E.3 DBI Module
• E.3.1 Perl Artistic License
• E.3.1.1 Preamble
• E.3.1.2 Definitions
• E.4 Perl
• E.4.1 Perl Kit Readme
• E.4.2 mod_perl License
• E.4.3 Perl Artistic License
• E.4.3.1 Preamble
• E.4.3.2 Definitions
• E.5 PHP
• E.5.1 The PHP License
• E.6 mod_dav
• E.7 FastCGI
• E.7.1 FastCGI Developer's Kit License
• E.7.2 Module mod_fastcgi License

Glossary

Index