Oracle® HTTP Server Administrator’s Guide 10g Release 1 (10.1) Part No. B12255-01 December 2003 Oracle HTTP Server Administrator’s Guide, 10g Release 1 (10.1) Part No. B12255-01 Copyright © 2003 Oracle Corporation. All rights reserved. Primary Author: Priya Darshane Contributor: Julia Pond, Warren Briese, Kevin Clark, Priscila Darakjian, Sander Goudswaard, Pushkar Kapasi, Chuck Murray, Mark Nelson, Bert Rich, Shankar Raman, Baogang Song, Kevin Wang The Programs (which include both the software and documentation) contain proprietary information of Oracle Corporation; they are provided under a license agreement containing restrictions on use and disclosure and are also protected by copyright, patent and other intellectual and industrial property laws. Reverse engineering, disassembly or decompilation of the Programs, except to the extent required to obtain interoperability with other independently created software or as specified by law, is prohibited. The information contained in this document is subject to change without notice. If you find any problems in the documentation, please report them to us in writing. Oracle Corporation does not warrant that this document is error-free. Except as may be expressly permitted in your license agreement for these Programs, no part of these Programs may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Oracle Corporation. If the Programs are delivered to the U.S. Government or anyone licensing or using the programs on behalf of the U.S. Government, the following notice is applicable: Restricted Rights Notice Programs delivered subject to the DOD FAR Supplement are “commercial computer software” and use, duplication, and disclosure of the Programs, including documentation, shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement. Otherwise, Programs delivered subject to the Federal Acquisition Regulations are “restricted computer software” and use, duplication, and disclosure of the Programs shall be subject to the restrictions in FAR 52.227-19, Commercial Computer Software - Restricted Rights (June, 1987). Oracle Corporation, 500 Oracle Parkway, Redwood City, CA 94065. The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently dangerous applications. It shall be the licensee's responsibility to take all appropriate fail-safe, backup, redundancy, and other measures to ensure the safe use of such applications if the Programs are used for such purposes, and Oracle Corporation disclaims liability for any damages caused by such use of the Programs. Oracle is a registered trademark, and Oracle Store, Oracle8i, Oracle9i, SQL*Plus, and PL/SQL are trademarks or registered trademarks of Oracle Corporation. Other names may be trademarks of their respective owners. iii Contents Send Us Your Comments xi Preface xiii Intended Audience xiv Documentation Accessibility xiv Organization xv Related Documentation xvi Conventions xvii 1 Oracle HTTP Server Overview Oracle HTTP Server Features 1-2 Oracle HTTP Server Components 1-3 Oracle HTTP Server Modules 1-3 Oracle HTTP Server Support 1-5 Oracle HTTP Server Management 1-6 Starting, Stopping, and Restarting Oracle HTTP Server 1-6 Starting Oracle HTTP Server 1-6 Stopping Oracle HTTP Server 1-7 Restarting Oracle HTTP Server 1-7 2 Oracle HTTP Server Concepts Understanding Oracle HTTP Server Directory Structure 2-2 Accessing Configuration Files 2-2 Configuration Files Syntax 2-2 iv Understanding Modules 2-3 Classes of Directives 2-3 Scope of Directives 2-4 Container Directives 2-4 <Directory> 2-4 <DirectoryMatch> 2-5 <Files> 2-5 <FilesMatch> 2-5 <Location> 2-5 <LocationMatch> 2-6 <Limit> 2-6 <LimitExcept> 2-6 <VirtualHost> 2-7 Block Directives 2-7 About .htaccess Files 2-7 3 Specifying Server and File Locations Setting Server and Administrator Functions 3-2 ServerName 3-2 UseCanonicalName 3-2 ServerAdmin 3-3 ServerSignature 3-3 ServerTokens 3-3 ServerAlias 3-3 Specifying File Locations 3-4 CoreDumpDirectory 3-4 DocumentRoot 3-4 ErrorLog 3-5 LockFile 3-5 PidFile 3-5 ScoreBoardFile 3-5 ServerRoot 3-6 4 Managing Server Processes Oracle HTTP Server Processing Model 4-2 v Running Oracle HTTP Server as Root 4-2 Additional Security Considerations 4-3 Handling Server Processes 4-4 ServerType 4-4 Group 4-4 User 4-4 Limiting the Number of Processes and Connections 4-5 StartServers 4-5 ThreadsPerChild 4-5 MaxClients 4-5 MaxRequestsPerChild 4-6 MaxSpareServers 4-6 MinSpareServers 4-6 Getting Information about Processes 4-7 5 Managing the Network Connection Specifying Listener Ports and Addresses 5-2 BindAddress 5-3 Port 5-3 Listen 5-3 Managing Interaction Between Server and Network 5-4 ListenBackLog 5-4 SendBufferSize 5-4 TimeOut 5-4 Managing Connection Persistence 5-5 KeepAlive 5-5 KeepAliveTimeout 5-5 MaxKeepAliveRequests 5-5 Configuring Reverse Proxies and Load Balancers 5-6 6 Configuring and Using Server Logs Using Oracle Diagnostic Logging 6-2 Overview 6-2 Configuring Oracle HTTP Server 6-2 Specifying Log Formats 6-5 vi Specifying Log Level 6-6 Specifying Log Files 6-7 Access Log 6-7 CustomLog 6-7 Error Log 6-8 PID File 6-8 Piped Log 6-8 Rewrite Log 6-9 Script Log 6-9 SSL Log 6-9 Transfer Log 6-9 7 Oracle HTTP Server Modules List of Modules 7-2 mod_access 7-3 mod_actions 7-3 mod_alias 7-3 mod_asis 7-3 mod_auth 7-3 mod_auth_anon 7-4 mod_auth_db 7-4 mod_auth_dbm 7-4 mod_auth_digest 7-4 mod_autoindex 7-4 mod_cern_meta 7-4 mod_certheaders 7-5 mod_cgi 7-8 mod_define 7-8 mod_digest 7-8 mod_dir 7-9 mod_dms 7-9 mod_env 7-9 mod_example 7-9 mod_expires 7-10 mod_fastcgi 7-10 vii mod_headers 7-10 mod_imap 7-10 mod_include 7-10 mod_info 7-11 mod_isapi 7-11 mod_log_agent 7-11 mod_log_config 7-11 mod_log_referer 7-11 mod_mime 7-12 mod_mime_magic 7-12 mod_mmap_static 7-12 mod_negotiation 7-12 mod_onsint 7-13 Benefits of mod_onsint 7-13 Implementation Differences for mod_onsint 7-14 mod_ossl 7-15 mod_perl 7-15 Database Usage Notes 7-16 Using Perl to Access the Database 7-16 Testing Database Connection 7-17 Using SQL NCHAR Datatypes 7-17 mod_plsql 7-19 Creating a DAD 7-20 Configuration Files 7-21 plsql.conf 7-21 dads.conf 7-22 cache.conf 7-22 Configuration Parameters 7-22 plsql.conf 7-24 dads.conf 7-26 cache.conf 7-49 mod_proxy 7-53 mod_rewrite 7-53 mod_rewrite Rules Processing 7-53 mod_rewrite Directives 7-55 viii Rewrite Rules Hints 7-57 Redirection Examples 7-58 mod_setenvif 7-59 mod_so 7-59 mod_speling 7-59 mod_status 7-59 mod_unique_id 7-60 mod_userdir 7-60 mod_usertrack 7-60 mod_vhost_alias 7-60 8 Managing Security About Oracle HTTP Server Security 8-2 Classes of Users and Their Privileges 8-3 Resources Protected 8-3 Authentication and Authorization Enforcement 8-4 Host-based Access Control 8-4 Access Control for Virtual Hosts 8-5 Using mod_access and mod_setenvif for Host-based Access Control 8-6 User Authentication and Authorization 8-9 Using mod_auth to Authenticate Users 8-9 Using mod_ossl to Authenticate Users 8-10 Enabling SSL 8-10 Security Services Implemented Within Oracle HTTP Server 8-12 Using mod_ossl 8-12 Using mod_ossl Directives 8-13 Using mod_proxy Directives 8-30 Using mod_ossl Directives to Configure Client Authentication 8-32 Using the iasobf Utility 8-33 9 Frequently Asked Questions Creating Application-specific Error Pages 9-2 Offering HTTPS to ISP (Virtual Host) Customers 9-2 Using Oracle HTTP Server as Cache 9-2 Using Different Language and Character Set Versions of Document 9-3 ix Sending Proxy Sensitive Requests to Oracle HTTP Server Behind a Firewall 9-3 Oracle HTTP Server Version Number 9-3 Apache v2.0 Support with Oracle Database, 10g Release 1 (10.1) 9-3 Applying Apache Security patches to Oracle HTTP Server 9-3 Supporting PHP 9-4 Creating Application Name Space that Works Across Firewalls and Clusters 9-4 Protecting Web Site From Hackers 9-5 A Oracle HTTP Server Configuration Files httpd.conf A-2 httpd.conf File Structure A-2 Global Environment A-2 Main Server Configuration A-3 Virtual Hosts A-3 mime.types A-4 dms.conf A-4 oracle_apache.conf A-5 aqxml.conf A-5 ojsp.conf A-5 plsql.conf A-5 xml.conf A-6 ssl.conf A-6 opmn.xml A-7 B Third Party Licenses Apache HTTP Server B-2 The Apache Software License B-2 Apache SOAP B-3 Apache SOAP License B-3 DBI Module B-5 Perl Artistic License B-5 Preamble B-5 Definitions B-5 Perl B-9 Perl Kit Readme B-9 x mod_perl 1.26 License B-10 Perl Artistic License B-11 Preamble B-11 Definitions B-12 mod_dav B-15 FastCGI B-17 FastCGI Developer’s Kit License B-17 Module mod_fastcgi License B-18 Jaxen B-20 The Jaxen Software License B-20 Expat B-22 Expat License B-22 SAXPath B-23 The SAXPath License B-23 Glossary Index [...]... ias-component =HTTP_ Server Windows: ORACLE_ HOME\opmn\bin> opmnctl [verbose] startproc ias-component =HTTP_ Server 1-6 Oracle HTTP Server Administrator’s Guide Starting, Stopping, and Restarting Oracle HTTP Server Stopping Oracle HTTP Server To stop Oracle HTTP Server, use the stopproc command: I I UNIX: ORACLE_ HOME/opmn/bin> opmnctl [verbose] stopproc ias-component =HTTP_ Server Windows: ORACLE_ HOME\opmn\bin>... opmnctl command options Oracle HTTP Server Overview 1-7 Starting, Stopping, and Restarting Oracle HTTP Server 1-8 Oracle HTTP Server Administrator’s Guide 2 Oracle HTTP Server Concepts This chapter introduces you to the Oracle HTTP Server directory structure, and configuration files, configuration file syntax, modules, and directives Topics discussed are: I Understanding Oracle HTTP Server Directory Structure... indent directives for clarity 2-2 Oracle HTTP Server Administrator’s Guide Classes of Directives Understanding Modules Oracle HTTP Server is a modular server Modules extend the basic functionality of the Web server, and support integration between Oracle HTTP Server and other Oracle Database components Oracle HTTP Server includes Apache modules as well as Oracle HTTP Server modules You can add modules... version of this guide and click the hyperlinks Oracle HTTP Server Overview 1-1 Oracle HTTP Server Features Oracle HTTP Server Features Oracle HTTP Server is the Web server component of Oracle Database It is based on the Apache HTTP Server, version 1.3.28 It is a robust, reliable Web server, preconfigured to do the following: I provide a high availability infrastructure integration with Oracle Process... I Oracle Application Server 10g Security Guide Chapter 8, "Managing Security" on page 8-1 execute Perl scripts in the same process as the Oracle HTTP Server, or as CGI script access database stored procedures with a PL/SQL engine See Also: Oracle Application Server 10g mod_plsql User’s Guide I enable scripting of HTML pages with PL/SQL code 1-2 Oracle HTTP Server Administrator’s Guide Oracle HTTP Server. .. are supported by Oracle Table 1–1 Oracle HTTP Server Modules Module Oracle Support Notes mod_access Yes mod_actions Yes mod_alias Yes mod_asis No mod_auth Yes mod_auth_anon Yes Oracle HTTP Server Overview 1-3 Oracle HTTP Server Components Table 1–1 Oracle HTTP Server Modules (Cont.) Module Oracle Support Notes mod_auth_db No mod_auth_dbm No mod_auth_digest No Disabled Not shipped by Oracle Disabled... of supported Oracle Apache modules Use of the included Perl interpreter within the supported Apache configuration Oracle HTTP Server Overview 1-5 Oracle HTTP Server Management Oracle HTTP Server Management You can manage Oracle HTTP Server using opmnctl It is the command-line utility for Oracle Process Manager and Notification Server (OPMN) for process management It is located in I UNIX: ORACLE_ HOME/opmn/bin... ORACLE_ HOME/opmn/bin I Windows: ORACLE_ HOME\opmn\bin See Also: Oracle Process Manager and Notification Server Administrator’s Guide for more information on opmnctl Starting, Stopping, and Restarting Oracle HTTP Server Oracle HTTP Server is managed by Oracle Process Manager and Notification Server (OPMN) You must always use the opmnctl utility to start, stop and restart Oracle HTTP Server Otherwise, the configuration... communicate with the Oracle HTTP Server processes, and problems may occur Note: Do not use the apachectl utility to manage the Oracle HTTP Server To determine the state of Oracle HTTP Server, use the following command: opmnctl status The processes are listed with their current state such as “Up” or “Down” Starting Oracle HTTP Server To start Oracle HTTP Server, use the startproc command: I I UNIX: ORACLE_ HOME/opmn/bin>... installing Oracle products in non-OFA compliant directories xxi xxii 1 Oracle HTTP Server Overview This chapter describes the Oracle HTTP Server, highlighting the differences between the Oracle distribution and the open source Apache product on which it is based It also explains how to start, stop and restart the server Topics discussed are: I Oracle HTTP Server Features I Oracle HTTP Server Components I Oracle . xvii 1 Oracle HTTP Server Overview Oracle HTTP Server Features 1-2 Oracle HTTP Server Components 1-3 Oracle HTTP Server Modules 1-3 Oracle HTTP Server. 1-5 Oracle HTTP Server Management 1-6 Starting, Stopping, and Restarting Oracle HTTP Server 1-6 Starting Oracle HTTP Server 1-6 Stopping Oracle HTTP Server