Netscape NETSCAPE ENTREPRISE SERVER 6.1 - 08-2002... Service manual

Administrator’s Guide
Netscape Enterprise Server
Version 6.1
August 2002

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by
Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed
by the license agreement for the Software and applicable copyright law.
Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is
prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without
notice.
THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE
LIABLE FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY
ERROR IN THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS,
PROFITS, USE, OR DATA.
The Software and documentation are copyright © 2001 Sun Microsystems, Inc. Portions copyright 1999, 2002 Netscape
Communications Corporation. All rights reserved.
This product includes software developed by Apache Software Foundation (http://www.apache.org/). Copyright (c) 1999 The
Apache Software Foundation. All rights reserved.
This product includes software developed by the University of California, Berkeley and its contributors. Copyright (c) 1990, 1993,
1994 The Regents of the University of California. All rights reserved.
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and
other countries. Other Netscape logos, product names and service names are also trademarks of Netscape and may be registered in
some countries. Sun, Sun Microsystems, and the Sun logo, iPlanet, and the iPlanet logo are trademarks or registered trademarks of
Sun Microsystems, Inc. in the United States and other countries. Other product and brand names are trademarks of their respective
owners.
The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in full
compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation
to the U.S. government is with restricted rights as described in the license agreement for that Software.

3
Contents
AboutThisGuide ..............................................................17
What’sInThisGuide? .................................................................. 17
HowThisGuideIsOrganized ........................................................... 18
PartI:ServerBasics .................................................................. 18
PartII:UsingtheAdministrationServer ................................................ 18
PartIII:Configuring,Monitoring,andPerformanceTuning ............................... 19
PartIV:ManagingVirtualServersandServices.......................................... 19
PartV:Appendices .................................................................. 20
ConventionsUsedInThisGuide ......................................................... 20
UsingtheEnterpriseServerDocumentation ............................................... 21
Part 1 ServerBasics ........................................................ 23
Chapter 1 IntroductiontoEnterpriseServer.......................................25
EnterpriseServer....................................................................... 25
EnterpriseServerFeatures ............................................................ 26
AdministeringandManagingEnterpriseServers ........................................ 27
EnterpriseServerArchitecture ........................................................... 27
ContentEngines..................................................................... 28
ServerExtensions.................................................................... 28
RuntimeEnvironments............................................................... 29
ApplicationServices ................................................................. 29
EnterpriseServerConfiguration.......................................................... 29
EnterpriseServerComponentOptions ................................................. 30
EnterpriseServerConfigurationFiles .................................................. 30
DynamicReconfiguration ............................................................ 31
Single-ServerConfiguration .......................................................... 32
AllPlatforms..................................................................... 32

4 Netscape Enterprise Server Administrator’s Guide • August 2002
UNIXandLinuxPlatforms......................................................... 35
VirtualServerConfiguration .......................................................... 35
Multiple-ServerConfiguration ........................................................ 36
AdministrationServer .................................................................. 36
ServerManager ........................................................................ 37
UsingtheResourcePicker ............................................................ 38
WildcardsUsedintheResourcePicker ................................................. 38
ClassManager ......................................................................... 39
VirtualServerManager ................................................................. 39
Chapter 2 AdministeringEnterpriseServers ..................................... 41
AccessingtheAdministrationServer...................................................... 41
UNIX/LinuxPlatforms............................................................... 41
WindowsNT/Windows2000Platforms ................................................ 42
RunningMultipleServers ............................................................... 43
VirtualServers ...................................................................... 43
Installing Multiple Instances of the Server . . ............................................ 43
RemovingaServer ..................................................................... 44
MigratingaServer ..................................................................... 45
Part 2 UsingtheAdministrationServer.........................................47
Chapter 3 SettingAdministrationPreferences .................................... 49
ShuttingDowntheEnterpriseServerAdministrationServer ................................. 49
EditingListenSocketSettings............................................................ 50
ChangingtheUserAccount(UNIX/Linux) ................................................ 50
ChangingtheSuperuserSettings ......................................................... 51
AllowingMultipleAdministrators ....................................................... 52
SpecifyingLogFileOptions ............................................................. 54
ViewingLogFiles ................................................................... 54
TheAccessLogFile ............................................................... 54
TheErrorLogFile ................................................................ 55
ArchivingLogFiles.................................................................. 55
UsingCron-basedLogRotation(UNIX/Linux) ....................................... 55
ConfiguringDirectoryServices .......................................................... 56
RestrictingServerAccess................................................................ 56
ConfiguringJRE/JDKPaths ............................................................. 57
Chapter 4 ManagingUsersandGroups.......................................... 59
UsingDirectoryServicestoManageUsersandGroups...................................... 59
UnderstandingDistinguishedNames(DNs) ............................................ 60

5
UsingLDIF ......................................................................... 61
CreatingUsers......................................................................... 61
GuidelinesforCreatingUserEntries ................................................... 61
HowtoCreateaNewUserEntry ...................................................... 62
DirectoryServerUserEntries ......................................................... 63
ManagingUsers ....................................................................... 64
FindingUserInformation............................................................. 64
BuildingCustomSearchQueries.................................................... 65
EditingUserInformation ............................................................. 67
ManagingaUser’sPassword.......................................................... 68
ManagingUserLicenses.............................................................. 68
RenamingUsers..................................................................... 69
RemovingUsers..................................................................... 70
CreatingGroups ....................................................................... 70
StaticGroups ....................................................................... 71
GuidelinesforCreatingStaticGroups ............................................... 71
ToCreateaStaticGroup ........................................................... 71
DynamicGroups .................................................................... 72
HowEnterpriseServerImplementsDynamicGroups.................................. 72
GroupsCanBeStaticandDynamic ................................................. 73
DynamicGroupImpactonServerPerformance ....................................... 73
GuidelinesforCreatingDynamicGroups ............................................ 73
ToCreateaDynamicGroup........................................................ 75
ManagingGroups...................................................................... 75
FindingGroupEntries ............................................................... 76
The“Findallgroupswhose”Field .................................................. 76
EditingGroupAttributes ............................................................. 77
AddingGroupMembers ............................................................. 77
AddingGroupstotheGroupMembersList ............................................. 78
RemovingEntriesfromtheGroupMembersList ........................................ 79
ManagingOwners................................................................... 79
ManagingSeeAlsos ................................................................. 79
RemovingGroups ................................................................... 80
RenamingGroups ................................................................... 81
CreatingOrganizationalUnits ........................................................... 81
ManagingOrganizationalUnits .......................................................... 82
FindingOrganizationalUnits ......................................................... 82
The“Findallunitswhose”Field .................................................... 83
EditingOrganizationalUnitAttributes ................................................. 83
RenamingOrganizationalUnits ....................................................... 84
DeletingOrganizationalUnits......................................................... 84
ManagingaPreferredLanguageList...................................................... 85

6 Netscape Enterprise Server Administrator’s Guide • August 2002
Chapter 5 SecuringYourEnterpriseServer ...................................... 87
RequiringAuthentication ............................................................... 88
UsingCertificatesforAuthentication................................................... 88
ServerAuthentication ............................................................. 88
ClientAuthentication.............................................................. 88
VirtualServerCertificates.......................................................... 89
CreatingaTrustDatabase ............................................................... 89
CreatingaTrustDatabase.......................................................... 89
Usingpassword.conf................................................................. 90
StartanSSL-enabledServerAutomatically ........................................... 91
Requesting and Installing a VeriSign Certificate ............................................ 91
RequestingaVeriSignCertificate ...................................................... 91
Installing a VeriSign Certificate . . . . . ................................................... 92
Requesting and Installing Other Server Certificates . ........................................ 92
RequiredCAInformation............................................................. 93
RequestingOtherServerCertificates ................................................... 94
Installing Other Server Certificates . . ................................................... 96
Installing a Certificate . . . .......................................................... 97
MigratingCertificatesWhenYouUpgrade ................................................ 98
MigratingaCertificate............................................................. 98
UsingtheBuilt-inRootCertificateModule .............................................. 99
ManagingCertificates ................................................................. 100
Installing and Managing CRLs and CKLs . . . . . . ........................................... 101
Installing a Local CRL or CKL . . . . . . .................................................. 101
ManagingLocalCRLsandCKLs ..................................................... 102
ConfiguringRemoteCRLs.............................................................. 103
ConfiguringAutomatic/RemoteCRLDownloads ...................................... 103
ReducingtheSSL3/TLSSessionCacheTimeout ..................................... 106
SettingSecurityPreferences ............................................................ 107
SSLandTLSProtocols .............................................................. 108
UsingSSLtoCommunicatewithLDAP ............................................... 108
EnablingSecurityforConnectionGroups .............................................. 109
TurningSecurityOn ............................................................. 109
SelectingaServerCertificateforaConnectionGroup ................................. 110
SelectingCiphers ................................................................ 111
ConfiguringSecurityGlobally........................................................ 113
SSLSessionTimeout .............................................................. 114
SSLCacheEntries................................................................. 114
SSL3SessionTimeout ............................................................. 114
UsingExternalEncryptionModules ..................................................... 114
Installing the PKCS#11 Module . . . . . .................................................. 115
UsingmodutiltoInstallaPKCS#11Module ......................................... 115
Usingpk12util................................................................... 116

7
SelectingtheCertificateNameforaConnectionGroup ............................... 118
FIPS-140Standard .................................................................. 119
SettingClientSecurityRequirements .................................................... 120
RequiringClientAuthentication ...................................................... 121
ToRequireClientAuthentication .................................................. 122
MappingClientCertificatestoLDAP.................................................. 122
Usingthecertmap.confFile .......................................................... 124
CreatingCustomProperties ....................................................... 127
SampleMappings................................................................ 127
SettingStrongerCiphers ............................................................... 129
ConsideringAdditionalSecurityIssues .................................................. 130
LimitPhysicalAccess ............................................................... 131
LimitAdministrationAccess ......................................................... 131
ChoosingPasswords................................................................ 131
CreatingHard-to-CrackPasswords................................................. 132
ChangingPasswordsorPINs ........................................................ 132
ChangingPasswords ............................................................. 132
LimitingOtherApplicationsontheServer ............................................. 133
UNIX/Linux .................................................................... 133
Windows NT/Windows 2000 . . ................................................... 134
PreventingClientsfromCachingSSLFiles............................................. 134
LimitingPorts...................................................................... 134
KnowingYourServer’sLimits ....................................................... 134
MakingAdditionalChangestoProtectServers ......................................... 135
SpecifyingchrootforaVirtualServerClassCGIs(UNIX/LinuxOnly) .................. 136
SpecifyingchrootforaVirtualServerCGIs(UNIX/Linuxonly) ........................ 136
Chapter 6 ManagingServerClusters............................................139
AboutClusters........................................................................ 139
GuidelinesforUsingServerClusters..................................................... 140
SettingUpaCluster ................................................................... 141
AddingaServertoaCluster............................................................ 142
ModifyingServerInformation .......................................................... 143
RemovingServersfromaCluster........................................................ 144
Controlling Server Clusters . . . .......................................................... 144
AddingVariables ..................................................................... 145
Part 3 Configuring,Monitoring,andPerformanceTuning ........................ 147
Chapter 7 ConfiguringServerPreferences.......................................149
StartingandStoppingtheServer ........................................................ 149

8 Netscape Enterprise Server Administrator’s Guide • August 2002
Accessingstdout()andstderr()Messages(UNIX/Linux)................................. 150
SettingtheTerminationTimeout ..................................................... 151
RestartingtheServer(UNIX/Linux) .................................................. 151
RestartingWithInittab(UNIX/Linux) .............................................. 152
RestartingWiththeSystemRCScripts(UNIX/Linux) ................................ 152
RestartingtheServerManually(UNIX/Linux)....................................... 152
StoppingtheServerManually(UNIX/Linux)........................................ 152
RestartingtheServer(WindowsNT/Windows2000).................................... 153
UsingtheAutomaticRestartUtility(WindowsNT/Windows2000) .................... 153
TuningYourServerforPerformance..................................................... 155
Editingthemagnus.confFile............................................................ 155
AddingandEditingListenSockets ...................................................... 156
ChoosingMIMETypes ................................................................ 156
RestrictingAccess ..................................................................... 157
RestoringConfigurationSettings ........................................................ 157
ConfiguringtheFileCache ............................................................. 158
AddingandUsingThreadPools ........................................................ 158
The Native Thread Pool and Generic Thread Pools (Windows NT/Windows 2000) .......... 158
ThreadPools(UNIX/Linux) ......................................................... 159
EditingThreadPools................................................................ 159
UsingThreadPools ................................................................. 159
Chapter 8 Controlling Access to Your Server . . . ................................. 161
WhatIsAccessControl? ............................................................... 161
SettingAccessControlforUser-Group ................................................ 162
DefaultAuthentication ........................................................... 163
BasicAuthentication ............................................................. 163
SSLAuthentication............................................................... 164
DigestAuthentication ............................................................ 165
UsingOtherLDAPAttributesforAuthentication .................................... 168
OtherAuthentication............................................................. 169
SettingAccessControlforHost-IP .................................................... 169
UsingAccessControlFiles........................................................... 170
ConfiguringtheACLUserCache..................................................... 170
HowAccessControlWorks ............................................................ 171
SettingAccessControl ................................................................. 173
SettingAccessControlGlobally ...................................................... 174
SettingAccessControlforaServerInstance............................................ 177
SelectingAccessControlOptions........................................................ 182
SettingtheAction .................................................................. 182
SpecifyingUsersandGroups ........................................................ 182
SpecifyingtheFromHost............................................................ 184
RestrictingAccesstoPrograms ....................................................... 185

9
SettingAccessRights ............................................................... 186
WritingCustomizedExpressions ..................................................... 187
TurningOffAccessControl .......................................................... 187
RespondingWhenAccessisDenied .................................................. 188
LimitingAccesstoAreasofYourServer.................................................. 188
RestrictingAccesstotheEntireServer................................................. 189
RestrictingAccesstoaDirectory(Path)................................................ 190
RestrictingAccesstoaURI(Path)..................................................... 191
RestrictingAccesstoaFileType...................................................... 191
RestrictingAccessBasedonTimeofDay .............................................. 192
RestrictingAccessBasedonSecurity .................................................. 193
WorkingwithDynamicAccessControlFiles.............................................. 194
Using.htaccessFiles ................................................................ 194
Enabling.htaccessfromtheUserInterface........................................... 195
Enabling.htaccessfrommagnus.conf ............................................... 196
ConvertingExisting.nsconfigFilesto.htaccessFiles.................................. 197
Usinghtaccess-register ........................................................... 198
Exampleofan.htaccessFile ....................................................... 199
Supported.htaccessDirectives ....................................................... 199
allow ............................................................................. 199
deny .............................................................................. 200
AuthGroupFile..................................................................... 200
AuthUserFile ...................................................................... 200
AuthName ........................................................................ 201
AuthType ......................................................................... 201
<Limit> ........................................................................... 201
<LimitExcept> ..................................................................... 202
order ............................................................................. 202
require ............................................................................ 203
.htaccessSecurityConsiderations ..................................................... 203
Controlling Access for Virtual Servers ................................................... 203
AccessingDatabasesfromVirtualServers ............................................. 204
SpecifyingLDAPDatabasesintheUserInterface .................................... 205
EditingAccessControlListsforVirtualServers ........................................ 205
Chapter 9 UsingLogFiles ....................................................207
AboutLogFiles ....................................................................... 207
ViewinganAccessLogFile............................................................. 208
ViewingtheErrorLogFile ............................................................. 209
ArchivingLogFiles ................................................................... 210
Internal-daemonLogRotation ....................................................... 211
Cron-basedLogRotation ............................................................ 211
SettingLogPreferences ................................................................ 212

10 Netscape Enterprise Server Administrator’s Guide • August 2002
CookieLogging .................................................................... 213
RunningtheLogAnalyzer ............................................................. 214
ViewingEvents(WindowsNT/Windows2000) ........................................... 216
Chapter 10 MonitoringServers................................................ 217
MonitoringtheServerUsingStatistics ................................................... 218
EnablingStatistics .................................................................. 218
UsingStatistics..................................................................... 219
UsingQualityofService ............................................................... 220
QualityofServiceExample .......................................................... 220
SettingUpQualityofService......................................................... 221
RequiredChangestoobj.conf ........................................................ 223
KnownLimitationstoQualityofService............................................... 223
SNMPBasics ......................................................................... 225
TheEnterpriseServerMIB ............................................................. 226
SettingUpSNMP ..................................................................... 231
UsingaProxySNMPAgent(UNIX/Linux)............................................... 232
Installing the Proxy SNMP Agent . . . .................................................. 233
StartingtheProxySNMPAgent ...................................................... 234
RestartingtheNativeSNMPDaemon ................................................. 234
Installing the SNMP Master Agent . . . . .................................................. 234
EnablingandStartingtheSNMPMasterAgent ........................................... 235
StartingtheMasterAgentonAnotherPort............................................. 236
ManuallyConfiguringtheSNMPMasterAgent ........................................ 236
EditingtheMasterAgentCONFIGFile................................................ 237
DefiningsysContactandsysLocationVariables......................................... 237
ConfiguringtheSNMPSubagent ..................................................... 238
StartingtheSNMPMasterAgent ..................................................... 238
ManuallyStartingtheSNMPMasterAgent ......................................... 238
StartingtheSNMPMasterAgentUsingtheAdministrationServer ..................... 239
ConfiguringtheSNMPMasterAgent .................................................... 239
ConfiguringtheCommunityString ................................................... 240
ConfiguringTrapDestinations ....................................................... 240
EnablingtheSubagent ................................................................. 240
UnderstandingSNMPMessages ........................................................ 241
Part 4 ManagingVirtualServersandServices ..................................243
Chapter 11 UsingVirtualServers.............................................. 245
VirtualServersOverview .............................................................. 245
MultipleServerInstances............................................................ 246

11
VirtualServerClasses............................................................... 247
Theobj.confFile ................................................................. 247
VirtualServersinaClass ......................................................... 248
TheDefaultClass ................................................................ 248
ListenSockets...................................................................... 248
ConnectionGroups ................................................................. 249
VirtualServers ..................................................................... 249
TypesofVirtualServers .......................................................... 250
IP-Address-BasedVirtualServers .................................................. 250
URL-Host-BasedVirtualServers ................................................... 251
DefaultVirtualServer ............................................................ 251
VirtualServerSelectionforRequestProcessing......................................... 252
DocumentRoot .................................................................... 253
LogFiles .......................................................................... 253
MigratingVirtualServersfromaPreviousRelease...................................... 254
UsingEnterpriseServerFeatureswithVirtualServers ..................................... 254
UsingSSLwithVirtualServers ....................................................... 254
UsingAccessControlwithVirtualServers ............................................. 255
UsingCGIswithVirtualServers...................................................... 255
UsingConfigurationStyleswithVirtualServers ........................................ 255
UsingtheVirtualServerUserInterface................................................... 256
TheClassManager ................................................................. 256
TheVirtualServerManager.......................................................... 256
UsingVariables .................................................................... 257
DynamicReconfiguration ........................................................... 257
SettingUpVirtualServers.............................................................. 258
CreatingaListenSocket ............................................................. 258
CreatingaConnectionGroup ........................................................ 259
CreatingaVirtualServerClass ....................................................... 260
EditingorDeletingaVirtualServerClass.............................................. 260
SpecifyingServicesAssociatedwithaVirtualServerClass ............................... 261
CreatingaVirtualServer ............................................................ 261
SpecifyingSettingsAssociatedwithaVirtualServer .................................... 261
AllowingUserstoMonitorIndividualVirtualServers ..................................... 261
AccessControl ..................................................................... 264
LogFiles .......................................................................... 264
DeployingVirtualServers .............................................................. 265
Example1:DefaultConfiguration .................................................... 265
Example2:SecureServer ............................................................ 267
Example3:IntranetHosting ......................................................... 268
Example4:MassHosting............................................................ 271

12 Netscape Enterprise Server Administrator’s Guide • August 2002
Chapter 12 CreatingandConfiguringVirtualServers ............................. 273
CreatingaVirtualServer ............................................................... 273
EditingVirtualServerSettings .......................................................... 274
EditingUsingtheVirtualServerManager ................................................ 274
GeneratingReportsforaVirtualServer................................................ 275
EditingUsingtheClassManager........................................................ 277
EditingVirtualServerSettings ....................................................... 277
ConfiguringVirtualServerMIMESettings............................................. 278
ConfiguringVirtualServerACLSettings .............................................. 278
ConfiguringVirtualServerSecurity................................................... 278
ConfiguringVirtualServerQualityofServiceSettings................................... 279
ConfiguringVirtualServerLogSettings ............................................... 280
ConfiguringVirtualServerJavaWebApplicationSettings ............................... 281
DeletingaVirtualServer ............................................................... 281
Chapter 13 ExtendingYourServerWithPrograms ............................... 283
OverviewofServer-SidePrograms ...................................................... 283
TypesofServer-SideApplicationsThatRunontheServer ............................... 284
HowServer-SideApplicationsAreInstalledontheServer ............................... 284
JavaServletsandJavaServerPages(JSP) ................................................. 284
OverviewofServletsandJavaServerPages ............................................ 285
WhattheServerNeedstoRunServletsandJSPs........................................ 286
WorkingwithWebApplications ..................................................... 287
Usingtheweb-apps.xmlFile ...................................................... 287
DeployingWebApplicationsUsingwdeploy ........................................ 287
DeployingandEditingWebApplicationswiththeUserInterface ...................... 290
DeployingServletsandJSPsNotinWebApplications................................... 292
ConfiguringJVMAttributes ......................................................... 292
DeletingVersionFiles............................................................... 292
Installing CGI Programs . . ............................................................. 293
OverviewofCGI ................................................................... 294
SpecifyingaCGIDirectory .......................................................... 296
ConfiguringUniqueCGIAttributesforEachSoftwareVirtualServer ................... 296
SpecifyingCGIasaFileType ........................................................ 297
DownloadingExecutableFiles ....................................................... 297
Installing Windows NT/Windows 2000 CGI Programs . . . . . ................................ 298
OverviewofWindowsNT/Windows2000CGIPrograms ............................... 298
Specifying a Windows NT/Windows 2000 CGI Directory ................................ 299
SpecifyingWindowsNT/Windows2000CGIasaFileType.............................. 301
Installing Shell CGI Programs for Windows NT/Windows 2000 . ............................ 301
OverviewofShellCGIProgramsforWindowsNT/Windows2000 ....................... 302
Specifying a Shell CGI Directory (Windows NT/Windows 2000) . . . . . ..................... 302
SpecifyingShellCGIasaFileType(WindowsNT/Windows2000) ....................... 303

13
UsingtheQueryHandler .............................................................. 304
Chapter 14 ContentManagement...............................................307
SettingthePrimaryDocumentDirectory ................................................. 308
SettingAdditionalDocumentDirectories................................................. 309
CustomizingUserPublicInformationDirectories(UNIX/Linux) ............................ 310
RestrictingContentPublication....................................................... 311
LoadingtheEntirePasswordFileonStartup ........................................... 311
UsingConfigurationStyles .......................................................... 312
EnablingRemoteFileManipulation ..................................................... 312
ConfiguringDocumentPreferences...................................................... 312
SettingtheDocumentPreferences .................................................... 313
EnteringanIndexFilename .......................................................... 313
SelectingDirectoryIndexing ......................................................... 313
SpecifyingaServerHomePage....................................................... 314
SpecifyingaDefaultMIMEType ..................................................... 314
ParsingtheAcceptLanguageHeader ................................................. 315
ConfiguringURLForwarding .......................................................... 315
CustomizingErrorResponses........................................................... 316
ChangingtheCharacterSet............................................................. 317
SettingtheDocumentFooter............................................................ 318
Using.htaccess ....................................................................... 319
RestrictingSymbolicLinks(UNIX/Linux)................................................ 319
SettingupServer-ParsedHTML......................................................... 320
SettingCacheControlDirectives ........................................................ 321
UsingStrongerCiphers ................................................................ 321
Chapter 15 ApplyingConfigurationStyles .......................................323
CreatingaConfigurationStyle .......................................................... 323
AssigningaConfigurationStyle......................................................... 325
ListingConfigurationStyleAssignments ................................................. 326
EditingaConfigurationStyle ........................................................... 326
RemovingaConfigurationStyle ........................................................ 327
Part 5 Appendices......................................................... 329
Appendix A CommandLineUtilities ............................................331
FormattingLDIFEntries ............................................................... 331
ModifyingDatabaseEntriesUsingldapmodify ......................................... 331
HttpServerAdmin(VirtualServerAdministration) ........................................ 332
HttpServerAdminSyntax............................................................ 332

14 Netscape Enterprise Server Administrator’s Guide • August 2002
controlCommand .................................................................. 333
Options......................................................................... 333
Syntax.......................................................................... 334
Parameters...................................................................... 334
Examples ....................................................................... 334
createCommand ................................................................... 334
Options......................................................................... 335
CreateVirtualServerClass........................................................ 335
CreateConnectionGroup ......................................................... 336
CreateListenSocket.............................................................. 336
CreateVirtualServer ............................................................. 337
deleteCommand ................................................................... 339
Options......................................................................... 339
DeleteClass ..................................................................... 339
DeleteConnectionGroup ......................................................... 340
DeleteListenSocket .............................................................. 340
DeleteVirtualServer ............................................................. 341
listCommand...................................................................... 341
Syntax.......................................................................... 341
Options......................................................................... 342
Example ........................................................................ 342
Appendix B HyperTextTransferProtocol ....................................... 343
AboutHyperTextTransferProtocol(HTTP) .............................................. 343
Requests ............................................................................. 344
RequestMethod.................................................................... 344
RequestHeader .................................................................... 345
RequestData....................................................................... 345
Responses............................................................................ 345
StatusCode........................................................................ 346
ResponseHeader ................................................................... 347
ResponseData ..................................................................... 347
Appendix C ACLFileSyntax.................................................. 349
ACLFileSyntax....................................................................... 349
AuthenticationMethods............................................................. 350
AuthorizationStatements............................................................ 351
HierarchyofAuthorizationStatements ............................................. 352
AttributeExpressions ............................................................ 353
OperatorsForExpressions ........................................................ 354
TheDefaultACLFile ............................................................... 355
GeneralSyntaxItems............................................................. 355
ReferencingACLsinobj.conf ........................................................... 355

15
Appendix D InternationalContentSupport.......................................357
EnteringUTF-8Data ................................................................ 357
FileorDirectoryNames .......................................................... 357
LDAPUsersandGroups.......................................................... 357
UsingtheAccept-languageHeader ................................................... 357
ServletInternationalization............................................................. 358
auto .............................................................................. 359
none .............................................................................. 360
anyvalidencoding ................................................................. 360
PostingtoJSPs........................................................................ 360
Glossary .....................................................................363
Index........................................................................375

16 Netscape Enterprise Server Administrator’s Guide • August 2002

17
About This Guide
This guide describes how to configure and administer Netscape® Enterprise
Server, Version 6.1. It is intended for information technology administrators in the
corporate enterprise who want to extend client-server applications to a broader
audience through the World Wide Web.
This preface includes the following sections:
• What’sInThisGuide?
• How This Guide Is Organized
• Conventions Used In This Guide
• Using the Enterprise Server Documentation
What’s In This Guide?
This guide explains how to configure and administer the Enterprise Server. After
configuring your server, use this guide to help maintain your server.
After you install the server, this guide is available in HTML format at
manual/https/ag in your server root directory. By default, the server root
directory is C:\Netscape\Server6\ or /usr/netscape/server6.

How This Guide Is Organized
18 Netscape Enterprise Server Administrator’s Guide • August 2002
How This Guide Is Organized
This guide is divided into five parts, plus a glossary, and a comprehensive index. If
you are new to Netscape Enterprise Server 6.1, begin with Part I, “Server Basics”
for an overview of the product. If you are already familiar with this version of
Enterprise Server, skim the material in Part I, “Server Basics” before going on to
Part II, “Using the Administration Server.”
Once you are familiar with the fundamentals of using the Administration Server,
you can refer to Part III, “Configuring, Monitoring, and Performance Tuning,”
which includes examples of how to configure and monitor your Enterprise Servers.
Part IV, “Managing Virtual Servers and Services” provides information for using
programs and configuration styles.
Finally, Appendices address specific reference topics that describe the various
topics, including: HyperText Transfer Protocol (HTTP), server configuration files,
ACL files, internationalization issues, server extensions, and the Netscape
Enterprise Server user interface reference, which you may want to review. Note
that the user interface appendix is available in the online version only.
Part I: Server Basics
This part provides an overview of the Enterprise Server. The following chapters are
included:
• Chapter 1, “Introduction to Enterprise Server” provides an overview of
Enterprise Server.
• Chapter 2, “Administering Enterprise Servers” describes how to manage your
Enterprise Server with the Administration Server.
Part II: Using the Administration Server
This part provides conceptual and procedural details about using the
Administration Server to administer your Enterprise Servers. The following
chapters are included:
• Chapter 3, “Setting Administration Preferences” describes how to use the
Administration Server Preferences and Global Settings forms to configure your
Enterprise Servers.

How This Guide Is Organized
About This Guide 19
• Chapter 4, “Managing Users and Groups” describes how to how to use the
Administration Server Users and Groups forms to configure your Enterprise
Servers.
• Chapter 5, “Securing Your Enterprise Server” describes how to configure your
Enterprise Server security. Note that before reading this chapter you should be
familiar with the basic concepts of public-key cryptography and the SSL
protocol. These concepts include encryption and decryption; keys; digital
certificates and signatures; CRLs and CKLs; and SSL encryption, ciphers, and
the major steps of the SSL handshake.
• Chapter 6, “Managing Server Clusters” describes the concept of clustering
servers and explains how you can use them to share configurations among
servers.
Part III: Configuring, Monitoring, and
Performance Tuning
This part includes examples of how to use the Server Manager to configure and
monitor your Enterprise Servers. The following chapters are included:
• Chapter 7, “Configuring Server Preferences” describes how to configure server
preferences for your Enterprise Server.
• Chapter 8, “Controlling Access to Your Server” describes how to specify who
can access parts of your server.
• Chapter 9, “Using Log Files” describes how to monitor your Enterprise Server
using the HyperText Transfer Protocol (HTTP), by recording and viewing log
files, or by using the performance monitoring tools provided with your
operating system.
• Chapter 10, “Monitoring Servers” describes how to monitor your Enterprise
Server using SNMP (Simple Network Management Protocol).
• Chapter 11, “Tuning Your Server for Performance” refers you to the Netscape
Enterprise Server Performance Tuning, Sizing, and Scaling Guide.
Part IV: Managing Virtual Servers and Services
This part provides information for using the Server Manager to programs and
configuration styles. The following chapters are included:

Conventions Used In This Guide
20 Netscape Enterprise Server Administrator’s Guide • August 2002
• Chapter 11, “Using Virtual Servers” describes how to set up and administer
virtual servers using your Enterprise Server.
• Chapter 12, “Creating and Configuring Virtual Servers” describes how you can
create and configure individual virtual servers.
• Chapter 13, “Extending Your Server With Programs” describes how to install
Java™ applets, CGI programs, and other plug-ins onto your server.
• Chapter 14, “Content Management” describes how you can configure and
manage your server’s content.
• Chapter 15, “Applying Configuration Styles” describes how to use
configuration styles with Enterprise Server.
Part V: Appendices
This section includes various appendices with reference material that you may
wish to review. This section includes the following appendices:
• Appendix A, “Command Line Utilities” provides instructions for using
command line utilities in place of the user interface screens.
• Appendix B, “HyperText Transfer Protocol” provides a short introduction to a
few HTTP basic concepts.
• Appendix C, “ACL File Syntax” describes the access-control list (ACL) files
and their syntax.
In addition, a glossary is included to define frequently used terms that may be
unfamiliar to Enterprise Server administrators.
Conventions Used In This Guide
The conventions used in this guide are as follows:
Italic
This typeface is used for book titles, emphasis, and any text that is a placeholder for
text you need to replace for your system. For example, in a URL that contains a
reference to your server’s port number, the URL might contain portnumber in
italics.Replace the words in italics with the actual value for your server.
Monospaced font