Sun Microsystems Netscape Enterprise Server Service manual

comp.sys
TCP/IP
directory server
World Wide Web
ww
Personal
IStore
Proxy
merchant system
HTML
http://www
Internet
server
security
news
URL
HTML
mail
Inter
navigator
community system
electronic commerce
JavaScript Proxy
Mozilla
certificate
P
ublishing
Publishing
Chat
encryption
secure sockets layer
SSL
Administrator’s Guide
Netscape Enterprise Server
Version 4.0
806-2823-10
September 1999

Copyright © 1999 Sun Microsystems, Inc. Some preexisting portions Copyright © 1999 Netscape Communications Corp. All
rights reserved.
Sun, Sun Microsystems, the Sun Logo are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States
and other countries. Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation
in the U.S. and other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape
Communications Corporation, which may be registered in other countries.
Federal Acquisitions: Commercial Software — Government Users Subject to Standard License Terms and Conditions
The product described in this document is distributed under licenses restricting its use, copying, distribution, and
decompilation. No part of the product or this document may be reproduced in any form by any means without prior written
authorization of the Sun-Netscape Alliance and its licensors, if any.
THIS DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE
LEGALLY INVALID.
Netscape, Netscape Navigator, Netscape Certificate Server, Netscape DevEdge, Netscape FastTrack Server, Netscape ONE,
SuiteSpot, and the Netscape N and Ship’s Wheel logos are registered trademarks of Netscape Communications Corporation in
the United States and other countries. Other Netscape logos, product names, and service names are also trademarks of
Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are
trademarks of their respective owners.
The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in
full compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or
documentation to the U.S. Government is with restricted rights as described in the license agreement accompanying Netscape
software.
The Software includes encryption software from RSA Data Security, Inc. Copyright © 1994, 1995 RSA Data Security, Inc. All
rights reserved.
Documentation Team: Jocelyn Becker, Rober t Fish, Ann Hillesland, Sanborn Hodges, Amanda Lee, Laila Millar, and
Alan Morgenegg
Version 4.0
Printed in the United States of America. 00 99 98 5 4 3 2 1
Recycled and Recyclable Paper

Contents iii
Contents
About This Guide ...........................................................................................21
What’s In This Guide? ..........................................................................................21
How This Guide Is Organized ............................................................................21
Part I: Server Basics ........................................................................................22
Part II: Using Enterprise Administration Server .............................................22
Part III: Configuring and Monitoring .............................................................23
Part IV: Using Programs and Objects .............................................................24
Part V: Managing Content and Access ...........................................................24
Appendixes ......................................................................................................24
Conventions Used In This Guide ........................................................................25
Using the Enterprise Server Documentation ......................................................26
Further Reading ...................................................................................................28
Contacting Technical Support .............................................................................29
Part 1 Server Basics
Chapter 1 Introduction to Enterprise Server .....................................33
Netscape Enterprise Server .................................................................................33
Enterprise Server Features ..............................................................................34
Administering and Managing Enterprise Servers ...........................................35
Netscape Enterprise Server Architecture ............................................................36
Content Engines ..............................................................................................37
Server Extensions ............................................................................................37
Runtime Environments ....................................................................................38
Application Services ........................................................................................38
How Enterprise Server is Configured .................................................................39
Enterprise Server Component Options ..........................................................39
Enterprise Server Configuration Files .............................................................40
Single-Server Configuration ............................................................................41
All Platforms ...............................................................................................41

iv Netscape Enterprise Server Administrator’s Guide
Unix-Only Platforms .................................................................................. 44
Multiple-Server Configuration ........................................................................ 45
Enterprise Administration Server ........................................................................ 45
Server Manager .................................................................................................... 46
Accessing the Server Manager ....................................................................... 47
Using the Resource Picker ............................................................................. 48
Wildcards Used in the Resource Picker ........................................................ 49
Netscape Console ................................................................................................ 50
Sending Error Information to Netscape ............................................................. 52
Details on Data Collected by the Quality Feedback Agent ......................... 52
Using the Quality Feedback Agent ................................................................ 53
Editing master.ini ....................................................................................... 54
Editing magnus.conf .................................................................................. 54
Chapter 2 Administering Enterprise Servers ..................................... 57
Accessing Enterprise Administration Server ...................................................... 57
Unix Platforms ................................................................................................ 58
Windows NT Platforms .................................................................................. 58
Adding a Server: Running Multiple Servers ....................................................... 60
Hardware Virtual Servers ............................................................................... 60
Software Virtual Servers ................................................................................. 60
Multiple Server Instances ............................................................................... 61
Installing Multiple Instances of the Server ......................................................... 61
Removing a Server .............................................................................................. 62
Migrating a Server From a Previous Version ..................................................... 63
Part 2 Using Enterprise Administration Server
Chapter 3 Setting Administration Preferences ................................. 67
Shutting Down Enterprise Administration Server .............................................. 68
Changing Network Settings ................................................................................ 68
Changing the User Account and Password ................................................... 69
Changing the Port Number ............................................................................ 69
Changing the Superuser Settings ........................................................................ 70
Enabling Distributed Administration .................................................................. 71

Contents v
Configuring Secure Sockets Layer (SSL) ............................................................73
Activating SSL ..................................................................................................73
Setting Encryption Preferences ......................................................................73
Setting Stronger Ciphers ............................................................................74
Specifying Log File Options ................................................................................75
Viewing the Access Log File ..........................................................................76
Viewing the Error Log File .............................................................................77
Archiving Log Files .........................................................................................77
Using Cron Controls (Unix Only) .............................................................78
Configuring Directory Services ...........................................................................79
Restricting Server Access .....................................................................................79
Chapter 4 Managing Users and Groups ...............................................81
About Users and Groups ....................................................................................82
Creating Users .....................................................................................................83
Guidelines for Creating User Entries .............................................................83
How to Create a New User Entry ..................................................................84
Directory Server User Entries .........................................................................84
Managing Users ...................................................................................................86
Finding User Information ...............................................................................86
Building Custom Search Queries ..............................................................87
Search Attribute Options ...........................................................................88
Search Type Options .................................................................................89
Editing User Information ................................................................................90
Managing a User’s Password ..........................................................................91
Managing User Licenses .................................................................................92
Renaming Users ..............................................................................................92
Removing Users ..............................................................................................93
Creating Groups ..................................................................................................93
Static Groups ...................................................................................................94
Guidelines for Creating Static Groups ......................................................94
To Create a Static Group ...........................................................................95
Dynamic Groups .............................................................................................95
How Enterprise Server 4.0 Implements Dynamic Groups .......................96

vi Netscape Enterprise Server Administrator’s Guide
Groups Can Be Static and Dynamic ......................................................... 97
Dynamic Group Impact on Server Performance ...................................... 97
Guidelines for Creating Dynamic Groups ................................................ 97
To Create a Dynamic Group ..................................................................... 99
Managing Groups ................................................................................................ 99
Finding Group Entries .................................................................................. 100
The “Find all groups whose” Field ......................................................... 101
Editing Group Attributes .............................................................................. 101
Adding Group Members .............................................................................. 102
Adding Groups to the Group Members List ............................................... 103
Removing Entries from the Group Members List ....................................... 104
Managing Owners ........................................................................................ 104
Managing See Alsos ...................................................................................... 105
Removing Groups ......................................................................................... 105
Renaming Groups ......................................................................................... 106
Creating Organizational Units .......................................................................... 106
Managing Organizational Units ........................................................................ 107
Finding Organizational Units ....................................................................... 107
The “Find all units whose” Field ............................................................. 108
Editing Organizational Unit Attributes ........................................................ 109
Renaming Organizational Units ................................................................... 109
Deleting Organizational Units ...................................................................... 110
Managing a Preferred Language List ................................................................ 110
Chapter 5 Working with Server Security .......................................... 113
About Enterprise Server Security ...................................................................... 114
Encryption ..................................................................................................... 114
FIPS-140 Compliance ............................................................................... 115
Certificates ..................................................................................................... 115
Client and Server Authentication ............................................................ 116
How Enterprise Server Uses Certificates to Authenticate Users ............ 116
128-Bit Step-Up Certificates ..................................................................... 117
Configuring Enterprise Server for SSL ......................................................... 117
Creating a New Server Instance ....................................................................... 118

Contents vii
Creating a Certificate Trust Database ............................................................... 119
Requesting a Certificate .................................................................................... 120
Required CA Information ............................................................................. 122
Installing and Managing Certificates ................................................................123
Managing Certificates ................................................................................... 126
Using Secure Sockets Layer (SSL) ..................................................................... 127
Activating SSL ................................................................................................ 128
Specifying Ciphers ........................................................................................ 128
Setting Security (SSL) Preferences ................................................................ 129
Adding a PKCS #11Module .......................................................................... 129
Guidelines for Installing a PKCS#11 Module .......................................... 130
To Import a PKCS#11 Module ................................................................. 131
Using SSL Configuration File Directives ...................................................... 131
Security ..................................................................................................... 131
SSL2 ........................................................................................................... 132
SSL3 ........................................................................................................... 132
Ciphers ...................................................................................................... 132
SSL3Ciphers .............................................................................................. 133
SSL3SessionTimeout ................................................................................. 133
SSLCacheEntries ....................................................................................... 133
SSLClientAuth ........................................................................................... 133
SSLSessionTimeout ................................................................................... 133
Using Client Certificates .................................................................................... 134
Mapping Client Certificates to LDAP ...........................................................134
Using the certmap.conf File ......................................................................... 136
Creating Custom Properties ..................................................................... 139
Example Mappings .................................................................................. 139
Changing the Trust Database/Key Pair File Password .................................... 141
Migrating Enterprise Server 3.X Certificates ..................................................... 142
Additional Server Security Considerations ....................................................... 143
Limit Physical Access .................................................................................... 143
Limit Administration Access ......................................................................... 144
Choose Good Passwords ............................................................................. 144

viii Netscape Enterprise Server Administrator’s Guide
Guidelines for Creating Hard-to-Crack Passwords ................................. 144
Secure Your Key-Pair File ............................................................................ 145
Limit Other Applications on the Server ....................................................... 145
Prevent Clients from Caching SSL Files ....................................................... 146
Limit Ports ..................................................................................................... 146
Know Your Server’s Limits ........................................................................... 146
Consider Additional Measures for Unprotected Servers ............................. 147
Chapter 6 Managing Server Clusters ................................................... 149
About Clusters ................................................................................................... 149
Preliminary Guidelines for Using Server Clusters ........................................... 150
Setting up a Cluster ........................................................................................... 152
Adding a Server to the Server List .................................................................... 153
Modifying Cluster Information ......................................................................... 154
Removing Servers from a Cluster ..................................................................... 155
Managing Server Clusters ................................................................................. 155
Part 3 Configuring and Monitoring
Chapter 7 Configuring Server Preferences ....................................... 159
Starting and Stopping the Server ...................................................................... 160
Setting the Termination Timeout ................................................................. 160
Restarting the Server (Unix) ......................................................................... 161
Restarting With Inittab (Unix) ................................................................. 162
Restarting With the System RC Scripts (Unix) ........................................ 162
Restarting the Server Manually (Unix) .................................................... 162
Stopping the Server Manually (Unix) ..................................................... 163
Restarting the Server (Windows NT) ........................................................... 163
Using the Automatic Restart Utility (Windows NT) ............................... 165
Viewing Server Settings .................................................................................... 166
Configuring Network Settings .......................................................................... 167
Changing the Server’s Location (Unix) ........................................................ 167
Changing the Server’s User Account (Unix) ............................................... 167
Changing the Server’s User Account (Windows NT) ................................. 168
Changing the Server Name .......................................................................... 169

Contents ix
Changing the Server Port Number ............................................................... 169
Changing the Server Binding Address ......................................................... 170
Changing the Server’s MTA Host ................................................................. 170
Customizing Error Responses ........................................................................... 170
Working with Dynamic Configuration Files .................................................... 171
Using .htaccess Files ..................................................................................... 171
Activating .htaccess checking .................................................................. 171
Using .nsconfig Files ................................................................................ 175
Restricting Symbolic Links (Unix) .................................................................... 179
Using the Watchdog (uxwdog) Process (Unix) ............................................... 179
Chapter 8 Understanding Log Files ..................................................... 183
About Log Files ................................................................................................. 184
Viewing an Access Log File .............................................................................. 184
Viewing the Error Log File ................................................................................ 185
Monitoring the Server Using HTTP .................................................................. 186
Archiving Log Files ............................................................................................ 187
Internal-daemon Log Rotation ..................................................................... 188
Cron-based Log Rotation .............................................................................. 188
Setting Log Preferences .....................................................................................189
Easy Cookie Logging .................................................................................... 190
Relaxed Logging ........................................................................................... 190
Flushing the Log Buffer .................................................................................... 191
Running the Log Analyzer ................................................................................191
Using Performance Monitor (Windows NT) .................................................... 193
Viewing Events (Windows NT) ........................................................................ 195
Chapter 9 Using SNMP to Monitor Servers ....................................... 197
SNMP Basics ...................................................................................................... 198
SNMP Subagent ............................................................................................. 198
SNMP Master Agent ...................................................................................... 198
How SNMP Works ........................................................................................ 199
Netscape MIBs .............................................................................................. 200
The Enterprise Server MIB ...................................................................... 201
Types of SNMP Messages ............................................................................. 201

xNetscape Enterprise Server Administrator’s Guide
The Enterprise Server MIB ................................................................................ 202
Setting Up SNMP on a Netscape Server ........................................................... 205
Using a Proxy SNMP Agent (Unix) .................................................................. 207
Installing the Proxy SNMP Agent ................................................................. 208
Starting the Proxy SNMP Agent ................................................................... 208
Restarting the Native SNMP Daemon .......................................................... 209
Reconfiguring the SNMP Native Agent ............................................................ 209
Installing the SNMP Master Agent .................................................................... 209
Enabling and Starting the SNMP Master Agent ................................................ 211
Manually Configuring the SNMP Master Agent ........................................... 211
Editing the Master Agent CONFIG File ....................................................... 212
Defining sysContact and sysLocation Variables .......................................... 212
Configuring the SNMP Master Agent ........................................................... 213
Starting the SNMP Master Agent .................................................................. 214
Manually Starting the SNMP Master Agent ............................................. 214
Starting the SNMP Master Agent Using Enterprise Admin Server ......... 215
Configuring the SNMP Master Agent ............................................................... 215
Configuring the Community String .............................................................. 215
Configuring Trap Destinations ..................................................................... 216
Enabling the Subagent ...................................................................................... 216
Chapter 10 Configuring the Server for Performance ................... 219
About Server Performance ................................................................................ 220
Performance Issues ........................................................................................... 220
Unix Platform-Specific Issues ........................................................................... 221
Performance Buckets ........................................................................................ 222
Configuration ................................................................................................ 223
Performance Report ...................................................................................... 223
Miscellaneous magnus.conf Directives ............................................................ 225
Multi-process Mode ...................................................................................... 225
Accept Thread Information .......................................................................... 227
CGIStub Processes (Unix) ............................................................................ 227
Buffer Size ..................................................................................................... 228
Native Thread Pool Size ............................................................................... 229