Sun Microsystems Netscape Enterprise Server Service-Handbuch

comp.sys

TCP/IP

directory server

World Wide Web

Personal

IStore

Proxy

merchant system

HTML

http://www

Internet

server

security

news

URL

HTML

mail

Inter

navigator

community system

electronic commerce

JavaScript Proxy

Mozilla

certificate

ublishing

Publishing

Chat

encryption

secure sockets layer

SSL

Administrator’s Guide

Netscape Enterprise Server

Version 4.0

806-2823-10

September 1999

rights reserved.

Sun, Sun Microsystems, the Sun Logo are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States

and other countries. Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation

in the U.S. and other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape

Communications Corporation, which may be registered in other countries.

Federal Acquisitions: Commercial Software — Government Users Subject to Standard License Terms and Conditions

The product described in this document is distributed under licenses restricting its use, copying, distribution, and

decompilation. No part of the product or this document may be reproduced in any form by any means without prior written

authorization of the Sun-Netscape Alliance and its licensors, if any.

THIS DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND

WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE

OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE

LEGALLY INVALID.

Netscape, Netscape Navigator, Netscape Certificate Server, Netscape DevEdge, Netscape FastTrack Server, Netscape ONE,

SuiteSpot, and the Netscape N and Ship’s Wheel logos are registered trademarks of Netscape Communications Corporation in

the United States and other countries. Other Netscape logos, product names, and service names are also trademarks of

Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are

trademarks of their respective owners.

The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in

full compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or

documentation to the U.S. Government is with restricted rights as described in the license agreement accompanying Netscape

software.

rights reserved.

Documentation Team: Jocelyn Becker, Rober t Fish, Ann Hillesland, Sanborn Hodges, Amanda Lee, Laila Millar, and

Alan Morgenegg

Version 4.0

Printed in the United States of America. 00 99 98 5 4 3 2 1

Recycled and Recyclable Paper

Contents iii

Contents

About This Guide ...........................................................................................21

What’s In This Guide? ..........................................................................................21

How This Guide Is Organized ............................................................................21

Part I: Server Basics ........................................................................................22

Part II: Using Enterprise Administration Server .............................................22

Part III: Configuring and Monitoring .............................................................23

Part IV: Using Programs and Objects .............................................................24

Part V: Managing Content and Access ...........................................................24

Appendixes ......................................................................................................24

Conventions Used In This Guide ........................................................................25

Using the Enterprise Server Documentation ......................................................26

Further Reading ...................................................................................................28

Contacting Technical Support .............................................................................29

Part 1 Server Basics

Chapter 1 Introduction to Enterprise Server .....................................33

Netscape Enterprise Server .................................................................................33

Enterprise Server Features ..............................................................................34

Administering and Managing Enterprise Servers ...........................................35

Netscape Enterprise Server Architecture ............................................................36

Content Engines ..............................................................................................37

Server Extensions ............................................................................................37

Runtime Environments ....................................................................................38

Application Services ........................................................................................38

How Enterprise Server is Configured .................................................................39

Enterprise Server Component Options ..........................................................39

Enterprise Server Configuration Files .............................................................40

Single-Server Configuration ............................................................................41

All Platforms ...............................................................................................41

iv Netscape Enterprise Server Administrator’s Guide

Unix-Only Platforms .................................................................................. 44

Multiple-Server Configuration ........................................................................ 45

Enterprise Administration Server ........................................................................ 45

Server Manager .................................................................................................... 46

Accessing the Server Manager ....................................................................... 47

Using the Resource Picker ............................................................................. 48

Wildcards Used in the Resource Picker ........................................................ 49

Netscape Console ................................................................................................ 50

Sending Error Information to Netscape ............................................................. 52

Details on Data Collected by the Quality Feedback Agent ......................... 52

Using the Quality Feedback Agent ................................................................ 53

Editing master.ini ....................................................................................... 54

Editing magnus.conf .................................................................................. 54

Chapter 2 Administering Enterprise Servers ..................................... 57

Accessing Enterprise Administration Server ...................................................... 57

Unix Platforms ................................................................................................ 58

Windows NT Platforms .................................................................................. 58

Adding a Server: Running Multiple Servers ....................................................... 60

Hardware Virtual Servers ............................................................................... 60

Software Virtual Servers ................................................................................. 60

Multiple Server Instances ............................................................................... 61

Installing Multiple Instances of the Server ......................................................... 61

Removing a Server .............................................................................................. 62

Migrating a Server From a Previous Version ..................................................... 63

Part 2 Using Enterprise Administration Server

Chapter 3 Setting Administration Preferences ................................. 67

Shutting Down Enterprise Administration Server .............................................. 68

Changing Network Settings ................................................................................ 68

Changing the User Account and Password ................................................... 69

Changing the Port Number ............................................................................ 69

Changing the Superuser Settings ........................................................................ 70

Enabling Distributed Administration .................................................................. 71

Contents v

Configuring Secure Sockets Layer (SSL) ............................................................73

Activating SSL ..................................................................................................73

Setting Encryption Preferences ......................................................................73

Setting Stronger Ciphers ............................................................................74

Specifying Log File Options ................................................................................75

Viewing the Access Log File ..........................................................................76

Viewing the Error Log File .............................................................................77

Archiving Log Files .........................................................................................77

Using Cron Controls (Unix Only) .............................................................78

Configuring Directory Services ...........................................................................79

Restricting Server Access .....................................................................................79

Chapter 4 Managing Users and Groups ...............................................81

About Users and Groups ....................................................................................82

Creating Users .....................................................................................................83

Guidelines for Creating User Entries .............................................................83

How to Create a New User Entry ..................................................................84

Directory Server User Entries .........................................................................84

Managing Users ...................................................................................................86

Finding User Information ...............................................................................86

Building Custom Search Queries ..............................................................87

Search Attribute Options ...........................................................................88

Search Type Options .................................................................................89

Editing User Information ................................................................................90

Managing a User’s Password ..........................................................................91

Managing User Licenses .................................................................................92

Renaming Users ..............................................................................................92

Removing Users ..............................................................................................93

Creating Groups ..................................................................................................93

Static Groups ...................................................................................................94

Guidelines for Creating Static Groups ......................................................94

To Create a Static Group ...........................................................................95

Dynamic Groups .............................................................................................95

How Enterprise Server 4.0 Implements Dynamic Groups .......................96

vi Netscape Enterprise Server Administrator’s Guide

Groups Can Be Static and Dynamic ......................................................... 97

Dynamic Group Impact on Server Performance ...................................... 97

Guidelines for Creating Dynamic Groups ................................................ 97

To Create a Dynamic Group ..................................................................... 99

Managing Groups ................................................................................................ 99

Finding Group Entries .................................................................................. 100

The “Find all groups whose” Field ......................................................... 101

Editing Group Attributes .............................................................................. 101

Adding Group Members .............................................................................. 102

Adding Groups to the Group Members List ............................................... 103

Removing Entries from the Group Members List ....................................... 104

Managing Owners ........................................................................................ 104

Managing See Alsos ...................................................................................... 105

Removing Groups ......................................................................................... 105

Renaming Groups ......................................................................................... 106

Creating Organizational Units .......................................................................... 106

Managing Organizational Units ........................................................................ 107

Finding Organizational Units ....................................................................... 107

The “Find all units whose” Field ............................................................. 108

Editing Organizational Unit Attributes ........................................................ 109

Renaming Organizational Units ................................................................... 109

Deleting Organizational Units ...................................................................... 110

Managing a Preferred Language List ................................................................ 110

Chapter 5 Working with Server Security .......................................... 113

About Enterprise Server Security ...................................................................... 114

Encryption ..................................................................................................... 114

FIPS-140 Compliance ............................................................................... 115

Certificates ..................................................................................................... 115

Client and Server Authentication ............................................................ 116

How Enterprise Server Uses Certificates to Authenticate Users ............ 116

128-Bit Step-Up Certificates ..................................................................... 117

Configuring Enterprise Server for SSL ......................................................... 117

Creating a New Server Instance ....................................................................... 118

Contents vii

Creating a Certificate Trust Database ............................................................... 119

Requesting a Certificate .................................................................................... 120

Required CA Information ............................................................................. 122

Installing and Managing Certificates ................................................................123

Managing Certificates ................................................................................... 126

Using Secure Sockets Layer (SSL) ..................................................................... 127

Activating SSL ................................................................................................ 128

Specifying Ciphers ........................................................................................ 128

Setting Security (SSL) Preferences ................................................................ 129

Adding a PKCS #11Module .......................................................................... 129

Guidelines for Installing a PKCS#11 Module .......................................... 130

To Import a PKCS#11 Module ................................................................. 131

Using SSL Configuration File Directives ...................................................... 131

Security ..................................................................................................... 131

SSL2 ........................................................................................................... 132

SSL3 ........................................................................................................... 132

Ciphers ...................................................................................................... 132

SSL3Ciphers .............................................................................................. 133

SSL3SessionTimeout ................................................................................. 133

SSLCacheEntries ....................................................................................... 133

SSLClientAuth ........................................................................................... 133

SSLSessionTimeout ................................................................................... 133

Using Client Certificates .................................................................................... 134

Mapping Client Certificates to LDAP ...........................................................134

Using the certmap.conf File ......................................................................... 136

Creating Custom Properties ..................................................................... 139

Example Mappings .................................................................................. 139

Changing the Trust Database/Key Pair File Password .................................... 141

Migrating Enterprise Server 3.X Certificates ..................................................... 142

Additional Server Security Considerations ....................................................... 143

Limit Physical Access .................................................................................... 143

Limit Administration Access ......................................................................... 144

Choose Good Passwords ............................................................................. 144

viii Netscape Enterprise Server Administrator’s Guide

Guidelines for Creating Hard-to-Crack Passwords ................................. 144

Secure Your Key-Pair File ............................................................................ 145

Limit Other Applications on the Server ....................................................... 145

Prevent Clients from Caching SSL Files ....................................................... 146

Limit Ports ..................................................................................................... 146

Know Your Server’s Limits ........................................................................... 146

Consider Additional Measures for Unprotected Servers ............................. 147

Chapter 6 Managing Server Clusters ................................................... 149

About Clusters ................................................................................................... 149

Preliminary Guidelines for Using Server Clusters ........................................... 150

Setting up a Cluster ........................................................................................... 152

Adding a Server to the Server List .................................................................... 153

Modifying Cluster Information ......................................................................... 154

Removing Servers from a Cluster ..................................................................... 155

Managing Server Clusters ................................................................................. 155

Part 3 Configuring and Monitoring

Chapter 7 Configuring Server Preferences ....................................... 159

Starting and Stopping the Server ...................................................................... 160

Setting the Termination Timeout ................................................................. 160

Restarting the Server (Unix) ......................................................................... 161

Restarting With Inittab (Unix) ................................................................. 162

Restarting With the System RC Scripts (Unix) ........................................ 162

Restarting the Server Manually (Unix) .................................................... 162

Stopping the Server Manually (Unix) ..................................................... 163

Restarting the Server (Windows NT) ........................................................... 163

Using the Automatic Restart Utility (Windows NT) ............................... 165

Viewing Server Settings .................................................................................... 166

Configuring Network Settings .......................................................................... 167

Changing the Server’s Location (Unix) ........................................................ 167

Changing the Server’s User Account (Unix) ............................................... 167

Changing the Server’s User Account (Windows NT) ................................. 168

Changing the Server Name .......................................................................... 169

Contents ix

Changing the Server Port Number ............................................................... 169

Changing the Server Binding Address ......................................................... 170

Changing the Server’s MTA Host ................................................................. 170

Customizing Error Responses ........................................................................... 170

Working with Dynamic Configuration Files .................................................... 171

Using .htaccess Files ..................................................................................... 171

Activating .htaccess checking .................................................................. 171

Using .nsconfig Files ................................................................................ 175

Restricting Symbolic Links (Unix) .................................................................... 179

Using the Watchdog (uxwdog) Process (Unix) ............................................... 179

Chapter 8 Understanding Log Files ..................................................... 183

About Log Files ................................................................................................. 184

Viewing an Access Log File .............................................................................. 184

Viewing the Error Log File ................................................................................ 185

Monitoring the Server Using HTTP .................................................................. 186

Archiving Log Files ............................................................................................ 187

Internal-daemon Log Rotation ..................................................................... 188

Cron-based Log Rotation .............................................................................. 188

Setting Log Preferences .....................................................................................189

Easy Cookie Logging .................................................................................... 190

Relaxed Logging ........................................................................................... 190

Flushing the Log Buffer .................................................................................... 191

Running the Log Analyzer ................................................................................191

Using Performance Monitor (Windows NT) .................................................... 193

Viewing Events (Windows NT) ........................................................................ 195

Chapter 9 Using SNMP to Monitor Servers ....................................... 197

SNMP Basics ...................................................................................................... 198

SNMP Subagent ............................................................................................. 198

SNMP Master Agent ...................................................................................... 198

How SNMP Works ........................................................................................ 199

Netscape MIBs .............................................................................................. 200

The Enterprise Server MIB ...................................................................... 201

Types of SNMP Messages ............................................................................. 201

xNetscape Enterprise Server Administrator’s Guide

The Enterprise Server MIB ................................................................................ 202

Setting Up SNMP on a Netscape Server ........................................................... 205

Using a Proxy SNMP Agent (Unix) .................................................................. 207

Installing the Proxy SNMP Agent ................................................................. 208

Starting the Proxy SNMP Agent ................................................................... 208

Restarting the Native SNMP Daemon .......................................................... 209

Reconfiguring the SNMP Native Agent ............................................................ 209

Installing the SNMP Master Agent .................................................................... 209

Enabling and Starting the SNMP Master Agent ................................................ 211

Manually Configuring the SNMP Master Agent ........................................... 211

Editing the Master Agent CONFIG File ....................................................... 212

Defining sysContact and sysLocation Variables .......................................... 212

Configuring the SNMP Master Agent ........................................................... 213

Starting the SNMP Master Agent .................................................................. 214

Manually Starting the SNMP Master Agent ............................................. 214

Starting the SNMP Master Agent Using Enterprise Admin Server ......... 215

Configuring the SNMP Master Agent ............................................................... 215

Configuring the Community String .............................................................. 215

Configuring Trap Destinations ..................................................................... 216

Enabling the Subagent ...................................................................................... 216

Chapter 10 Configuring the Server for Performance ................... 219

About Server Performance ................................................................................ 220

Performance Issues ........................................................................................... 220

Unix Platform-Specific Issues ........................................................................... 221

Performance Buckets ........................................................................................ 222

Configuration ................................................................................................ 223

Performance Report ...................................................................................... 223

Miscellaneous magnus.conf Directives ............................................................ 225

Multi-process Mode ...................................................................................... 225

Accept Thread Information .......................................................................... 227

CGIStub Processes (Unix) ............................................................................ 227

Buffer Size ..................................................................................................... 228

Native Thread Pool Size ............................................................................... 229

Inhaltsverzeichnis

Andere Sun Microsystems Server Handbücher

Sun Microsystems

Sun Microsystems Sun Blade X6250 Bedienungsanleitung

Sun Microsystems

Sun Microsystems SPARC T5120 Service-Handbuch

Sun Microsystems

Sun Microsystems SPARC Enterprise T1000 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V490 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V1280 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V100 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Netra T1 AC200 Service-Handbuch

Sun Microsystems

Sun Microsystems Sun Enterprise 4500 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V20z Merkblatt

Sun Microsystems

Sun Microsystems Sun Fire V880z Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun SPARC Enterprise M8000 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire 15K Handbuch

Sun Microsystems

Sun Microsystems Enterprise 250 Installations- und Betriebshandbuch

Sun Microsystems

Sun Microsystems Sun Enterprise 220R Handbuch

Sun Microsystems

Sun Microsystems Ultra Enterprise 6000 Systems Benutzerhandbuch

Sun Microsystems

Sun Microsystems Sun Java Content Delivery Server 5.0 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Netra ct Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Java SystemDirectory Server Bedienungsanleitung

Sun Microsystems

Sun Microsystems 15K/9960 Technisches Handbuch

Sun Microsystems

Sun Microsystems Netra X1 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V60x Bedienungsanleitung

Sun Microsystems

Sun Microsystems Blade X6240 Bedienungsanleitung

Sun Microsystems

Sun Microsystems Sun Fire V1280 Bedienungsanleitung

Sun Microsystems

Sun Microsystems SPARCcenter 2000 Bedienungsanleitung

Beliebte Server Handbücher anderer Marken

HP AlphaServer ES47 Bedienungsanleitung

Dell

Dell PowerEdge R410 Bedienungsanleitung

PowerNAS

PowerNAS CMA Bedienungsanleitung

Supero

Supero FatTwin F617R3-FT Bedienungsanleitung

MSI

MSI P1-109N-L70 Bedienungsanleitung

Dell

Dell PowerEdge XE9640 Handbuch

Dell

Dell PS4100 Montageanleitung

EtroVISION

EtroVISION EV3151 Bedienungsanleitung

NEC

NEC Express5800/T110j Bedienungsanleitung

HP ProLiant Gen9 Bedienungsanleitung

Compaq

Compaq ProLiant 3000 Handbuch

Dell

Dell PowerEdge 3YPMN Bedienungsanleitung

iRobo

iRobo IPC2U Bedienungsanleitung

Nortel

Nortel 1000 Con?guration guide Bedienungsanleitung

Asus

Asus AP7500 Bedienungs- und Wartungshandbuch

Avid Technology

Avid Technology AirSpeed 5000 Bedienungsanleitung

HP Integrity rx2600 Installationsanleitung

Milestone

Milestone Husky IVO 350T Bedienungsanleitung