2006 Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. Sun Sun Berkeley BSD UNIX X/Open Company, Ltd. / Sun Sun Microsystems Su

Transcription

1 Sun Java SystemWeb Server 7.0 Sun Microsystems, Inc Network Circle Santa Clara, CA U.S.A

2 2006 Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. Sun Sun Berkeley BSD UNIX X/Open Company, Ltd. / Sun Sun Microsystems Sun docs.sun.com AnswerBook AnswerBook2 Java Solaris Sun Microsystems, Inc. / SPARC SPARC International, Inc. / SPARC Sun Microsystems, Inc. OPEN LOOK Sun TM Sun Microsystems, Inc. Sun Xerox Sun Xerox Xerox OPEN LOOK GUI Sun Sun Sun Microsystems, Inc. FAR Federal Acquisition Regulations @17466

3 Administration Server Unix/Linux Administration Server Unix/Linux Administration Server Windows Administration Server GUI CLI CLI wadm CLI CLI Web Server

4 Sun Java System Web Server Web Server Web Solaris Zones Sun Java SystemWeb Server

5 HTTP HTTP HTTP Administration Server (Certificate Revocation List, CRL) CRL CRL

6 SSL SSL HTTP / SSL /IP ACL ACL (Access Control List, ACL) (Access Control Entry, ACE) htaccess (Distinguished Name, DN) LDIF Sun Java SystemWeb Server

7 MIME MIME (UNIX/Linux) URL URL CGI CGI Windows Shell CGI Windows Shell CGI (UNIX/Linux) HTML HTML

8 URI P3P P3P WebDAV Web WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV WebDAV URI Translate:f Java Web Java Sun Java System Web Server Sun Java SystemWeb Server

9 Java Java Java JVM JVM JVM JVM JVM Java JVM Java Web Web Web Web JSP Servlet Servlet Servlet Java JDBC Sun Java System Web Server JDBC JDBC JDBC JDBC JDBC JNDI JNDI SOAP

10 SOAP SOAP Sun Java System Web Server Sun Java SystemWeb Server

11 SNMP SNMP CLI SNMP Solaris SNMP Linux SNMP Windows SNMP (magt) Administration Server LDAP WebDAV A CLI B FastCGI

12 (SAF) auth-fastcgi responder-fastcgi filter-fastcgi error-fastcgi FastCGI SAF error-fastcgi SAF Web Server FastCGI magnus.conf MIME obj.conf FastCGI FastCGI FastCGI FastCGI PHP (ListDir.php) Perl (SimpleAuth.pl) C (SimpleFilter.c) C Web Web Server 7.0 JWSDP JWSDP Sun Java SystemWeb Server

13 4 1 Web

14 14

15 6 1 HTTP ACL ACE URL CGI WebDAV WebDAV Sun Java System Web Server Servlet JDBC JNDI SOAP > > > SNMP > > > A 1 CLI

16 16

17 17

18 18

19 Sun Java TM System Web Server 7.0 Sun Java System Web Server Web Sun Java System Web Server 7.0 Sun Java Enterprise System (Java ES) Internet Sun Java System Web Server 7.0 Java ES Sun Java SystemWeb Server 7.0 Sun Java System Web Server 7.0 Web Server Sun Java System Web Server 7.0 URL Sun Java System Web Server

20 P 1 Sun Java System Web Server 7.0 Sun Java System Web Server 7.0 Documentation Center Web Server Sun Java System Web Server 7.0 Web Server Sun Java System Web Server 7.0 Installation and Migration Guide Sun Java System Web Server 7.0 Sun Java System Web Server 7.0 Developer s Guide Sun Java System Web Server 7.0 Update 1 NSAPI Developer s Guide Sun Java System Web Server 7.0 Developer s Guide to Java Web Applications Sun Java System Web Server 7.0 Administrator s Configuration File Reference Sun Java System Web Server 7.0 Performance Tuning, Sizing, and Scaling Guide Sun Java System Web Server 7.0 Troubleshooting Guide Web Server Sun ONE Web Server Sun Java System Web Server 7.0 JavaPlatform Enterprise Edition (Java EE) WebDAV Web API Sun Java System Web Server Netscape (Netscape Server Application Programmer s Interface, NSAPI) Sun Java System Web Server Java Servlet JavaServer Pages TM (JSP TM ) Sun Java System Web Server Web Server 20 Sun Java SystemWeb Server

21 Sun Java Enterprise System (Java ES) URL P 2 install_dir Sun Java System Web Server 7.0 Solaris TM Sun Java Enterprise System (Java ES) /opt/sunwwbserver7 Linux HP-UX Java ES /opt/sun/webserver/ Windows Java ES System Drive:\Program Files\Sun\JavaES5\WebServer7 Solaris Linux HP-UX user's home directory/sun/webserver7 Solaris Linux HP-UX /sun/webserver7 Windows SystemDrive:\Program Files\Sun\WebServer7 21

22 P 2 instance_root Solaris /var/opt/sunwwbsvr7 Linux HP-UX /var/opt/sun/webserver7 Windows System Drive:\Program Files\sun\WebServer7 Java ES Windows System Drive:\Program Files\Sun\JavaES5\WebServer7 P 3 AaBbCc123 AaBbCc123.login ls -a machine_name% you have mail. machine_name% su Password: AaBbCc123 rm filename 6 22 Sun Java SystemWeb Server

23 P 4 [] ls [-l] -l { } -d {y n} -d y n ${ } ${com.sun.javaroot} com.sun.javaroot - Ctrl-A A Ctrl + Ctrl+A+N Ctrl Sun (docs.sun.com SM ) Web Sun docs.sun.com PDF HTML Sun Sun Sun Sun docs.sun.com Web Sun search-term site:docs.sun.com "Web Server" Web Server site:docs.sun.com 23

24 Sun Web java.sun.com developers.sun.com "sun.com" "docs.sun.com" Web URL Sun Web Sun Sun Sun Sun "Send Comments", URL Sun Java SystemWeb Server

25 1 1 Sun Java System Web Server Administration Server CLI 31 Web Server 7.0 Sun Java System Web Server 7.0 Web Web Server 7.0 Web Server Sun Java System Web Server 7.0 Sun Java System Web Server 7.0 Sun Java System Web Server Sun Java System Web Server 25

26 Administration Server Administration Server Administration Server Unix/Linux Administration Server Administration Server 1 2 Unix/Linux Administration Server install_root /admin-server/bin /usr/sjsws7.0/admin-server/bin./startserv Administration Server Windows Administration Server Sun Java System Web Server Windows Administration Server Web Server Administration Server applet Sun Java System Web Server (GUI) (wadm shell) wadm shell Web 26 Sun Java SystemWeb Server

27 Sun Java System Web Server "Administration Server" URL Sun Java System Web Server Administration Server Administration Server SSL 1234 URL Sun Java System Web Server Administration Server Sun Java System Web Server 1 27

28 28 Sun Java SystemWeb Server

29 CLI GUI GUI CLI Sun Java System Web Server 7.0 Sun Java System Web Server 7.0 wadm CLI GUI Sun Java System Web Server 6.1 HttpServerAdmin wdeploy flexanlg CLI (wadm) JACL shell CLI CLI Sun Java System Web Server 7.0 HttpServerAdmin Sun Java System Web Server 7.0 wdeploy 6.x Administration Server CLI wadm 3 shell wadm CLI shell --password-file --password-file wadm> create-config --user=admin --password-file=./admin.pwd --http-port= server-name=syrinx myconfig Shell shell wadmwadm shell exit quit shell wadm -user=admin -host=serverhost --password-file=admin.pwd --port=

30 CLI wadm wadm -user=admin -host=serverhost --password-file=admin.pwd --port=8989 -commands-file=/space/scripts/admscr wadm wadm CLI wadm CLI : Sun Java System Web Server 7.0 CLI : CLI install-root/bin/wadm CLI localhost SSL 8989 admin CLI install-root/admin-server/bin/startserv CLI wadm Administration Server wadm shell shell user password-file host port ssl 30 Sun Java SystemWeb Server

31 Web Server 7.0 CLI bindpw user-password token-pin password-file wadm SSL Administration Server SSLAdministration Server Administration Server truststore (~/.wadmtruststore) wadm truststore truststore Web Server 7.0 Web Server Web Server Web Server Sun Java System Web Server Sun Java System Web Server 7.0 Administrator s Configuration File Reference Guide Web Server 7.0 Web CLI Web Web Web Web 1 31

32 Web Server 7.0 Web Server CLI Web Web <install_dir>/admin-server/config-store/<config_name>/web-app/<virtual_servername>/ config-store Web current.zip <install_dir>/admin-server/config-store/<config_name> Web 32 Sun Java SystemWeb Server

33 Web Server 7.0 CLI Web 1 33

34 Web Server 7.0 Administration Server Web Administration Server GUI Administration Server Administration Server Administration Server Administration Server SSL Administration Server Administration Server Administration Server Administration Server 34 Sun Java SystemWeb Server

35 2 Web Server Web GUI

36 Web Web../docs 64 / Web 64 UNIX root 2 HTTP IP IP * IP 3 Java CGI SHTML Java/CGI SHTML Java Java Java Web Java Java SE Java SE Java SE CGI CGI CGI CGI URI 36 Sun Java SystemWeb Server

37 SHTML SHTML 4 CLI CLI wadm> create-config --user=admin --password-file=admin.pwd --host=serverhost --port= http-port= server-user=user --server-name=servername config1 config1 CLI create-config(1)

38 CLI CLI wadm> copy-config --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 copyconfig1 copyconfig1 CLI copy-config(1) Sun Java SystemWeb Server

39 [ 2] 4. CLI wadm> create-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 serverhost CLI create-instance(1) CLI CLI wadm> start-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 nodehost1 CLI start-instance(1) 2 39

40 CLI CLI wadm> stop-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 nodehost1 CLI stop-instance(1) CLI wadm> restart-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 nodehost1 CLI restart-instance(1) Administration Server 40 Sun Java SystemWeb Server

41 pkcs11cgi DNS DNS ACL SSL JVM CLI CLI wadm> reconfig-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 serverhost CLI reconfig-instance(1) CLI CLI wadm> delete-instance --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 serverhost CLI delete-instance(1) 2 41

42 1. 2. > > ,23, Sun Java SystemWeb Server

43 CLI CLI wadm> create-event --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --time=10:10 --command=restart CLI create-event(1) > 2 43

44 44

45 3 45 Sun Java System Web Server Sun Java SystemWeb Server Administration Server Administration Server Administration Server Sun Java System Web Server Web Administration Server wadm CLI 45

46 1 Administration Server Sun Java System Web Server GUI wadm CLI 8989 Administration Server SSL SSL SSL SSL wadm CLI 2 Administration Server wadm CLI wadm> register-node --user <admin-user> --port <SSL Port> --host <node name> host CLI SSL Sun Java SystemWeb Server

47 Web Java Web Web Web 2 JVM 3 47

48 48 Sun Java SystemWeb Server

49 MachineA MachineB MachineC MachineD MachineE Web MachineA Administration Server 46 Web MachineB MachineC MachineD MachineE 4 Web Web WEb-INF/sun-web.xml <session-manager persistence-type="replicated"/> wadm wadm --host MachineA --port 8089 wadm> create-config --http-port= server-name=samplecluster lb wadm> create-reverse-proxy --config=lb --vs=lb -uri-prefix=/ --server=" ttp://machined:8080, wadm> create-instance --config=lb MachineA wadm> deploy-config lb wadm> start-instance --config=lb

50 wadm> create-config --http-port= server-name=samplecluster clusterof4 wadm> set-session-replication-prop --config=clusterof4 enabled=true Web wadm> add-webapp --config=clusterof4 --uri=/simple webapps-simple.war wadm> create-instance --config=clusterof4 MachineB MachineC MachineD MachineE wadm> start-instance --config=clusterof4 start-instance 50 Sun Java SystemWeb Server

51 4 Sun Java System Web Server Solaris Zones Web Server 51

52 Web Server Administration Server Administration Server Web Web / Administration Server Administration Server Web Server Web Web Server config-store 52 Sun Java SystemWeb Server

53 config-store Sun Java System Web Server config-store wadm deploy-config Sun Java System Web Server 7.0 CLI Reference Manual Web Web Server Web CGI Web Web Server 4 53

54 4 1 Web Web Server 54 Sun Java SystemWeb Server

55 Web Server 1. Web Server Web Server Administration Server HTTP Web Server Sun Java System Web Server 7.0 Installation and Migration Guide 2 Installing the Web Server Sun Java System Web Server Administration Server Administration Server SSL Web Server Web Server 1. HTTP CLI create-instance <install_dir>/admin-server/ config-store config-store Sun Java System Web Server

56 Web Server 1) 2) Administration Server 3) HTTP Solaris 9 SPARC Solaris 9 SPARC Sun Java System Web Server Sun Java SystemWeb Server

57

58 (De-Militarized Zone, DMZ) Administration Server (Militarized Zone) Administration Server DMZ Solaris 10 Solaris zone HTTP Web Server Administration Server 58 Sun Java SystemWeb Server

59 2. Web Server Web Server 3. Administration Server SSL 4. Administration Server Administration Server Administration Server Administration Server 5. install_dir/admin-server/bin/ Administration Server install_dir/admin-server/bin>./startserv 6. wadm wadm install_dir/bin install_dir/bin>./wadm 7. Administration Server register-node./wadm register-node -user=admin --host=abc.sfbay.sun.com --port=8989 abc.sfbay.sun.com Administration Server port Administration Server SSL 8. Administration Server Administration Server Administration Server Administration Server Administration Server SSL Sun Java System Web Server 7.0 Installation and Migration Guide Registering the Administration Node From the Command-Line 9. install_dir /admin-server/bin/ startserv 10. CLI Administration Server HTTP

60 12. Web Server Web Server 7.0 Web Server Web Web Server Web Server 2. rp 3. > >> 4. URI URL URL hostname:portnumber HTTP Web Web Web Server server.xml 60 Sun Java SystemWeb Server

61 Administration Server A B C D Web Server A D B A C B D C Web Server A A Web D A A B D B B A D B C C D D B A B B D A ping A A D A B Web Server 7.0 Web Server Java Web Java CGI PHP CLI cookie 4 61

62 server.xml server.xml <cluster> <local-host>hosta</local-host> <instance> <host>hostb</host> </instance> <instance> <host>hostc</host> </instance> <instance> <host>hostd</host> </instance> <instance> <host>hosta</host> <session-replication/> </cluster> server.xml Port number 1099 Protocol jrmp Encrypted false Getattribute Triggers Replication true Replica Discovery MaxHops 1 Startup Discovery Timeout? Cookie Name CLUSTERSESSIONLOCATOR Sun Java System Web Server 7.0 Administrator s Configuration File Reference Web Web 1. Web <web-application>/web-inf sun-web.xml sunweb.xml <session-manager/> <session-manager persistence-type="replicated"> sun-web.xml 62 Sun Java SystemWeb Server

63 Solaris Zones <sun-web-app> <session-config> <session-manager persistence-type="replicated"> </session-manager> </session-config> </sun-web-app> 2. sunweb.xml Web jar Web war 3. Web 4. Web Web Administration Server 1MB Web Administration Server Web Server Solaris Zones Solaris Zones Solaris 10 Solaris ID 4 63

64 Solaris Zones Solaris Zones System Administration Guide Solaris Containers-Resource Management and Solaris Zones 64 Sun Java SystemWeb Server

65 HTTP IP Web Web HTTP HTTP Sun Java System Web Server HTTP IP URL ACL mime.types Java Web Sun Java System Web Server 65

66 Sun Java System Web Server HTTP IP example.com DNS "ANY:80" " :80" VS1 example.com example.com Web HTTP 83 SSL Sun Java System Web Server phone.example.com maps.example.com is.example.com example.com Web URL HTTP URL URL SSL URL HTTP IP HTTP 66 Sun Java SystemWeb Server

67 HTTP IP HTTP/1.1 Host SSL IP URL HTTP HTTP ISP URL CGI / / HTTP 5 67

68 2 3 > a. (.) (-) (_) b. c. HTTP HTTP HTTP 4 5 CLI CLI wadm> create-virtual-server --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --document-root=../docs config1_vs_1 CLI create-virtual-server(1) Sun Java SystemWeb Server

69 HTTP 3 Web URL CLI CLI wadm> copy-virtual-server --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 copiedvs copiedvs CLI copy-virtual-server(1) HTTP 70 HTTP 70 HTTP HTTP HTTP HTTP 5 69

70 HTTP HTTP IP IPv4 IPv6 IP "*" IP HTTP HTTP HTTP HTTP HTTP HTTP 3. HTTP HTTP HTTP HTTP IP IPv4 IPv6 "*" HTTP IP sales.mycomp.com HTTP HTTP CLI CLI HTTP wadm> create-http-listener --user=admin --password-file=admin.pwd --host=serverhost --port= listener-port= config=config1 --server-name=config1.com --default-virtual-server-name=config1_vs_1 config1_ls_1 CLI create-http-listener(1) HTTP HTTP 1. HTTP 2. HTTP HTTP 3. HTTP HTTP 70 Sun Java SystemWeb Server

71 HTTP HTTP HTTP HTTP HTTP HTTP IP IPv4 IPv6 "*" HTTP IP sales.mycomp.com HTTP HTTP I/O HTTP 5 71

72 72

73 6 Sun Java System Web Server (Certificate Revocation List, CRL) SSL 83 SSL 84 HTTP CA CA Internet CA CA CA 73

74 RSA Sun Java System Web Server 7.0 (Elliptic Curve Cryptography, ECC) ECC RSA (Elliptic Curve Cryptography, ECC) RSA ECC RSA 1024 ECC ANSI X9.62 NIST SECG Sun Java System Web Server 7.0 CA CA ECC ECC CA ECC ECC prime256v1 secp256r1 nistp Sun Java SystemWeb Server

75 secp256k1 secp384r1 nistp384 secp521r1 nistp521 sect163k1 nistk163 sect163r1 sect163r2 nistb163 sect193r1 sect193r2 sect233k1 nistk233k1 nistk233 sect233r1 nistb233 sect239k1 sect283k1 nistk283 sect283r1 nistb283 sect409k1 nistk409 sect571k1 nistk571 sect571r1 nistb571 secp160k1 secp160r1 secp160r2 secp192k1 secp192r1 nistp192 secp224k1 secp224r1 nistp224 prime192v1 6 75

76 CA CA SSL CLI wadm> create-selfsigned-cert --user=admin --port= password-file=admin.pwd --config=config1 --token=internal --org-unit=org1 --locality=xyz --state=def --validity=10 --org=sun --country=abc --server-name=serverhost --nickname=cert1 CLI create-selfsigned-cert(1) SSL CA CA Internet CA (Certificate Authority, CA) CA CA CA Internet CA Web Web Server 76 Sun Java SystemWeb Server

77 > Sun Java System Web Server 7.0 CA CA CA DNS URL CA CA Inc. Corp. / / / / ISO US [DN] 5 RSA ECC RSA ECC CA 6 77

78 6 7 8 CA (Certificate Signing Authority, CSA) HTTP CA ASCII HTTP CLI CLI wadm> create-cert-request --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --server-name=servername.org --org=sun --country=abc --state=def --locality=xyz --token=internal CLI create-cert-request(1) CA > Sun Java System Web Server Sun Java SystemWeb Server

79 4 5 6 "Begin Certificate" "End Certificate".DER HTTP CLI CLI wadm> install-cert --user=admin --port= password-file=admin.pwd --config=config1 --token=internal --cert-type=server --nickname=cert1 cert.req cert.req CLI install-cert(1) > > RSA ECC RSA ECC 6 79

80 CLI CLI wadm> delete-cert --user=admin --port= token=internal --config=config1 cert1 --password-file=admin.pwd CLI delete-cert(1) Administration Server CLI renew-admin-certs Admin-CA-Cert Admin-Server-Cert Admin-Client-Cert wadm> renew-admin-certs --user=admin --password-file=admin.pwd --host=serverhost --port= validity=120 CLI renew-admin-certs(1) 80 Sun Java SystemWeb Server

81 (Certificate Revocation List, CRL) (Certificate Revocation List, CRL) (Certificate Revocation List, CRL) CRL CRL CA CRL CA CRL CA CRL > CRL CRL 7 CLI CLI CRL wadm> install-crl --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 data/install-crl/serversign.crl CLI install-crl(1) 1 2 CRL > 6 81

82 3 4 CRL CLI CLI CRL wadm> delete-crl --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 issuer CLI delete-crl(1) PKCS > PKCS11 PKCS11 CLI CLI PKCS11 wadm> set-token-pin --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --token=internal CLI set-token-pin(1) 82 Sun Java SystemWeb Server

83 SSL SSL create-cert-request CA CA install-cert Java migrate-jks-keycert / create-selfsigned-cert wadm> create-selfsigned-cert --server-name=hostname --nickname=myservercert --token=internal SSL wadm> create-http-listener --user=admin --password-file=admin.pwd --host=serverhost --port= listener-port= config=config1 --server-name=config1.com --default-virtual-server-name=config1_vs_1 config1_ls_1 SSL wadm> set-ssl-prop --http-listener=http-listener-ssl enabled=true wadm> set-ssl-prop --http-listener=http-listener-ssl server-cert-nickname=myservercert wadm> deploy-config config_name wadm> start-instance --config config_name hostname SSL SSL wadm> enable-ciphers --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --http-listener=http-listener-1 --cipher-type=ssl2 SSL_RC4_128_WITH_MD5 CLI enable-ciphers(1) 6 83

84 HTTP HTTP HTTP HTTP Sun Java System Web Server SSL TLS SSL TLS SSL2 SSL3 TLS SSL 2.0 SSL SSL 3 SSL 2 SSL 2 Sun Java System Web Server (Secure Sockets Layer, SSL) (Transport Layer Security, TLS) SSL TLS SSL TLS SSL TLS > HTTP > HTTP 84 Sun Java SystemWeb Server

85 HTTP 6 1 HTTP SSL 2/SSL 3 TLS SSL3/SSL2/TLS HTTP / HTTP RSA ECC "False" [ ] 60 [ ] / SSL 2/SSL 3 / TLS TLS TLS Web SSL SSL 2.0 SSL 3.0 TLS SSL TLS Server Manager SSL TLS 6 85

86 86

87 7 Web Sun Java System Web Server / 93 /IP 93 ACL htaccess 99 Web htaccess Administration Server Web Web (access control entry, ACE) ACE (access control list, ACL) 87

88 ACL ACL Sun Java System Web Server ACL ACL ACE / /IP (SSL) ACL IP LDAP ACL ACL uri ACL default ACL Web Server 7.0 Web 88 Sun Java SystemWeb Server

89 / Server Web Server obj.conf PathCheck Web Server HTTP 401 Web Server check-acl Web Server / Web / Administration Server Administration Server ACL SSL / Web Server LDAP LDAP / 7 89

90 / SSL / / Web SSL server.xml server.xml ACL ACL obj.conf ACL Web Web LDAP Sun Java System Directory Server Web Administration Server Web /Web SSL SSL /IP 90 Sun Java SystemWeb Server

91 / SSL LDAP CA (certificate authority, CA) certmap.conf ACL ACL CA SSL CA LDAP Web SSL SSL Web CA Web certmap.conf certmap.conf certmap.conf ID SSL certmap.conf LDAP magnus.conf AcceptTimeout LDAP Web MD5 7 91

92 / LDAP Sun Java System Directory Server Directory Server LDAP Web dbswitch.conf digestauth ACL 7 1 ACL "default" "basic" "digest" method = digest ACL Authorization 401 Authorization nonce nonce 401 stale=true 401 server_root/https-server_name/config/ magnus.conf DigestStaleTimeout nonce magnus.conf DigestStaleTimeout seconds seconds nonce nonce 401 LDAP LDAP 401 // Sun Java SystemWeb Server

93 ACL Authorization-Info /IP Administration Server Web IP /IP /IP / /IP DNS /IP DNS DNS Server Manager DNS DNS DNS DNS CGI IP IP iponly=1 obj.conf AddLog fn="flex-log" name="access" AddLog fn="flex-log" name="access" iponly=1 ACL ACL magnus.conf ACLCacheLifetime ACL ACLCacheLifetime ACLCacheLifetime LDAP 120 LDAP LDAP magnus.conf ACLUserCacheSize 200 magnus.conf ACLGroupCacheSize 4 LDAP ACL NSAPI Developer s Guide 7 93

94 ACL CLI ACL wadm> set-acl-cache-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 property=value CLI set-acl-cache-prop(1) enabled true max-age max-groups-per-user max-age (access control list, ACL) ACL John misc Web ACL ACL SSL > 3. ACL ACL ACL (Access Control List, ACL) ACL > 94 Sun Java SystemWeb Server

95 3. ACL 7 2 ACL /URI/ URI "/sales""/usr/sun/server4/docs/cgi-bin/*" keyfile 1. HTTP SSL 2. SSL SSL "SSL" 3. Web Server MD5 auth-db auth-db LDAP auth-db 4. API 40 Web ACL URL URL 7 95

96 CLI CLI ACL wadm> set-acl --user=admin --password-file=admin.pwd --host=serverhost --port= vs=config1_vs_1 --config=config1 --aclfile=aclfile1 CLI set-acl(1) (Access Control Entry, ACE) (Access Control Entry, ACE) > ACE 7 3 ACE (ACE) Sun Java SystemWeb Server

97 7 3 ACE Administration Server Web Administration Server Web IP IP IP IP IP DNS * IP *.sun.com Administration Server IP * *.sun.com *users.sun.com * *.sun.com users.*.com IP * * * * IP 198.* 198.*

98 .htaccess 7 3 ACE Web HTTP GET HEAD POST INDEX HTTP PUT DELETE MKDIR RMDIR MOVE CGI Java applet index.html URI http_head (access control expression, ACE) ACE ACE ACE ACE ACE ACE ACE ACE.htaccess.htaccess.htaccess.htaccess PathCheck.htaccess /.htaccess SSL.htaccess HTTP.htaccess.htaccess.htaccess /sun/server/docs 98 Sun Java SystemWeb Server

99 /sun/server/docs/reports/index.html /sun/server/docs/reports/.htaccess /sun/server/docs/.htaccess.htaccess CGI.htaccess /sun/server/docs CGI /sun/server/docs/cgi-bin/program.cgi CGI CGI /sun/server/docs/.htaccess /sun/server/docs/cgi-bin/.htaccess /sun/server/docs/cgi-bin CGI /sun/server/docs/cgi-bin/.htaccess /sun/server/docs/.htaccess /sun/server/docs/cgi-bin CGI (Denial-of-Service, DoS) Web Sun Java System Web Server URI DoS DoS > > > 7 4 RPS / 7 99

100 7 4 RPS (request per second, RPS) 30 RPS HTTP HTTP 503 CLI CLI wadm> enable-request-limits --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 CLI enable-request-limits(1) > 100 Sun Java SystemWeb Server

101 8 Sun Java System Web Server (Distinguished Name, DN) 103 LDIF Administration Server (ACL) (Lightweight Directory Access Protocol, LDAP) Sun Java System Directory Server LDAP TCP/IP Sun Java System Directory Server Web Server 7.0 default 101

102 (Distinguished Name, DN) server.xml Web Server 7.0 LDAP LDAP file HTTP HTTP LDAP (Distinguished Name, DN) LDAP (Distinguished Name, DN) DN DN DN DN Sun Microsystems DN 102 Sun Java SystemWeb Server

103 Doe,o=Sun Microsystems Inc.,c=US uid ID e cn o c / DN / LDAP LDIF Directory Server Administration Server LDIF LDIF LDIF Directory Server LDIF LDIF LDIF ldapmodify LDIF LDIF LDIF Directory Server LDIF auth-db auth-db auth-db ACL 1. LDAP LDAP Sun Java System Directory Server 2. auth-db auth-db a. keyfile keyfile b. digestfile digestfile keyfile HTTP c. htaccess 3. PAM PAM Sun Java System Web Server 7.0 auth-db PAM auth-db Solaris PAM Web Solaris Web 8 103

104 Solaris 9 10 PAM auth-db Web > > > > PAM LDAP DN PAM CLI wadm> create-authdb --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --url=ldap://ldapserver.com:20002/dc=xxx,dc=sun,dc=com LDAP1 CLI create-authdb(1) URL URL ldap://ds.example.come/dc=example,dc=com LDAP 104 Sun Java SystemWeb Server

105 Administration Server LDAP auth-db > ID ID LDAP Administration Server DN ID ID Directory Server ldapmodify ID CLI CLI wadm> create-user --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --authdb=keyfile1 --full-name=keyfile-config1-u1 keyfile-config1-u1 CLI create-user(1) > 8 105

106 5 keyfile digestfile CLI CLI wadm> create-group --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --authdb=ldap1 group1 CLI create-group(1) > ID ID keyfile/digestfile keyfile/digestfile CLI CLI wadm> delete-user --user=admin --password-file=admin.pwd --host=serverhost --port= config config1 --authdb KEYFILE1 user1 CLI delete-user(1) 106 Sun Java SystemWeb Server

107 > ID ID CLI CLI wadm> delete-group --user=admin --password-file=admin.pwd --host=serverhost --port= config config1 --authdb LDAP1 group1 CLI delete-group(1) LDAP Web Server 7.0 Marketing LDAP CN uniquemembers / memberurls / membercertdescriptions CN=<Groupname> LDAP URL memberurl Sales LDAP "ou=sales,o=airius.com" memberurl ldap:///ou=sales,o=sun??sub?(uid=*) 8 107

108 "ou=sales,o=sun" uid Sales membercertdescription ACL SSL LDAP Administration Server DN Administration Server groupofurls objectclass memberurl LDAP URL LDAP ACL DN Web Server department=marketing DN department=marketing department=marketing DN ACL Web Server Web Server LDAP objectclass = groupofurls groupofurls memberurl LDAP URL URL ldap:///o=mcom.com??sub?(department=marketing) 108 Sun Java SystemWeb Server

109 "o=mcom.com" "marketing" LDAP URL DN LDAP LDAP URL DN DN ACL Sun ONE Web Server LDAP ACL LDAP cn Web Server cn (commonname) ACL dbswitch.conf ACL LDAP URL ACL ACL ACL LDAP "staff" ACL groupof<anything> CN "staff" DN groupofuniquenames LDAP URLgroupOfURLs objectclass = groupofuniquemembers objectclass = groupofurl"uniquemember" "memberurl" DN Web Server DN Web Server memberurl DN DN DN DN memberurl Administration Server LDAP URL ldap:///<basedn>?<attributes>?<scope>?<(filter)> 8 109

110 8 1 <base_dn> <attributes> <scope> (Distinguished Name, DN) LDAP "o=mcom.com" "cn,mail,telephonenumber" base URL (<base_dn>) one URL (<base_dn>) sub URL (<base_dn>) <(filter)> Administration Server <attributes> <scope> <(filter)> URL 110 Sun Java SystemWeb Server

111 MIME 113 (UNIX/Linux) 115 URL 116 URL 117 CGI 119 CGI Windows Shell CGI (UNIX/Linux) 126 HTML P3P 111

112 MIME > URL URI CLI CLI wadm> create-document-dir --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri-prefix=/config1_uri --directory=../docs1 CLI create-document-dir(1) MIME text/plain MIME text/plain text/html text/richtext image/tiff image/jpeg image/gif application/x-tar application/postscript 112 Sun Java SystemWeb Server

113 (UNIX/Linux) application/x-gzip audio/basic MIME > MIME CLI CLI MIME wadm> create-mime-type --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --extensions=sxc application/sxc CLI create-mime-type(1) MIME MIME MIME (mime.types) (UNIX/Linux) Web URL URL ~ public_html ~jdoe jdoe Jane ~/jdoe/public_html/aboutjane.html 9 113

114 (UNIX/Linux) URL ~ UNIX/Linux HTML public_html * /etc/passwd username:*:*:groupid:*:homedir:* 6 7 URL /etc/passwd jdoe::1234:1234:john Doe:/home/jdoe:/bin/sh jdoe::1234:1234:john Doe:/home/jdoe/:/bin/sh Sun Java System Web Server URI 404 Web Sun Java SystemWeb Server

115 URL /etc/passwd Web URL URL HTTP URL HTTP URL URL URL URL film.sun.com URL URL /info/movies URL URL URL 4. URL 5. URL 9 115

116 URL 9 1 URL URL URL URL URL URL HTTP URL URL URL URL URL HTTP URL / URL URL HTML URL URL URL CLI CLI URL wadm> create-url-redirect --user=admin --password-file=admin.pwd --host=serverhost --port= no-ssl --config=config1 --vs=config1_vs_1 --uri-prefix=/redirect --target-url= CLI create-url-redirect(1) URL Sun Java System Web Server 7.0 server.xml URL SAF SAF URI from url url-prefix URL Sun Java System Web Server 7.0 from from URI obj.conf <If> <Elseif> <Else> SAF - obj.conf - SAF Sun Java System Web Server 7.0 URL Apache HTTP mod_rewrite Apache mod_rewrite <If> URI SAF 116 Sun Java SystemWeb Server

117 CGI NameTrans fn="redirect" from="/site1" url=" <If $uri =~ ^/site1 > NameTrans fn="redirect" url=" </If> from /site1/* <If $uri =~ ^/site1/(.*) > NameTrans fn="redirect" url=" </If> <If> (.*) $1 url $1 obj.conf /site1/download <If> redirect mod_rewrite mod_rewrite <If> URL <If> SAF 302 Sun Java System Web Server 7.0 status="301" 301 NameTrans fn="redirect" from="/path" url=" status="301" CGI (Common Gateway Interface, CGI) UNIX/Linux CGI Bourne shell Perl UNIX/Linux CGIStub CGI CGI CGI CGIStub Sun Java System Web Server Performance Tuning and Sizing Guide MinCGIStub MaxCGIStub CGIStubIdleTimeout 9 117

118 CGI Windows CGI C++ Windows Windows Visual Basic CGI Windows CGI Path server_root/bin/https/bin CGI CGI Sun Java System Web Server Developer s Guide CGI Web Web Server 7.0 CGI CGI CGI 118 Sun Java SystemWeb Server

119 CGI CGI.cgi.exe.bat CGI CGI HTML CGI CGI HTML CGI.cgi.exe.bat CGI CGI CGI.cgi.exe.bat MIME CGI MIME CGI Sun Java System Web Server GUI CGI CGI CGI 4. CGI 5. CGI 9 119

120 CGI 9 2 CGI CGI Chroot Nice URL URL CGI cgi-bin URL CGI URL /cgi-bin/program-name CGI URL URL CGI CGI CGI chroot nice CGI nice 0 nice 0 CGI 19 CGI nice -1 CGI CGI CGI URL CGI CGI CGI HTML CGI CGI CGI 4. CGI CGI.bat.exe.cgi CGI CGI 120 Sun Java SystemWeb Server

121 Windows Shell CGI CLI CGI CGI CGI.cgi.exe.bat CLI CGI wadm> create-cgi-dir --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri-prefix=/config1_urlprefix --directory=/cgi-dir CLI create-cgi-dir(1).exe CGI.exe.exe magnus-internal/cgi.exe application/octet-stream MIME Server Manager MIME.exe CGI obj.conf Windows Shell CGI Windows Shell CGI Shell CGI Windows CGI hello.pl shell CGI.pl Windows.pl C:\\bin\\perl.exe hello.pl 9 121

122 c:\\bin\\perl.exe hello.pl shell CGI shell CGI Sun ONE Web Server MIME shell CGI Windows Windows CGI HTML CGI CGI 5. CLI CLI wadm> set-error-page --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --code=500 --error-page=/server-error-uri-new CLI set-error-page(1) 122 Sun Java SystemWeb Server

123 HTTP MIME charset Content-Type: text/html;charset=iso Content-Type: text/html;charset=iso-2022-jp RFC charset x- us-ascii iso iso-2022-jp x-sjis x-euc-jp x-mac-roman us-ascii ansi_x iso-ir-6 ansi_x iso_646.irv:1991 ascii iso646-us us ibm367.0 cp367.0 so_ latin1 iso_ iso_8859-1: iso-ir-100 ibm819 cp

124 NONE CGI HTML (.shtml) CGI HTML :LASTMOD: 124 Sun Java SystemWeb Server

125 (UNIX/Linux) CLI CLI wadm> enable-document-footer --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --mime-type=text/html --date-format=%b --footer="config1 footer" CLI enable-document-footer(1) (UNIX/Linux) UNIX/Linux / 9 125

126 HTML CLI CLI wadm> set-symlinks-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 allow-soft-links=true allow-hard-links=false directory=/abc CLI set-symlinks-prop(1) HTML HTML HTML HTML HTML HTML HTML HTML/SSI HTML HTML exec HTML exec HTML.shtml HTML HTML UNIX/Linux UNIX/Linux HTML Sun Java System Web Server Developer s Guide 126 Sun Java SystemWeb Server

127 CLI CLI HTML wadm> enable-parsed-html --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs1 CLI enable-parsed-html(1) Sun Java System Web Server HTTP 1.1 HTTP HTTP/1.1 (RFC 2068)

128 CLI CLI wadm> set-cache-control-directives --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 public=true private=true must-revalidate=true CLI set-cache-control-directives(1) Sun Java System Web Server 7.0 HTTP Web Sun Java System Web Server Accept-encoding: gzip Web Server myfile.html myfile.html myfile.html.gz Accept-encoding > / 128 Sun Java SystemWeb Server

129 Vary Vary: Accept-encoding Vary: Accept-encoding Vary: Accept-encoding 4 Sun Java System Web Server 7.0 HTML Web / Vary Vary: Accept-encoding Vary: Accept-encoding Vary: Accept-encoding (zlib)

130 CLI CLI wadm> enable-on-demand-compression --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --insertvaryheader=true --fragment-size=100 --compression-level=5 CLI enable-on-demand-compression(1) Web URI > URI URI URI URL URL 130 Sun Java SystemWeb Server

131 > "URI" URI URI URL URL Cookie Cookie Cookie URI URI URI URI ":" ID ID ID HTTP Cookie Cookie Cookie Cookie ID 9 131

132 P3P CLI 1. create-reverse-proxy wadm> create-reverse-proxy --user=admin --password-file=admin.pwd --host=serverhost --port= config=test --vs=test --uri-prefix=// --server= CLI create-reverse-proxy(1) 2. obj.conf NameTrans fn="map" from="/" name="reverse-proxy-/" to=" <Object name="reverse-proxy-/"> Route fn="set-origin-server" server=" </Object> <Object ppath=" Service fn="proxy-retrieve" method="*" </Object> --server https P3P 132 P3P (Platform for Privacy Preference, P3P) Web P3P P3P "P3P" 132 Sun Java SystemWeb Server

133 P3P P3P URL P3P P3P P3P CLI P3P wadm> enable-p3p --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --policy-url= CLI enable-p3p(1) 9 133

134 134

135 10 WebDAV Web 136 WebDAV 136 WebDAV 139 WebDAV 140 WebDAV 141 WebDAV 143 WebDAV 143 WebDAV 144 WebDAV URI Translate:f Sun Java System Web Server 7.0 WebDAV Web Web WebDAV HTTP/1.1 Web WebDAV WebDAV Sun Java System Web Server 7.0 WebDAV WebDAV Adobe(R) GoLive(R) Macromedia(R) DreamWeaver(R) WebDAV Web Sun Java System Web Server 7.0 WebDAV WebDAV WebDAV PROPFIND XML WebDAV server.xml DAV 135

136 WebDAV WebDAV server.xml DAVCOLLECTION WebDAV WebDAV HTTP/1.1 HTTP Web HTML XML WebDAV WebDAV PROPFIND PROPPATCH Web WebDAV GET PUT DELETE MKCOL WebDAV WebDAV LOCK UNLOCK WebDAV COPY MOVE Web Sun Java System Web Server 7.0 WebDAV RFC 2518 RFC 2518 WebDAV WebDAV WebDAV URI URI URL URL URL URI URI URI URI foo.jsp JSP URI /docs/date.jsp HTML Java foo.jsp GET Java foo.jsp 136 Sun Java SystemWeb Server

137 WebDAV URI /publish/docs foo.jsp /docs /publish/docs/foo.jsp /docs/foo.jsp Java URI WebDAV WebDAV URI URI WebDAV URI URI URI URI URI URL WebDAV URL WebDAV URL / "creationdate" "author" getcontentlength GET Sun Java System Web Server creationdate displayname getcontentlanguage getcontentlength getcontenttype gettag getlastmodified lockdiscovery resourcetype supportedlock executable 10 WebDAV Web 137

138 WebDAV Sun Java System Web Server executable executable PROPPATCH PROPPATCH /test/index.html HTTP/1.1 Host: sun Content-type: text/xml Content-length: XXXX <?xml version="1.0"?> <A:propertyupdate xmlns:a="dav:" xmlns:b=" <A:set> <A:prop> <B:executable>T</B:executable> </A:prop> </A:set> </A:propertyupdate> Sun Java System Web Server HTTP WebDAV HTTP/1.1 HTTP WebDAV Destination: Lock-Token: Timeout: DAV: If: Depth: Overwrite: HTTP WebDAV HTTP WebDAV HTTP GET PUT DELETE WebDAV HTTP 138 Sun Java SystemWeb Server

139 WebDAV COPY Depth: Destination: COPY Overwrite: MOVE Depth: Destination: MOVE Overwrite: MKCOL PUT PROPPATCH PROPFIND PROPFIND 0 1 infinity Depth: 0 URI 1 URI infinity URI LOCK Lock-Token: UNLOCK Lock-Token: WebDAV Administration Server WebDAV WebDAV magnus.conf file Init fn="load-modules" shlib="/s1ws6.1/lib/libdavplugin.so" funcs="init-dav,ntrans-dav,pcheck-dav,service-dav" shlib_flags="(global now)" Init fn="init-dav" LateInit=yes init-dav WebDAV WebDAV CLI wadm> enable-webdav --user=admin --password-file=admin.pwd --host=serverhost --port= config=test CLI enable-webdav(1) 10 WebDAV Web 139

140 WebDAV WebDAV WebDAV WebDAV wadm> enable-dav-collection --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri=/dav_config1 CLI enable-dav-collection(1) WebDAV WebDAV wadm> disable-dav-collection --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri=/dav_config1 CLI disable-dav-collection(1) WebDAV WebDAV wadm> create-dav-collection --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri=/dav_config1 --source-uri=/dav_config1 CLI create-dav-collection(1) WebDAV WebDAV wadm> list-dav-collections --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 CLI list-dav-collections(1) WebDAV WebDAV 140 Sun Java SystemWeb Server

141 WebDAV wadm> delete-dav-collection --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri=/dav_config1 CLI delete-dav-collection(1) WebDAV WebDAV WebDAV wadm> set-webdav-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 acl-max-entries=120 CLI set-webdav-prop(1) WebDAV WebDAV wadm> get-webdav-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 CLI get-webdav-prop(1) WebDAV WebDAV wadm> set-dav-collection-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs=config1_vs_1 --uri=/dav_config1 min-lock-timeout=1 CLI set-dav-collection-prop(1) WebDAV WebDAV wadm> get-dav-collection-prop --user=admin --password-file=admin.pwd --host=serverhost --port=8989 -config=config1 --vs=config1_vs_1 --uri=/dav_config1 10 WebDAV Web 141

142 WebDAV CLI get-dav-collection-prop(1) WebDAV WebDAV 10 1 WebDAV URI PROPFIND -1 XML 8192 (8K) PROPFIND "infinity" WebDAV URI PROPFIND WebDAV 0 WebDAV ACL DAV ACL ACE WebDAV ACL WebDAV ACL WebDAV ACL DAV WebDAV Sun Java SystemWeb Server

143 WebDAV 10 1 WebDAV WebDAV WebDAV WebDAV WebDAV wadm> disable-webdav --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 CLI disable-webdav(1) WebDAV WebDAV WebDAV 10 2 WebDAV keyfile HTTP SSL SSL SSL "SSL" Web Server MD5 auth-db auth-db LDAP auth-db API 10 WebDAV Web 143

144 WebDAV URI Translate:f 10 2 WebDAV 40 Web ACL WebDAV URI Translate:f WebDAV HTTP GET PUT WebDAV Microsoft WebDAV Translate:f WebDAV Microsoft WebFolders Sun Java System Web Server7.0 Translate:f Translate:f Sun Java System Web Server URI WebDAV URI URI Translate:f URI URI dav-src ACL ACL deny (all) user = "anyone"; URI Sun Java System Web Server Sun Java System Web Server opaquelocktoken URI (Universal Unique Identifier, UUID) ISO Sun Java SystemWeb Server

145 Sun Java System Web Server server.xml DAV DAVCOLLECTION minlocktimeout minlocktimeout -1 0 Timeout Timeout Timeout Infinite WebDAV Timeout server.xml minlocktimeout Timeout server.xml minlocktimeout server.xml minlocktimeout Sun Java System Web Server 10 WebDAV Web 145

146 10 3 Sun Java System Web Server Timeout Infinite -1-1 Second-xxx xxx server.xml minlocktimeout xxx xxx server.xml minlocktimeout server.xml minlocktimeout CLI CLI wadm> expire-lock --user=admin --password-file=admin.pwd --host=serverhost--port= config=config1 --vs=config1 --collection-uri=/dav1 --lock-uri=/dav1/file.html --opaque-token=opaquelocktoken CLI expire-lock(1) opaque-token ID CLI wadm> list-locks --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --vs config1 --collection-uri=/dav1 CLI list-locks(1) 146 Sun Java SystemWeb Server

147 11 Java Web Java wadm Java Sun Java System Web Server Java Sun Java System Web Server Java Web 147 Java Sun Java System Web Server 148 Java 149 JVM 151 Java Web 153 Servlet Java 165 SOAP Java Sun Java SystemWeb Server Java Java 1 2 Java "Java" > 147

148 Java Java / Java Java Java Java Java SE config HTTP JVM / HTTP CLI Java wadm> enable-java --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 CLI enable-java(1) Java JVM 1 2 Java "Java" > XML 148 Sun Java SystemWeb Server

149 JVM com.sun.appserv.bytecodepreprocessor JVM Java JVM JVM 1 2 JVM "Java" > JVM JVM JVM / JVM JVM JVM JVM -Djava.security.auth.login.config=login.conf, -Djava.util.logging.manager=com.iplanet.ias.server.logging. ServerLogManager and -Xms128m -Xmx256m CLI CLI JVM wadm> create-jvm-options --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 -Dhttp.proxyHost=proxyhost.com -Dhttp.proxyPort=8080 CLI create-jvm-options(1) JVM JVM Java 11 Java Web 149

150 JVM JVM "Java" > JVM JVM JVM CLI JVM CLI CLI JVM wadm> create-jvm-profiler --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 CLI create-jvm-profiler(1) Java JVM JPDA Java Platform Debugger Architecture Java Sun Java System Web Server JPDA JVM "Java" > JVM Java 150 Sun Java SystemWeb Server

151 JavaWeb 4 JVM JPDA -Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=7896 suspend=y JVM JVM JVM address=port_number JPDA Java Web Web Web Web Web Web.war Web Web wadm IDE Web Web Web > Web Web Web 11 Java Web 151

152 JavaWeb Web URI URI Web / JSP Web JSP Web Web CLI wadm> add-webapp --user=admin --password-file=admin.passwd --host=localhost --port= config=config1 --vs=hostname --uri=/hello /home/test/hello.war CLI add-webapp(1) Web file-on-server wadm> add-webapp --user=admin-user --password-file=admin.passwd --port= vs=vs1 --config=config1 --file-on-server --uri=/mywebapp /space/tmp/mywebapp JSP Web JSP precompilejsp wadm> add-webapp --user=admin-user --password-file=admin.passwd --port= vs=vs1 --config=config1 --file-on-server --uri=/mywebapp --precompilejsp mywebapp.war 152 Sun Java SystemWeb Server

153 Servlet Servlet servlet 1 2 Servlet "Java" > Servlet Servlet servlet 11 1 Servlet servlet finestfiner fine info warning failure config security catastrophe Web ANYONE Servlet SingleThreadedServlet servlet Cookie ID Servlet false servlet cookie true ID false 11 Java Web 153

154 11 1 Servlet Cookie Dynamic/True/False JSESSIONID cookie (HTTPS) dynamic Cookie True false Java Server Java Web Java singleton RMI Web 1 2 "Java" > 154 Sun Java SystemWeb Server

155 3 Java com.sun.appserv.server.lifecyclelistener Java / "Java" > 11 Java Web 155

156 Java CLI com.mylifecyclemodule test mylifecyclemodule Java wadm> create-lifecycle-module --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --class=com.sun.webserver.tests.lifecycleclass LifecycleTest CLI create-lifecycle-module(1) Java wadm> list-lifecycle-modules --config=test CLI list-lifecycle-modules(1) Java wadm> create-lifecycle-module-userprop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --module=lifecycletest info=testing CLI create-lifecycle-module-userprop(1) Java wadm> set-lifecycle-module-prop --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --module=lifecycletest class-path=/space CLI set-lifecycle-module-prop(1) Java Web SQL URL Java EE Java (Java Naming and Directory Interface, JNDI) Sun Java System Web Server Java EE JDBC JDBC Java JNDI 156 Sun Java SystemWeb Server

157 Java JDBC JDBC Java EE Sun Java System Web Server JDBC API API JDBC API JDBC Java EE JDBC Java JDBC Java EE Sun Java System Web Server JDBC API SQL Java JDBC SQL (database management system, DBMS) DBMS DBMS JDBC CLI JDBC wadm> create-jdbc-resource --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --datasource-class=oracle.jdbc.pool.oracledatasource jdbc CLI create-jdbc-resource(1) com.pointbase.jdbc.jdbcdatasource JDBC JDBC 157 Sun Java System Web Server JDBC Sun Java SystemWeb Server JDBC JDBC JDBC 160 JDBC 11 Java Web 157

158 Java 11 2 JDBC Oracle oracle.jdbc.pool.oracledatasource url user password Oracle SJS JDBC com.sun.sql.jdbcx.oracle. OracleDataSource servername portnumber user password SID DB2 IBM com.ibm.db2.jdbc.db2datasource servername databasename portnumber user password drivertype DB2 SJS JDBC com.sun.sql.jdbcx.db2. DB2DataSource databasename locationname packagename password portnumber servername user MS SQLServer MS SJS JDBC com.ddtek.jdbcx.sqlserver. SQLServerDataSource com.sun.sql.jdbcx.sqlserver. SQLServerDataSource databasename password user servername portnumber databasename password user servername portnumber Sybase com.sybase.jdbcx.sybdatasource databasename password portnumber servername user 158 Sun Java SystemWeb Server

159 Java 11 2 JDBC Sybase SJS JDBC com.sun.sql.jdbcx.sybase. SybaseDataSource databasename password user portnumber servername MySQL MM org.gjt.mm.mysql.jdbc2.optional. MysqlDataSource servername port databasename user password Informix com.informix.jdbcx.ifxdatasource portnumber databasename IfxIFXHOST Informix IP servername user password Informix SJS JDBC com.sun.sql.jdbcx.informix. InformixDataSource databasename informixserver Informix password portnumber severname PostgreSQL org.postgresql.ds. PGSimpleDataSource servername databasename portnumber user password Apache Derby org.apache.derby.jdbc. EmbeddedDataSource databasename user password 11 Java Web 159

160 Java JDBC JDBC "Java" > JDBC JNDI JDBC JDBC JDBC JDBC JDBC JDBC JDBC Sun Java System Web Server 7.0 JDBC jdbc-resource Oracle JDBC 1 2 JDBC wadm JDBC JDBC wadm> create-jdbc-resource --config=test --datasourceclass=oracle.jdbc.pool.oracledatasource jdbc/mypool 160 Sun Java SystemWeb Server

161 Java url user password JDBC wadm> add-jdbc-resource-userprop --config=test --jndi-name=jdbc/mypool url=jdbc:oracle:thin:@hostname:1521:mysid user=myuser password=mypassword Web wadm> set-jdbc-resource-prop --config=test --jndi-name=jdbc/mypool connection-validation-table-name=test connection-validation=table wadm> set-jdbc-resource-prop --config=test --jndi-name=jdbc/mypool max-connections=100 wadm> deploy-config test JDBC Jar jar lib lib jar JVM JDBC jar wadm> set-jvm-prop --config=test class-path-suffix=/export/home/lib/classes12.jar 8 Web WEB-INF/web.xml <web-app>... <resource-ref> <description>jdbc Connection Pool</description> <res-ref-name>jdbc/myjdbc</res-ref-name> <res-type>javax.sql.datasource</res-type> <res-auth>container</res-auth> </resource-ref>... </web-app> 11 Java Web 161

162 Java WEB-INF/sun-web.xml <sun-web-app>... <resource-ref> <res-ref-name>jdbc/myjdbc</res-ref-name> <jndi-name>jdbc/mypool</jndi-name> </resource-ref>... </sun-web-app> Context initcontext = new InitialContext(); Context webcontext = (Context)context.lookup("java:/comp/env"); DataSource ds = (DataSource) webcontext.lookup("jdbc/myjdbc"); Connection dbcon = ds.getconnection(); "Java" > 11 3 JNDI JNDI JDBC 162 Sun Java SystemWeb Server

163 Java 11 3 javax.naming.spi.objectfactory CLI CLI CLI wadm> create-custom-resource --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --res-type=samples.jndi.customresource.mybean --factory-class=samples.jndi.customresource.mycustomconnectionfactory custom CLI create-custom-resource(1) JNDI JNDI Java (Java Naming and Directory Interface, JNDI) JNDI JNDI JNDI "Java" > JNDI JNDI JNDI 11 Java Web 163

164 Java 11 4 JNDI JNDI JNDI JNDI JNDI JNDI CLI CLI CLI JNDI wadm> create-external-jndi-resource --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --res-type=org.apache.naming.resources.resource --factory-class=samples.jndi.externalresource.myexternalconnectionfactory --jndilookupname=index.html external-jndi CLI create-external-jndi-resource(1) JMS Java EE Sun Java System Web Server Internet Java EE JavaMail API Internet JavaMail "Java" > 164 Sun Java SystemWeb Server

165 SOAP 11 5 JNDI /IP com.sun.mail.imap.imapstore com.sun.mail.smtp.smtptransport CLI wadm> creat -resource --config=test --server-host=localhost --mail-user=nobody --from=xyz@foo.com mail/session CLI creat -resource(1) SOAP Java SOAP 11 Java Web 165

166 SOAP SOAP "Java" > Web SOAP SOAP SOAP 11 6 SOAP SOAP javax.security.auth.xxx / sender content XML before-content after-content / sender content XML CLI 166 Sun Java SystemWeb Server

167 CLI CLI SOAP wadm> create-soap-auth-provider --user=admin --password-file=admin.pwd --host=serverhost --port= config=config1 --class-name=javax.security.auth.soapauthprovider soap-auth CLI create-soap-auth-provider(1) Sun Java System Web Server 7.0 Web HTTP HTTP 11 Java Web 167

168 Web Server C Web Server B Web Server D 1 2 "Java" > 168 Sun Java SystemWeb Server