Release Notes for Sun ONE Web Server 6.1 SP1

Release Notes for Sun™ ONE Web Server

Version 6.1 SP1

Part Number 817-5169-10

January 2004

Sun™ Open Network Environment (Sun ONE) Web Server 6.1 Service Pack 1 (hereafter referred to as Sun ONE Web Server 6.1 SP1) contains important security vulnerability fixes. All users of Sun ONE Web Server, especially those with sites that utilize Secure Sockets Layer (SSL) version 3 or Transport Security Layer (TLS), are strongly encouraged to install this service pack. This release also provides support for the HP-UX and AIX platforms.

These release notes contain important information available at the time of release of Sun ONE Web Server 6.1 SP1, including information about features and enhancements, known limitations and problems, technical notes, and pointers to additional resources. Review the release notes prior to installing and configuring your software, and then periodically thereafter for the most up-to-date information.

Complete Sun ONE Web Server documentation can be found at the following location:
http://docs.sun.com/db/coll/S1_websvr61_en

These release notes contain the following sections:

Features and Enhancements

Sun ONE Web Server provides the following features and enhancements:

Java Servlet 2.3 and JavaServer Pages (JSP) 1.2 Support

Sun ONE Web Server includes a Java™ 2 Platform, Enterprise Edition (J2EE™)-compliant implementation of the Java™ Servlet 2.3 and JavaServer Pages™ (JSP™) 1.2 specifications. A J2EE-compliant web container provides the flexibility and reliability needed to design and deploy web applications that comply with Java™ technology standards. Web applications can be deployed on a per virtual server basis.

For information about these technologies, see the following resources:

For information about developing servlets and JSPs in Sun ONE Web Server, see the Sun ONE Web Server 6.1 Programmer’s Guide to Web Applications.

J2SE Platform 1.4.1_03 Support

Sun ONE Web Server supports Java™ 2 Platform, Standard Edition (J2SE™) 1.4.1_03 (32-bit only; 64-bit is not supported). J2SE software is bundled with the Web Server and installed during installation, if you choose to install it. You can also install your own JDK at a later time, following installation of the Web Server. If you plan to use the Administration server, a JDK must be installed.

WebDAV Support

Sun ONE Web Server supports the Web-based Distributed Authoring and Versioning (WebDAV) protocol, which enables collaborative web publishing with the following features:

WebDAV provides integrated support for content metadata, name space management, and overwrite protection. These technologies, combined with the many authoring tools that support WebDAV, provide an ideal development platform for collaborative environments.

NSAPI Filters Support

As of the 6.1 release, Sun ONE Web Server extends the Netscape Server Application Programmer's Interface (NSAPI) to support NSAPI filters.

Filters enable the custom processing of HTTP request and response streams, allowing a function to intercept and potentially modify the content presented to or generated by another function. For example, a plugin could install an NSAPI filter to intercept an XML page generated by another plugin's Server Application Function (SAF), then transform that XML page into an HTML, XHTML, or WAP page appropriate for the client. Alternatively, an NSAPI filter could decompress data received from a client before presenting it to another plugin.

For more information, see the Sun ONE Web Server 6.1 NSAPI Programmer’s Guide.

HTTP Compression Support

Sun ONE Web Server supports content compression, which allows you to increase delivery speed to clients and serve higher content volumes without incurring a corresponding increase in hardware expenses. Content compression reduces content download time, a benefit most apparent to users of dial-up and high-traffic connections.

For more information, see the Sun ONE Web Server 6.1 Administrator’s Guide.

Search Engine Support

Sun ONE Web Server supports a Java-based search engine that provides full-text search indexing and retrieval. The search feature allows users to search documents on the server and display results on a web page. Server administrators create the indexes of documents against which users will search, and can customize the search interface to meet specific needs.

For more information, see the Sun ONE Web Server 6.1 Administrator’s Guide.

Enhanced Security

Sun ONE Web Server allows you to restrict access using flat file authentication. As of the 6.1 release, Sun ONE Web Server now supports the Java Security Manager. The Security Manager is disabled by default when you install the product, which may improve performance significantly for some types of applications. Enabling the Security Manager may improve security by restricting the rights granted to your J2EE web applications. To enable the Security Manager, "uncomment" entries in the server.xml file:

<JVMOPTIONS>-Djava.security.manager</JVMOPTIONS>
<JVMOPTIONS>-Djava.security.policy=instance_dir/config/server.policy</JVMOPTIONS>

where instance_dir is the path to the installation directory of this server instance.

For more information about server.xml, see the Sun ONE Web Server 6.1 Administrator’s Configuration File Reference.

JNDI Support

Sun ONE Web Server supports the Java Naming and Directory Interface™ (JNDI), which provides seamless connectivity to heterogeneous enterprise naming and directory services.

JDBC Support

Sun ONE Web Server provides out-of-the-box, seamless Java™ DataBase Connectivity (JDBC™), and supports a wide range of industry-standard and customized JDBC drivers.

Sun ONE Studio 5 Support

Sun ONE Web Server supports Sun™ ONE Studio 5, Standard Edition. Sun ONE Studio technology is Sun's powerful, extensible, integrated development environment (IDE) for Java technology developers. Sun ONE Studio 5 is based on NetBeans™ software, and integrated with the Sun ONE platform. (Sun ONE Web Server 6.1 and above also supports NetBeans 3.5 and 3.5.1.)

Sun ONE Studio support is available on all platforms supported by Sun ONE Web Server 6.1 SP1. The plugin for the Web Server can be obtained in the following ways:

Please note that the Sun ONE Studio 5 plugin for Sun ONE Web Server 6.1 SP1 works only with a local Web Server (that is, with the IDE and the Web Server on the same machine).

The behavior of the Sun ONE Studio 5 plugin for Sun ONE Web Server is the same as that for Sun™ ONE Application Server 7. For information about using the web application features in Sun ONE Studio 5, see the following tutorial
http://developers.sun.com/tools/javatools/documentation/s1s5/cdshop.pdf

Set the Sun ONE Web Server 6.1 SP1 instance as the default, and then take the same actions described in the tutorial.

Also see the following NetBeans tutorial
http://usersguide.netbeans.org/tutorials/webapps/index.html

For more information about Sun ONE Studio 5, visit
http://www.sun.com/software/sundev/jde/

For additional developer resources, see Additional Sun Resources in these release notes.

Using Sun ONE Studio 5 for Debugging

Sun ONE Studio 5 can be used for "remote debugging" if you want to manually attach the IDE to a remote Web Server started in debug mode. The steps are as follows:

  1. Using the Sun ONE Web Server Administration interface, restart the server instance in debug mode (Server Manager > JVM General > Debug Enabled).
  2. Note the JPDA port number.
  3. Start the IDE.
  4. Choose Debug > Start.
  5. Select the dt_socket method, and then enter the remote machine name and the JPDA port number.
  6. At that moment, any breakpoint created in the IDE on servlet source code of a deployed application will be active.

Active Server Pages Support

Sun ONE Web Server 6.1 SP1 supports the Active Server Pages 3.0 specification through Sun™ ONE Active Server Pages version 4.0.1 (formerly Sun Chili!Soft ASP). Sun ONE Active Server Pages adds a secure, enterprise-grade Active Server Pages engine to the Sun ONE Web Server.

Sun ONE Web Server 6.1 SP1 provides support for Sun ONE Active Server Pages 4.0.1 on the following platforms:

A license is not required for Sun ONE Active Server Pages if you are installing to the Sun ONE Web Server. The Sun ONE Active Server Pages installer is available on the Companion CD if you purchased the Sun ONE Web Server Media Kit, or by download from the following location:
http://wwws.sun.com/software/chilisoft/index.html

Please note the following:

For more information about Sun ONE Active Server Pages, visit the URL listed above.

PHP Compatibility

Sun ONE Web Server 6.1 SP1 is compatible with PHP, the versatile and widely-used Open Source web scripting language. PHP runs on all major operating systems.

PHP version 4.3.2 is recommended for use with Sun ONE Web Server 6.1 SP1. For PHP-related installation and configuration information specific to Sun ONE Web Server, see
http://www.php.net/manual/en/install.netscape-enterprise.php

NSS 3.3.7 and NSPR 4.1.5 Support

NSS support in Sun ONE Web Server 6.1 SP1 has been upgraded from 3.3.5 (in version 6.1) to 3.3.7. NSS is a set of libraries designed to support cross-platform development of security-enabled server applications. Sun ONE Web Server 6.1 SP1 also supports NSPR 4.1.5.

Enhanced Hardware Accelerator Encryption Support

Sun ONE Web Server provides hardware accelerator support for Sun™ Crypto Accelerator 4000, a cryptographic accelerator board that enhances the performance of SSL on the Web Server.

Supported Platforms

Sun ONE Web Server 6.1 SP1 can be installed on the Solaris, HP-UX, AIX, Linux, and Windows platforms. The following table summarizes platform support. For more information about installation requirements, see Required Patches in these release notes, and Chapter 2 in the Sun ONE Web Server 6.1 Installation and Migration Guide.

Note: HP-UX 11i is supported only on PA-RISC platforms.

Table 1  Sun ONE Web Server 6.1 SP1 Supported Platforms

Vendor

Architecture

Operating System

Minimum Required Memory

Recommended Memory

Recommended Disk Space

IBM

PowerPC

IBM AIX 5.1*, 5.2

64 MB

192 MB

256 MB

Hewlett-Packard

PA-RISC 2.0

HP-UX 11i*

64 MB

192MB

256 MB

Microsoft

Intel x86

Windows 2000 Server and XP

64 MB

192MB

256 MB

Sun

UltraSPARC**

Solaris 8, 9

64 MB

192MB

256 MB

Sun

x86

Solaris 9

64 MB

192MB

256 MB

Linux

Intel x86

Red Hat Linux Advanced Server 2.1

Kernel 2.4.9-e.3smp
glibc-2.2.4-26
ncurses-4-5.0-5.i386.rpm

You may also create a symbolic link from libncurses5.so to libcurses4.so, although we recommend that you install ncurses4-5.0-5.i386.rpm.

64 MB

192MB

256 MB

*Supported via binary compatibility.

**As of iPlanet Web Server 6.0, older SPARC CPUs are not supported. Sun ONE Web Server 6.1 continues to support the UltraSPARC architecture.

Required Patches

It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.

Solaris Patches

For the Solaris platform, Sun’s recommended patch list can be found at
http://sunsolve.sun.com/pubpatch

Note that patch 108993-22 (SPARC) or 108994-22 (x86) is required on Solaris 8 when Solaris is configured to use LDAP for authentication.

The following patches are required for optimal use of Sun ONE Web Server 6.1 SP1.

Solaris 8 (SPARC)

Solaris 9 (SPARC and x86)

HP-UX Patches

The following patches are required for optimal use of Sun ONE Web Server 6.1 SP1.

HP-UX 11i

Note: HP-UX 11i is supported only on PA-RISC platforms.

The Java Out-of-Box tool is used to configure the necessary kernel tunable parameters. Use of this tool is the recommended method for modifying kernel values. If necessary, modify the following tunable parameters to reflect a value equal to or greater than the following:

Caution: Modifying the kernel tunable parameters can have adverse impacts on your system. Do not modify the parameters unless you fully understand what you are doing.

AIX Patches

The following patches are required for optimal use of Sun ONE Web Server 6.1 SP1.

AIX 5.1

AIX 5.2

If Java web applications are deployed on the Web Server, then per the IBM JDK documentation the following environment variables must be set to the values specified below before the server is started:

The above snippet can be added directly to the Web Server start script.

Installation, Upgrade, and Migration Notes

This section includes notes about installing, upgrading, and migrating your Sun ONE Web Server. For detailed information about these topics, review the information in the Sun ONE Web Server 6.1 Installation and Migration Guide. References to Sun ONE Web Server 6.1 in the guide also apply to Sun ONE Web Server 6.1 SP1. For known issues in this release of Sun ONE Web Server, see Known Issues in these release notes.

Installation

It is very important to note that the Web Server will not start if it is installed into a directory with spaces in the name, for instance, Program Files. You will not receive an error message about this during installation, but following installation the server will not start.

Upgrade

When you install Sun ONE Web Server 6.1 SP1 over an existing installation of Sun ONE Web Server, the installer automatically detects and carries out the upgrade.

Migration

Direct migration from a version of iPlanet™ Web Server lower than 4.1 to Sun ONE Web Server 6.1 SP1 is not supported. You must first migrate your legacy server to iPlanet Web Server 4.1, and then to Sun ONE Web Server 6.1 SP1.

For detailed migration information, see the Sun ONE Web Server 6.1 Installation and Migration Guide. This guide contains information about migrating from version 4.1 to 6.1 SP1, and from version 6.0 to 6.1 SP1. Again, references to Sun ONE Web Server 6.1 in the guide also apply to Sun ONE Web Server 6.1 SP1.

Product Documentation

Sun ONE Web Server includes a complete set of product documentation, which can be found at the following location:
http://docs.sun.com/db/coll/S1_websvr61_en

Sun ONE Web Server manuals are available as online files in PDF and HTML formats. References to Sun ONE Web Server 6.1 in the documentation also apply to Sun ONE Web Server 6.1 SP1. The following table lists the tasks and concepts described in each manual.

Table 2  Sun ONE Web Server Documentation Roadmap

For Information About

See the Following

Late-breaking information about the software and documentation

Release Notes

Getting started with Sun ONE Web Server, including hands-on exercises that introduce server basics and features (recommended for first-time users)

Getting Started Guide

Performing installation and migration tasks:

  • Installing Sun ONE Web Server and its various components, supported platforms, and environments
  • Migrating from a previous version of Sun ONE Web Server

Installation and Migration Guide

The guide can also be accessed from your Web Server installation: server_root/manual/https/ig/

Performing the following administration tasks:

  • Using the Administration and command-line interfaces
  • Configuring server preferences
  • Using server instances
  • Monitoring and logging server activity
  • Using certificates and public key cryptography to secure the server
  • Configuring access control to secure the server
  • Using Java™ 2 Platform, Enterprise Edition (J2EE™ platform) security features
  • Deploying applications
  • Managing virtual servers
  • Defining server workload and sizing the system to meet performance needs
  • Searching the contents and attributes of server documents, and creating a text search interface
  • Configuring the server for content compression
  • Configuring the server for web publishing and content authoring using WebDAV

Administrator’s Guide

The guide can also be accessed from your Web Server installation: server_root/manual/https/ag/

Using programming technologies and APIs to do the following:

  • Extend and modify Sun ONE Web Server
  • Dynamically generate content in response to client requests
  • Modify the content of the server

Programmer’s Guide

Creating custom Netscape Server Application Programmer’s Interface (NSAPI) plugins

NSAPI Programmer’s Guide

Implementing servlets and JavaServer Pages™ (JSP™) technology in Sun ONE Web Server

Programmer’s Guide to Web Applications

Editing configuration files

Administrator’s Configuration File Reference

Tuning Sun ONE Web Server to optimize performance

Performance Tuning, Sizing, and Scaling Guide

Resolved Issues

This section lists the most important issues fixed in the following releases:

Issues Resolved in 6.1 SP1

The following table lists the issues resolved in Sun ONE Web Server 6.1 SP1.

Table 3  Issues Resolved in Sun ONE Web Server 6.1 SP1

Problem ID

Description

4642650

Option needed to disable appending of absolute URL in servlet/JSP container.

Fix details
New property added to sun-web.xml: relativeRedirectAllowed
Default value: false
Description: If true, allows the web application to send a relative URL to the client using the HttpServletResponse.sendRedirect() API (that is, it suppresses the container from translating a relative URL to a fully qualified URL).

4793938

Enabling Remote File Manipulation from the Server Manager UI allows any remote user to obtain a listing of any directory in the server's URI space.

4904201

javahome path wrongly set when adding a server with no bundled JDK.

4911580

Adding a new server instance may fail with a Server Error message.

4928794

Server restarts when trying to create null resource by PUT.

4929913

Search engine does not extract and index FTS information from PDF files.

Fix details
This fix applies to all supported platforms except Linux (see issue 4897074 in the Search section in these release notes for a related issue).

The Author, Subject, and Keywords metatags are always indexed. Functionality has been added that now allows arbitrary metatags to be indexed, including those produced when converting the FTS_* attributes from PDF files. Manual configuration of a new setting in server.xml is required, as described below.

  • In the SEARCH section of server.xml, add a PROPERTY with name="indexMetatags". The value should be a comma-delimited list of metatag names (note that the Author, Subject, and Keywords metatags are always indexed, regardless of this setting).
  • To index the metatags resulting from the conversion of PDFs and other types of documents, this configuration must use the name of the metatag, rather than the name of the “field” in the particular document type. For example, to index the FTS_Title contents from PDF files, "Title" must be a component of the "indexMetatags" setting:

    <PROPERTY name="indexMetatags" value="Title"/>

Note: See issue 4956415 in the Search section for details about displaying custom metatag information in search results.

4933935

On Solaris 9: Reconfig does not work in package-based installs.

4945089

ASN.1 parsing issue in SSL.

A problem has been identified in the implementation of the SSL protocols used by the Web Server that may be exploited as a Denial of Service attack. Sun ONE Web Server 6.1 SP1 fixes this problem. If you use the Web Server to host sites that utilize SSL version 3 or TLS, you are strongly encouraged to install this service pack.

4950388

The “reconfig” command does not work on Windows XP.

4964069

The commit.exe utility crashes on Windows platforms.

Issues Resolved in 6.1

The following table lists the issues resolved in Sun ONE Web Server 6.1.

Table 4  Issues Resolved in Sun ONE Web Server 6.1

Problem ID

Description

4540254

Rotating log files shouldn't require server restart on UNIX.

4727146

Logs filling with "connection reset" entries.

4786735

Installer doesn't set proper JDK CLASSPATH/LIBPATH when the external JDK is used.

4792721

Incorrect error messages when LDAP server is offline.

4799452

sun.tools.javac.Main has been deprecated, exception stops valid JSPs.

4801874

ACL_LDAPSessionAllocate always returns LAS_EVAL_FAIL.

4811418

Digest authentication crashes.

4819405

Memory growth/leak of slapd process with digestauth plugin.

4820513

digestauth plugin code is not thread safe.

4839875

When using cachefs/nfs as ClassCache and document-root, Sun ONE Web Server doesn’t always pick up the new JSP.

4842190

Web Server crashes when receiving Accept-Language header larger than 15 languages.

4842574

Server crash with malformed request.

4842601

Accept-Language header security issue.

4846832

CRL corrupts database.

4848896

digestauth plugin crashes for a particular type of request.

4849914

Memory leak in digestauth plugin for a particular type of request.

4855546

Log analyser vulnerability.

4858026

JSP: crash in getParameter when posting large amounts of data.

4867887

Basic auth fails for users with uids that have spaces.

Known Issues

This section lists the more important known issues and limitations at the time of the Sun ONE Web Server 6.1 SP1 release. The issues are listed by category:

Administration

The following table lists the known issues in Administration.

Table 5  Known Issues in Administration

Problem ID

Description

4650456

View Access and View Error doesn’t work properly with multibyte characters.

4865295

The End User Administration feature (under Distributed Administration in the Administration interface) is no longer supported.

4870613

The back button is not working for frames in Netscape 7.0.

When there are three frames and the content in a frame is changed by the frame itself, the browser’s back button may not work. This issue also occurs in Netscape 7.0 with some of the navigation buttons in the Administration UI.

4882999

Inconsistent look and feel to the pages in the Administration UI.

4888696

The Add Server page in the Administration UI "disappears" in Netscape 7.0 when insufficient information is entered.

Workaround
Enter complete information on the Add Server page before clicking OK. If necessary, reload the page to restore the Add Server UI, or click another page or another tab and then navigate back to the Add Server page. This problem occurs only in Netscape 7.0.

4893486

Default values not displayed on the SSL Settings page in the Magnus Editor.

Workaround
Click the Help button on this page for information about the default values.

4910309

The word "null" is incorrectly displayed on an alert message.

This displays when editing directory services in the Pick Directory for Virtual Server page in the Virtual Server Manager.

4910325

Cannot delete multiple virtual server classes all at once in the Administration UI.

Even if you select multiple classes for deletion on the Edit Classes page, only one class will be deleted at a time.

4911548

Style links displayed incorrectly.

This occurs when you create or edit a style, enable or disable WebDAV, and then restart the web server. Once the server is restarted, you are taken back to the styles page.

4894033

Distributed administration IP/DNS ACLs won’t work.

After enabling distributed administration, IP/DNS constraints in the ACLs for the Administration server won’t work.

4905808

Superusers cannot access the Administration interface after enabling distributed administration.

Workaround
After enabling distributed administration, create a user in LDAP with the same administration user name and password as that of "superuser."

4908647

Help buttons missing on two pages accessed from the Remote File Manipulation page in the Class Manager.

4908694

Default link not working for logging settings.

The Default link on the Logging Settings for Virtual Server page does not set the default path, but rather acts as a reset button.

4908787

When creating a listen socket, the default value (1) of acceptor threads in the Administration UI is not reflected in server.xml.

4910197

When editing a JDBC resource, the properties page retains values after they’ve been deleted.

4910272

Backslashes in the docroot.

When adding an instance or a virtual server class, if you specify a docroot that has backslashes or mixed slashes the docroot may not be created correctly.

Workaround
Use forward slashes when specifying the docroot on all platforms, including Windows.

4910281

Configure Directory Service page on the Global Settings tab should use check boxes instead of radio buttons (ease of use issue).

4910397

Redirection doesn’t work in URL forwarding if // is given as the URL prefix.

4911093

Bold tags (<b></b>) in alert message.

An alert message for the Additional Document Directories page in the Class Manager contains HTML bold tags.

4911547

Server allows creation of a duplicate WebDAV collection, and overwrites the older collection.

Collections with the same name can be created, and the collection that was created first will be overwritten. You will not receive an error message or alert about this.

4911550

Server error when trying to access the Web Server with additional document directory.

If you apply an internal-only style such as j2ee or dav to an additional document directory, and then try to access the server using a browser, you will receive a server error.

Workaround
Do not apply internal-only styles such as j2ee and dav to an additional document directory.

For more information about these styles, see issue 4911551 in the Documentation section in these release notes.

4911552

.shtml files are parsed when they shouldn’t be.

This issue pertains to the Parse HTML page on the Content Management tab in the Class Manager. The .shtml files will be parsed even when settings on this page are configured so that they shouldn’t be. For example, if you specify just "Yes, with exec tag" and "All HTML files," .shtml files will still also be parsed.

4911630

Not all fields in the Magnus Editor are validated.

For example, some of the fields for SSL Settings or Performance Settings will accept negative integer values, and the magnus.conf file will be updated with those values. You will not receive an error message or alert.

4911633

Cannot change the password of a user in the Administration interface.

If you create a user on the Users and Groups tab, and then try to the change that user’s password using the Administration UI, you will not be able to make the change.

Workaround
Use the administration console software included with the directory server to change user passwords.

4911640

No validation for the "New password (again)" field in the Administration interface.

If you specify two different passwords in the "New password" and "New password (again)" fields on the Edit user page on the Users and Groups tab, you will not receive an alert, notifying you that different passwords have been entered.

4912353

Help button displays wrong topic in Netscape 4.79.

On Netscape 4.79, clicking the Help button on the Add Virtual Server page in the Class Manager displays the bottom of the Help page for this topic. Scroll to the top of the page in the Help window to see the information for this section.

No ID

The sun-web.xml file bundled with the Web Server points to the wrong DTD location.

The correct location is:
http://www.sun.com/software/dtd/webserver/sun-web-app_2_3-1.dtd

Cohabitation

The following table lists the known issues in Cohabitation.

Table 6  Known Issues in Cohabitation

Problem ID

Description

4869693

On Windows, the Web Server installation overwrites Sun™ ONE Directory Server .dll files due to cohabitation issues with Directory Server 5.x.

Core

The following table lists the known issues in Core.

Table 7  Known Issues in Core

Problem ID

Description

4905681

The AsyncDNS setting is ignored in Sun ONE Web Server 6.1 SP1. The Web Server never performs asynchronous DNS lookups.

4939491

On HP-UX: Executing the ./stop script gives an error message and kills the process group.

Documentation

The following table lists the known issues in Documentation.

Table 8  Known Issues in Documentation

Problem ID

Description

4909738

Documentation error.

In Magnus Editor, LogVerbose and LogVsId are ignored when set to "On" (in lieu of the loglevel and logvsid attributes of the LOG element in the server.xml file).

4911551

Online Help missing documentation of default styles (Styles tab in the Class Manager).

Sun ONE Web Server includes the default styles listed below. These are default objects created in the obj.conf file. Once you begin customizing your server’s configuration, the styles list will change (new ones will be added, others will be removed, and so on). The default styles are as follows:

  • j2ee. Object that invokes the Java environment.
  • es-internal. Object that determines how requests handled by server core are processed.
  • send-compressed. Object that determines how (or if) the server will send precompressed content if it exists on disk (for instance, index.html.gz instead of index.html).
  • compress-on-demand. Object that determines how (or if) the server will compress content on demand.
  • dav. Object that controls how WebDAV requests are processed.

See issue 4911550 in the Administration section in these release notes for an issue related to the default styles.

Installation

The following table lists the known issues in Installation.

Table 9  Known Issues in Installation

Problem ID

Description

4855263

Sun ONE Web Server will not start if it is installed into a directory with spaces in the name, for instance, Program Files. You will not receive an error message about this during installation, but following installation the server will not start.

Workaround
Do no install the Web Server into a directory with spaces in the name.

4869238

On Windows, the Sun ONE Web Server installer will not take a long name as server_root.

Workaround
Specify a path name for the Sun ONE Web Server installation directory that is no longer than 128 characters (even though the dialog allows you to enter up to 256 characters).

4901205

On Solaris, Control+b does not work on screens that follow the Fully Qualified Domain Name screen in the installer (starting with the User and Group Name screen).

Workaround
If you need to return to previous screens during the installation, quit the installer and start again.

4937915

On AIX: Ctrl-c makes the terminal screen hang during installation.

This occurs on the computer name screen (the screen used to specify the name of the computer on which the Web Server will be installed).

4960048

Some SNMP-related files are overwritten when upgrading to Sun ONE Web Server 6.1 SP1.

Workaround
Back up the following files before the upgrade:

$server-root/plugins/snmp/magt/CONFIG
$server-root/plugins/snmp/sagt/CONFIG

Migration

The following table lists the known issues in Migration.

Table 10  Known Issues in Migration

Problem ID

Description

4858152

Access log entries in the server.xml file of the migrated instance point to invalid path.

When migrating on Windows, if the 4.1 or 6.0 server root path entered in the migration page has extra slashes (for example, C:\\SunONE_Servers\\webserver\) the migrated instance’s server.xml file will not have a reference to the new server root, and the old instance’s server ID will be removed.

4904088

Information on the final migration page does not display when using Internet Explorer.

If the Web Server version 6.0 or 4.1 obj.conf file contains a reference to the old server root in the <object> tag line, the final migration page will not display full migration details in Internet Explorer (everything displays fine in Netscape). Even though the details are not displayed, however, migration of that instance will happen successfully.

Workaround
To see the information on the final migration page, use a Netscape browser.

Samples

The following table lists the known issues in the sample applications. Note that none of these issues prevent the sample applications from functioning correctly.

Table 11  Known Issues in Samples

Problem ID

Description

No ID

rmi-iiop sample is missing a step.

In the "Compiling and Assembling the Sample Application" section, after executing the command ant (step 5), restart the web server instance.

Note: Ant is a Java-based build tool and must be downloaded from Apache at http://ant.apache.org. Also see the information provided in <install_root>/plugins/java/samples/docs/ant.html.

No ID

jdbcrealm sample is missing a quote in the sql statement.

Change the following sql statement in:

<install_root>/plugins/java/samples/webapps/security/jdbcrealm/src
/sql/dbscript-ora.sql

From this:

INSERT INTO user_tbl (userid,firstname,lastname,passwd,groups)
VALUES( 'ws','ws','ws,'secret','staff,engineer');

To this:

INSERT INTO user_tbl (userid,firstname,lastname,passwd,groups)
VALUES( 'ws','ws','ws','secret','staff,engineer');

No ID

jdbcrealm sample has the wrong Oracle driver name.

In the "Compiling and Assembling the Sample Application" section, step 2b, change the following line from this:

<PROPERTY name="dbdrivername" value="oracle.jdbc.pool.OracleDataSource"/>

To this:

<PROPERTY name="dbdrivername" value="oracle.jdbc.driver.OracleDriver"/>

4972587

Incorrect instructions in the index.html file of the i18n sample.

The correct command is “ant all” instead of “asant all” under the “Simple Custom Tag” and “Simple Filter” sections in the following file:

<install_root>/plugins/java/samples/webapps/i18n/src/docroot/index.html

So the correct sentence would read:
“Once you are done with the changes, run ‘ant all’ from the directory ‘src’ and restart your server instance.”

Note: Ant is a Java-based build tool and must be downloaded from Apache at http://ant.apache.org. Also see the information provided in <install_root>/plugins/java/samples/docs/ant.html.

Search

The following table lists the known issues in Search.

Table 12  Known Issues in Search

Problem ID

Description

4897074

On Linux only: When you create a collection, PDF files will not be indexed and added to the collection.

4903319

When you create a collection, not all documents will be indexed and added to the collection.

Files with any of the following extensions (case insensitive) will not be indexed: ASA, ASP, BMP, GIF, JAR, JPG, JS, JSP, SXI, SXW, SXC, SXM, SXG, TAR, WAR, and ZIP. (See issue 4897074 above for a related Linux-only issue.)

4908010

Unable to remove a search collection for a newly created virtual server before performing an Apply.

Workaround
Click Apply and restart the server before removing a collection for a newly created virtual server.

4908645

Highlighting is incorrect if the query string has an apostrophe.
- and -
Words with commas are not found.

  • When you access the search application in a browser and search using a word with an apostrophe (for instance, server’s), search results will not be highlighted correctly.
  • Search won’t find words that end with a comma.

4910222

Error on Windows when trying to create a collection with a docroot with backslashes.

Workaround
This occurs when you specify a docroot that has backslashes or mixed slashes. Use forward slashes.

4910410

On Windows, collection creation may fail in certain cases when a multi-byte label and/or description is specified.

Workaround
Create the collection without specifying the label and description (which are optional), and then set these using the Configure Collection page on the Search tab.

4911548

Proper error message not displayed when creating duplicate collections (collections with the same name).

4911656

Hyperlinks in the search results page may not work correctly when using Internet Explorer.

The "sort by date," "previous," and "next" hyperlinks in the search results page may not work correctly in Internet Explorer if the query string has either special characters such as &, =, %, and +, or certain multi-byte characters.

4911725

Search doesn’t work when you search for a word using a different case pattern.

Search results will not be displayed on the search page if you search using a word of mixed case (for example, typing jaVa instead of java or JAVA).

4955069

On HP-UX: i18n — Multibyte Display Name and Description not displayed properly.

Workaround
Set the Display Name and Description from the Configure Collection page after the collection has been created.

4956415

Can’t display custom metatag information in search results.

Workaround
This workaround allows you to display any custom metatag in search results by modifying server.xml and index.jsp. To display this information:

1.  Manually configure server.xml so that custom metatags are indexed (see issue 4929913 in the Issues Resolved in 6.1 SP1 section for a description of this manual configuration).

2.  Manually modify the index.jsp page using the following line to specify that description information should be displayed in search results:

<s1ws:item property='metatag name'/>

The metatag name is case sensitive. After making these changes you must re-create the collection (as opposed to updating the collection).

Note: For more information about using the search feature, see Chapter 18 in the Sun ONE Web Server 6.1 Administrator’s Guide, and “JSP Search Tags” in Chapter 3 of the Sun ONE Web Server 6.1 Programmer’s Guide to Web Applications.

4963236

On HP-UX: PDF files are not converted to HTML for inclusion in search collections.

This occurs if the following patch is installed on the HP-UX 11i system:
PHSS_28871 — ld/linker cumulative patch

4974124

On AIX: Can’t create a collection when multibyte Display Name and Description are provided.

Workaround
This problem occurs when the Web Server is started in the zh_CN locale. It does not occur when all locales are installed, or when the server is started in the ‘C’ locale.

Security

The following table lists the known issues in Security.

Table 13  Known Issues in Security

Problem ID

Description

4671445

Sun ONE Web Server cannot connect to an LDAP server over SSL if LDAP client authentication is required.

If Sun ONE Web Server contacts an LDAP server that requires client authentication (in this case, the Web Server is the client), the Web Server’s certificate cannot be sent and access will fail.

4863599

Cannot use the same group name under different organizational units.

If the same group name is used, and you try to restrict access with the group name, Sun ONE Web Server returns an error when clients try to access the site.

Workaround
Use a different group name for each organizational unit.

4963468

In some circumstances, the “list” right has no effect on directory listing.

According to “Setting Access Rights” in Chapter 9 of the Sun ONE Web Server 6.1 Administrator’s Guide, the “list” right is required to obtain directory listings from directories that do not contain an index file. However, in certain circumstances it is possible to obtain a directory listing, even if the applicable ACLs deny the list right. For this reason, if you need to restrict directory indexing, it is recommended that you do so by disabling indexing, as discussed in “Selecting Directory Indexing” in Chapter 16 of the Sun ONE Web Server 6.1 Administrator’s Guide, instead of (or in addition to) denying the list right.

Tools

The following table lists the known issues in Tools.

Table 14  Known Issues in Tools

Problem ID

Description

4905696

On Windows, two WAR files in the Servlet TCK fail to deploy due to an issue with the wdeploy utility. The files are:
servlet_jsh_HttpServletResponseWrapper_web.war
servlet_jsh_HttpServletRequestWrapper_web.war

Workaround
Deployment fails if the class file depth (along with the file name) exceeds 255 characters. The suggested workaround:

  • Edit the server.xml file by hand
  • Create the directory to deploy to manually
  • Deploy the WAR file in the directory manually

4912181

On Linux, a null pointer exception is thrown when deploying an application using the wdeploy command-line utility. This happens at the end of the deploy, and only if it succeeds.

Workaround
The error seems to occur when wdeploy reads the stdout/stderr after execution of the reconfigure script following the deploy. The reconfigure should go through, but you should check to see if the server did indeed reconfigure by looking in the errors log for the reconfigure message. If the message is not there, then run the reconfigure script manually.

Web Container

The following table lists the known issues in the Web Container.

Table 15  Known Issues in the Web Container

Problem ID

Description

4903162

Issue on Windows related to the case of url-patterns.

Per the Servlet specification, url-pattern elements in web.xml are treated in a case sensitive manner. This may lead to unexpected behavior for Windows users (for example, if a client makes a request for index.HTML, expecting this to match index.html).

WebDAV

The following table lists the known issues in WebDAV.

Table 16  Known Issues in WebDAV

Problem ID

Description

4892017

Unable to rename or move a resource if the parent directory is locked exclusively.

This occurs when DAV clients send the incorrect If: header. For example, if you connect to the Web Server using Macromedia Dreamweaver or DAV Explorer, create a collection, and then lock the collection with depth infinity (which locks all of its resources as well), you will not be able to rename or move a resource. Adobe® GoLive® sends the correct If: header only if the lock’s owner href matches auth_user. In all other cases with GoLive, the wrong header will also be sent.

4902651

Lock Management screen in the Virtual Server Manager does not display the lock information properly for hard links.

Symbolic links (hard and soft) are not supported by the WebDAV implementation in Sun ONE Web Server.

4905175

WebDAV ACL settings are inherited into new virtual servers.

This allows an existing WebDAV ACL setting in one virtual server to be set automatically as the default in any new virtual server that’s created. Modifying ACL settings in one virtual server will be reflected in all other virtual servers.

Workaround
Create a new ACL file for each virtual server.

How to Report Problems and Provide Feedback

If you have problems with Sun ONE Web Server 6.1 SP1, contact Sun customer support using one of the following mechanisms:

So that we can best assist you in resolving problems, please have the following information available when you contact support:

Sun Welcomes Your Comments

Sun is interested in improving its documentation and welcomes your comments and suggestions. Send your comments to Sun using the "Send comments" link at
http://docs.sun.com/

Please include identifying information with your comments, such as the book’s part number and title.

Additional Sun Resources

Useful Sun ONE information can be found at the following locations:

Copyright © 2003 Sun Microsystems, Inc. All rights reserved.

U.S. Government Rights - Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. Use is subject to license terms. Portions may be derived from Berkeley BSD systems, licensed from U. of CA. Sun, Sun Microsystems, the Sun logo, Sun ONE, iPlanet, Solaris, SPARC, Java, the Java Coffee Cup logo, J2EE, J2SE, JavaServer Pages, JSP, Java Naming and Directory Interface, JDBC, and NetBeans are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries.