These release notes contain important information available at the time of the Version 6.0 release of Netscape Enterprise Server (NES). New features and enhancements, installation notes, known problems, and other late-breaking issues are addressed here. Read this document before you begin using Enterprise Server.
Check with technical support prior to installing and setting up your software and then periodically thereafter to obtain the latest release notes and manuals.
These release notes contain the following sections:
| Feature | Description/Notes |
|---|---|
| Windows 2000 Support | Netscape Enterprise Server 6.0 now supports Windows 2000 Server, SP1 or later, as well as Windows NT 4.0, SP6a. At least 512MB RAM and 2GB of disk space is recommended for running Windows 2000. |
| JDK 1.3.1 Support | Netscape Enterprise Server 6.0 now works with JDK 1.3.1 on all platforms, as well as JDK 1.2.2_007 on Windows only. |
| Web Application Deployment and Management User Interface | You can now deploy web applications from the
user interface as well as from the commandline using wdeploy. New user
interfaces have been added to the server manager to facilitate:
|
| Virtual Server Report Generation | This new user interfaces allows you to generate reports for specific virtual servers. You can access this page from the Logs tab of the Virtual Server Manager. |
| Role Mapping Support | Netscape Enterprise Server 6.0 supports roles if the underlying
LDAP server supports roles. If you wish to authenticate roles, you need
to add the following to the web-apps.xml file:
<role-mapping map-to="role" /> |
| New web-apps.xml Data Type Descriptor | A new boolean attribute to the web application element
has been added in Netscape Enterprise Server 6.0 allowing you to enable
or disable a web application. By default, an application is automatically
enabled with the value set to "true" in web-apps.xml. You can disable the
application by setting the value to "false". Example:
<web-app uri="/catalog" dir="/export/apps/catalog" enable="false"> </web-app> |
| Single Sign-on Across Multiple Web Applications with FORM Login | Enterprise Server allows single sign-on across multiple
web applications using FORM login configuration. You can enable this feature
in two ways.
This is the easiest approach, but the session and session attributes are shared across all applications. Example: <vs>
<vs>
The advantages of this configuration are: The drawbacks of this configuration are: |
For each patch, use the listed revision or a higher revision. For example, if you need patch 111111-01, the later revision 111111-03 will also work.
Note that if you are using a JDK, you may need additional patches.
The following patch is required to run Enterprise Server 6.0 on Solaris 2.6: 105591-09
Note: You can determine if you have the patch by running the following command:
% showrev -p | grep 105591
Use the latest Solaris patches for Solaris 7.
No patches are required.
The following Solaris 2.6 patch is recommended when using the CC 4.2 compiler: 104668-09.
You can find a list of patches for Java 1.2.2.07 at:
http://www.unix.hp.com/java/java2/sdkrte/infolibrary/release_notes_SDK_1-2-2-07.html
Windows 2000 Server SP1 or later is required for running Enterprise Server 6.0.
| Platform | JRE /JVM /JIT Version | Comments |
|---|---|---|
| Solaris 2.6, 8 | Solaris VM
(build Solaris_JDK_1.2.2_07, native threads, sunwjit) |
Comment out -Xrs flag in config/jvm12.conf to generate stack traces.
For JVMPI based profiling or debugging purposes (such as with hprof or dbx) purposes, use the reference implementation downloadable from: |
| Windows NT 4.0, Windows 2000 | Java version 1.2.2 Classic VM
(build JDK-1.2.2_007, native threads, symcjit) |
|
| HP-UX | Java version 1.2.2.07
Classic VM (build 1.2.2.07-00/12/08-PA_RISC1.1, native threads, HP) |
Netscape also bundles a variant HotSpot VM (1.0.1fcs, mixed
mode, PA2.0 build 1.2.2.07-00/12/08-PA_RISC2.0). This VM is not enabled.
For further details on using this version see:
http:/www.unix.hp.com/java/infolibrary/prog_guide/java2/hotspot.html |
| RedHat Linux 6.2 | Java version 1.2.2 | This version of JVM is from blackdown.org. |
| Compaq Tru64 | Java version 1.2.2-8
(build J2SDK.v.1.2.2:10/31/2000-18:00, native threads, jit_122) |
The Compaq version of Enterprise Server is available from Compaq. |
For more information about JVM/JRE version 1.2.x for Solaris, go to:
http://www.sun.com/software/solaris/java/download.html
The following table summarizes the supported platforms for Enterprise Server 6.0. All platforms, except for Microsoft Windows 2000, require a minimum of 64 MB memory (256 MB recommended) and 110 MB disk space. Windows 2000 requires at least 512 MB of memory and 2GB of disk space to successfully run Enterprise Server 6.0.
The AIX platform is not currently supported.
*Supported via binary compatibility.
**As of Enterprise Server 6.0, older SPARC CPUs are not supported. Enterprise Server 6.0 continues to support the UltraSPARC architecture.
***Not distributed or supported by Netscape; available through Compaq only.
This section also includes the following information:
Workaround: Use setup -k only when doing a fresh installation. Do not use setup -k when performing a silent upgrade or reinstallation.
Workaround: Subcomponents 1,2,3 are mandatory on all systems.
In previous versions of the server, CGI programs that wanted to redirect a browser to another location were forced to supply a URL, for example http://server/index.html, or an absolute URI, such as /index.html. Starting with Enterprise Server 6.0, relative URIs, such as index.html, are also accepted.
Prior to Enterprise Server 6.0, there was no way to log time the server spent processing requests. A new flex-log format variable, %duration%, has been added. %duration% records the time in microseconds the server spent handling the request. Statistics must be enabled for the server instance before %duration% can be used. See the Administrator's Guide for information on enabling statistics. For more information on log file formats, refer to the Netscape Enterprise Server NSAPI Programmer's Guide and the Netscape Enterprise Server Administrator's Guide.
Prior to Enterprise Server 6.0, there was no way to track when the keep-alive subsystem was full. The server now tracks the number of times a connection was not added to the keep-alive subsystem because the keep-alive subsystem was full. This information is presented as KeepAliveRefusals in .perf output. For more information on .perf, refer to the Netscape Enterprise Server Performance, Tuning, Sizing, and Scaling Guide.
Prior to Enterprise Server 6.0, it was not possible to use an arbitrary server resource, such as a JSP or SHTML page, as the error page. As of this release, the parameter uri has been added to the send-error Error SAF. uri specifies the URI of a resource to use when an error is encountered.
Consider the following line from obj.conf:
Error fn="send-error" reason="Not Found" uri="/notfound.jsp"
path="/usr/netscape/servers/docs/notfound.html"
This line instructs send-error to behave as though the client had requested /notfound.jsp when the client requests a URI that does not exist. If an error is encountered when accessing /notfound.jsp, the HTML file at /usr/netscape/servers/docs/notfound.html will be displayed instead. For more information on the send-error Error SAF, refer to the Netscape Enterprise Server NSAPI Programmer's Guide.
A new optional parameter, acptlang, has been added for creating a virtual server class. You must add [-acptlang] to the command line to enable accept language header parsing for your server. The default is `off' if this parameter is not added.
As of Enterprise Server 6.0, the set-user-ID-on-execute (suid) Cgistub will not allow a non-root user to execute programs owned by root. This change enhances the security of the suid Cgistub system.
Workaround: If you require functionality from a previous release, log in as `root' and perform the following steps from a command line to modify the suid Cgistub for instance https-instance in server root server_root:
cd server_root/https-instance
./stop
cd private
chmod 700
./Cgistub -s "trusted_uid 0"
chmod 500
cd ..
./start
Files are transferred by the master of the cluster requesting the remote machine's admin to run clxfer. The clxfer process of the remote machine requests the master to transfer the file, and the master runs clxfer to return the file. The master receives the host name of remote machine from the request, and finds the required file in /cluster/hostname/instance-names. If, for example, a remote machine named charis is added to a cluster named charis.india.sun.com, the request header with charis as host name will fail to find the file in cluster/charis. The remote machine will receive a 0 byte file due to the error.
Workaround: Ensure that all machines have the full name. To do that go to control panel -> system ->network identification -> property in your remote machine. Enter the primary DNS suffix to match the master machine.
Workaround: When using version 5.0 or higher of the Sun/Forte WorkShop C++ compiler to create an NSAPI plug-in that throws exceptions, the -compat=4 option should be specified. This is necessary because, by default, WorkShop 5.0 generates object code that is not binary compatible with WorkShop 4.2 object code. Specifying -compat=4 makes newer WorkShop versions behave like version 4.2.
If you are unable to specify -compat=4, add shlib_flags="(default|parent|group)" to your plug-in's Init fn="load-modules" line in magnus.conf. For example:
Init fn="load-modules" funcs="my-plugin" shlib="myplugin.so" shlib_flags="(default|parent|group)"
Doing this will place your plug-in in its own dynamic link group. As a result, it will also be necessary to explicitly specify all your plug-in's shared object dependencies at link time. For example, your plug-in's CC command line might look like this:
CC -G -lCrun -lm -DXP_UNIX -I/usr/netscape/servers/plugins/include
-o myplugin.so myplugin.cpp
Adding more than 1000 software virtual servers under one class slows the loading of the Class Manager Members page.
When a virtual server class is deleted from the Server Manager, Virtual Server Class, the obj.conf file still shows the deleted class. However, the class is removed from the user interface and from the server.xml file. Workaround: Manually remove the deleted class from the obj.conf file.
For Cluster Management, a server cannot be added to the cluster if it is under SSL.
The following is an issue for NSAPI plug-in developers or for users of third party NSAPI plug-ins that have not been certified with NES 6.0 by their developers.
The default behavior of conf_getglobals(), if called during Init in NES 6.0 is to leave the following fields initialized with a default value (e.g., 0 , NULL) : Vport, Vaddr, Vserver_hostname, Vsecurity_active, Vssl3_active, Vssl2_active, and Vsecure_auth. If your Init function relies on the values of these global fields but does not have error checking, it could crash and prevent the web server from coming up; or it could cause crashes at a later time if these null values are saved and later reused in other plug-in functions.
If you are currently calling conf_getglobals() in your Init function, you should modify your code to eliminate any such calls. This will ensure proper operation of your plug-in in NES 6.0 when multiple virtual servers exist. The conf_getglobals() NSAPI function will only return the proper values corresponding to the connection and virtual server on which the request was made if called during an NSAPI request processing phase - e.g., during an NSAPI AuthTrans, NameTrans, Service, or other NSAPI request processing phases.
NES 6.0 supports a compatibility mode for older plug-ins suffering from this problem. As noted in the user section, it requires the NSAPI Init functions to be marked as LateInit. When called from a LateInit Init function, conf_getglobals() will return the properties of the default virtual server of the default connection group of the legacy listen socket. In terms of the new XML configuration attributes, this means that conf_getglobals() now returns the properties of the defaultvs of the defaultgroup of the legacyls of the SERVER. It is recommended that the server should only have that single virtual server defined in this case to ensure consistent server and plug-in operation.
If the above conditions are met, the Init function will be executed in an NSAPI context compatible with previous releases where only a single virtual server exists, and where this problem will not occur.
For the magnus.conf TempDir directive, the TempDir directory must be located on a local file system in order for the server to function correctly. If the TempDir directory is on an NFS mount, the server may fail to function correctly.
When using Micosoft's Internet Explorer web browser, version 5.0 is supported for end users only. For administrators, changes to the Enterprise Server Administration Server configuration can be saved only when using Internet Explorer version 5.5.
When editing a Connection Group Settings value from the Edit Listen Sockets Groups Page, a server update occurs when the OK button is pressed. Following this, if you go to Edit Listen Sockets page again and change another property, such as the Security value from `Off' to `On', then click OK, an error message may appear that states, `Please refresh your screen, data update by another user.' The Security value has not changed.
Workaround: To change a property on the Edit Listen Sockets page after changing a property on the Edit Listen Sockets Groups page, click the OK button twice to effect the change.
After administrative actions lead to changes in magnus.conf (e.g., enabling Search capabilities), the Load Configuration Files button cannot be used.
Workaround: Use the Apply Changes button to load the changes applied to magnus.conf.
After installing a certificate and clicking OK, the Add Certificate page (or Replace Certificate page) appears. Clicking the Help link here takes you to the wrong area: Add Certificate Revocation List Page, instead of Add Other Certificate page.
From the add CRL/CKL link, you can select the CKL file to display the ADD Compromised Key List page. The Help button on this page is linked to help for the CRL page.
Workaround: Scroll down the help window until you see the help for Add CRL.
If you have only one web application deployed, and you are trying to edit the URI, the URI cannot be empty.
Only path mappings are supported as url-patterns in the security-constraint element of the web application deployment descriptor (web.xml). Extension mappings such as *.jsp are currently not supported. This problem will be addressed in a future release.
Workaround: Ignore the following error message when using the commandline tools wdeploy and HttpServerAdmin: A nonfatal internal JIT (3.10.107(x)) error 'Relocation error: NULL relocation target' has occurred in: 'org/apache/crimson/parser/Parser2.maybeComment (Z)Z': Interpreting method. Please report this error in detail to http://java.sun.com/cgi-bin/bugreport.cgi."
Workaround: Enterprise Server 6.0 will support JDK1.3.1. Use /usr/lib/lwp threads for Java applications on Solaris 8. Most JVM and heap tuning are application specific.
jvm.option=-XX:MaxNewSize=512m
jvm.option=-XX:NewSize=512m
You can find more info about the flags and other flags from:
http://java.sun.com/docs/hotspot/VMOptions.html
http://java.sun.com/docs/hotspot/gc/
Some of GC tuning flags are applicable to JDK1.2.2_07 as well.
Workaround: Please refer to JDK 1.3.1 debugging documentation:
You will need to configure Enterprise Server 6.0 to use JDK instead of JRE before you can debug.
On Unix platforms only, make the following changes to the start-jvm script in the https-admserv directory:
jdb -attach port
For example: jdb -attach 5000
You are now ready to debug your servlet or JSP.
Workaround: Set the minHeapSize to 3.5 M and maxHeapSize to 64M.
JSP compilation errors, such as incorrect JSP syntax, have resulted in an increase in memory (heap memory) on Solaris.
Workaround: To work around this problem, pre-compile JSPs offline to catch such errors, or remove the offending JSP if the error logs contain compilation error messages for that JSP.
It is recommended that you use the Internet Explorer 5.X browser with Windows 2000 SP1 or later Server Edition.
Enterprise Server 6.0 does not support the Search feature on Linux platforms.
The Netscape Directory Server packaged with Enterprise Server 6.0 does not work on the Linux platform. For user and group functions, you need to install the directory server on a different operating system and link to it through your Linux web server.
Workaround: For Compaq Tru64 the system configuration file /etc/sysconfigtab needs to have these entries:
proc:
max_proc_per_user=1024
max_threads_per_user=4096
per_proc_data_size = 4294967296
max_per_proc_data_size = 10737418240
Problem 555263. Directory Server 5.0 Does Not Install on HP-UX Multi-byte Locale.
When using Directory Server on an HP-UX multi-byte locale, users must install version 5.0 SP1 or higher. Directory Server 5.0 does not install on HP-UX multi-byte locales.
Numerous chapters refer to themselves as "in this appendix".
The StrictHttpHeaders directive is incorrectly defined to have a default value of `off'. The default value for the StrictHttpHeaders directive in magnus.conf is `on'.
jvm.compiler found twice on page 52 under Debugging Servelet and JSPs is not a recognized parameter in VM. jvm.compiler should read java.compiler.
The steps in `Configuring the SNMP Master Agent' are a duplication those in the section, `Installing the SNMP Master Agent' and are inaccurate. The steps should read `Configuring the SNMP Subagent':
So that we can best assist you in resolving problems, please be sure to include the following information:
Netscape Enterprise Server documentation includes the following manuals, which are available online in HTML and PDF format:
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are the exclusive property of their respective owners.