|
|
United States-English | |
|
|
 |
|
Communicator e3000 MPE/iX Express 1 Based on Release 7.0: HP e3000 MPE/iX Computer Systems > Chapter 3 New Networking
Apache 1.3.14 for MPE/iX |
|
|
by Barbara Dubbert Apache 1.3.14 for MPE/iX is based on Apache 1.3.14 from the Apache Software Foundation. It is the latest version of Apache for MPE/iX and provides the same powerful features that were part of Apache 1.3.9 for MPE/iX in addition to minor base enhancements, several important security fixes, and a new installation scheme. Apache 1.3.14 for MPE/iX requires the following:
Apache 1.3.14 for MPE/iX is supported through the HP Response Center as part of MPE/iX FOS support. Apache 1.3.14 for MPE/iX is an upgrade to earlier versions of Apache. It consists of the Apache 1.3.14 base version from the Apache Software Foundation, the major features and functionality first introduced in Apache 1.3.9, and a new installation structure.Apache 1.3.14 for MPE/iX includes these features introduced in Apache 1.3.9 for MPE/iX:
The following content is new to Apache 1.3.14 for MPE/iX:
DSOs are add-on modules that extend the functionality of Apache. These modules are self-contained code that can provide a wide-range of additional Apache capabilities such as custom authentication and authorization, custom logging, or new configuration directives.Users can create their own Apache modules or use those written by others. For instance, the Apache Module Registry (http://modules.apache.org/) is a web site with downloadable Apache modules. Some of these modules are freely available while others have various license restrictions. DSOs on MPE/iX can utilize Apache's full Application Programming Interface (API) as well as Apache's full Extended Application Programming Interface (EAPI).A DSO is an Apache module with the same structure as the modules compiled into the Apache binary. But instead of being statically linked into the Apache program, the DSO module is created as a shared library (NMXL). DSOs are loaded at Apache startup into Apache's process space.No recompilation of Apache is necessary to use DSOs. However, DSOs require a DSO-enabled Apache such as Apache 1.3.9 or Apache 1.3.14 for MPE/iX or HP WebWise MPE/iX Secure Web Server.Using DSO modules keeps Apache memory usage low by running an Apache binary with core features only and adding additional features with DSOs. DSOs also provide flexibility. An installation can pick and choose which features to include in their web server.Apache DSOs can be written in either the C programming language or in the Perl scripting language. DSOs written in Perl require the mod_perl module to be linked either statically or dynamically (DSO) into Apache. Since mod_perl is not currently part of Apache for MPE/iX, DSO modules for Apache 1.3.9 for MPE/iX,and Apache 1.3.14 for MPE/iX, must be written in C. Mod_perl is part of the HP WebWise MPE/iX Secure Web Server product version 2so DSOs for Secure WebServer can be written in either C orPerl. Information on creating and installing DSOs for Apache on MPE/iX is provided in the "Configuring and Managing Internet Services" manual for Release 7.0 Express 1. Apache 1.3.14 for MPE/iX is built with an extended set of Apache APIs. That means that this version also expects these EAPIs to be built into any module it calls, including DSOs. This EAPI feature is included in Apache 1.3.14 or MPE/iX so that a commom DSO can be used by both Apache and WebWise without the need to recompile the module.When creating DSOs, you must compile with the -DEAPI option. This will include the necessary EAPI header files. These header files are part of the Apache 1.3.14 for MPE/iX distribution and reside in the/APACHE/PUB/include directory. The include directory also contains the README.EAPI file. The README.EAPI file describes the additional functionality that is available with EAPI such as more features in the mod_rewrite, mod_status, and mod_proxy modules. DSOs created with the apxs utility will automatically include the -DEAPI option.DSOs created without -DEAPI may work but may generate an error message in the error_log file. The Apache 1.3.14 for MPE/iX contains the same static modules
that are part of Apache 1.3.9 for MPE/iX. To view the complete
set of modules, execute the Apache binary with the "-l" option: The following modules were introduced in Apache 1.3.9 and are also included in Apache 1.3.14:
mod_proxy - With this module, Apache can act as a proxy server, or intermediary, when clients make web server requests. Instead of a client making a direct request to a web server, the client makes a request to the proxy server. The proxy server then makes the actual request to the web server. The web server responds to the proxy server who then forwards the response back to the original client. The proxy server can also cache documents and resources that pass through the proxy interface. If the proxy server has a copy of a requested document, it can return the copy immediately without contacting the web server.mod_rewrite - Mod_rewrite is a very powerful module for translating requested URLs to new addresses on the fly. The URL manipulations can depend on various tests, such as server variables, environment variables, HTTP headers and time stamps. New translation rules can be added to existing ones. Because of this module's functionality and flexibility, it is complex to use. Extensive documentation on mod_rewrite is available from the Apache Software Foundation web site, http://www.apache.org. mod_digest - This module provides a method of authentication, called Digest Authentication. Although Digest Authentication is not currently used by web browsers on the market, it is available to use whenever web browsers adopt this type of authentication. Web browsers currently use Basic Authentication, a less secure authentication scheme.mod_vhost_alias - Mod_vhost_alias simplifies the use of large numbers of virtual hosts by replacing static virtual host configurations (<VirtualHost>) with dynamic configuration. With this feature, adding more virtual hosts does not require reconfiguring or restarting Apache. Apache startup is also faster and uses less memory because the httpd.conf file is smaller. mod_so - This module implements the Dynamic Shared Object (DSO) mechanism for loading executable code and modules into Apache at Apache start-up time. A file creation mask, umask 007, is set in the start-up stream job, JHTTPD, for increased security. With this change, files created by Apache cannot be accessed by anyone outside of the APACHE account. Files in this category are log files, files created in the proxy directory, /APACHE (when Apache is used as a proxy server) and any files created by CGI scripts. An overview of the new Apache 1.3.14 base features is described in the online Apache newsletter, Apacheweek, at http://www.apacheweek.com/issues/00-10-13. The Apache 1.3.14 base provides a few new features and bug fixes.A new feature in Apache 1.3.14 is additional media types in the mime.types file. Media types are configured for WAP so that wireless documents and applications can be handled by Apache. There are several important fixes for security vulnerabilities that were discovered in mod_vhost_alias and mod_rewrite. These vulnerabilities are exposed under certain situations that are described in the Apacheweek article, http://www.apacheweek.com/issues/00-10-13 With this release begins a new installation scheme for Apache. This scheme allows for easier migration to new Apache releases.In previous Apache for MPE/iX releases, Apache was always installed in the same location, PUB.APACHE. This was inconvenient when rolling to new versions. The new Apache installation strategy will provide the following advantages:
Starting with Apache 1.3.14 for MPE/iX, new releases will reside in their own version-specific group under the APACHE account. A version-specific group corresponds to Apache's MPE version number. Symbolic links point to the new version-specific files.
Here is what PUB.APACHE looks like after an installation:
The /APACHE/A0200/conf directory contains the Apache configuration files. After installation, create your own copies of these under the /APACHE/PUB directory. The Apache installation job sets up links to /APACHE/A0200 so that the copy command gets the new conf files. The sample files are derived from the default files with modifications for Apache on MPE/iX. Make sure to log on as MGR.APACHE before beginning configuration.
The access.conf.sample file and the srm.conf.sample file need not be copied. These files were used in earlier versions of Apache but their content is now included in the httpd.conf file. However, if these files exist, Apache will read and process them after processing the conf/httpd.conf file. Edit the httpd.conf file with your own server name. You may also wish to change other default values. For information about configuration directives, visit the online Apache documentation at http://www.apache.org/docs. Httpd.conf is a bytestream file that can be edited on the e3000 using "vi" or modified from a PC if Samba is installed on the server.Modify the following httpd.conf directives by replacing "yourserver.com" with your own server name:
JHTTPD.sample is provided as an Apache start-up job. Copy the sample file from /APACHE/A0200 to /APACHE/PUB using the copy command below then change the timezone variable, TZ, to the local timezone if necessary. JHTTPD is a bytestream file unlike previous versions that were in MPE file format. Note that the file mask is set to 007. This means that any files created by Apache will have no permissions for "other." This feature tightens security so Apache-created files are accessible only within the APACHE account.
Apache 1.3.14 for MPE/iX has the product number A.02.00. This is viewable by running the Apache binary with the "-v" option. shell/iX> /APACHE/PUB/HTTPD -vServer version: Apache/1.3.14 (HP MPE/iX A.02.00)Server built: Apr 2 2001 11:58:16 Apache can be started from either the CI or the POSIX shell. :STREAM JHTTPD.PUB.APACHE or shell/iX>callci stream JHTTPD.PUB.APACHE Successful installation and startup of Apache 1.3.14 can be verified by
To check the content of the error_log,
If the JHTTPD job is running, try accessing Apache's home
page, If Apache does not start, more information is available in the Configuring and Managing MPE/iX Internet Services manual for Release 7.0 Express 1. Or, try consulting the online Apache Troubleshooting Guide for tips on debugging the problem, http://jazz.external.hp.com/src/apache. Apache can be shut down by issuing an :ABORTJOB or kill. Using kill (which defaults to kill -TERM) is the preferred method since it uses Apache's internal routines to clean up open resources. Kill can be issued by users WWW.APACHE, MGR.APACHE, and MANAGER.SYS. Using :ABORTJOB will result in leaked SVIPC semaphores. The CI command file IPCS.HPBIN.SYS displays SVIPC semaphores and the CI command file IPCRM.HPBIN.SYS frees leaked semphores. To shut down Apache, Apache can be restarted by issuing a kill -HUP. A restart will cause Apache to reread its configuration files without having to stop and restream the Apache job stream file. Restart is useful for making configuration changes without disrupting web users. After a restart, Apache continues running with the new configuration settings. To restart Apache, Stopping or restarting Apache using kill may cause the error_log to contain numerous warning messages about the child processes not exiting properly. For general Apache information, the official Apache web site, http://www.apache.org, contains documentation on configuration and functionality, FAQ's, a list of books, and more.Apacheweek, http://www.apacheweek.com, is a weekly digest of Apache activities, book reviews, and in-depth articles on Apache features.After installing Apache, your manual directory contains a User's Guide, Reference Manual, and other information which pertains to the installed version of Apache, http://yourserver.com/manual.The following are platform-independent resources on Apache dynamic modules (DSOs):
For MPE-specific information on Apache, including creation of DSOs for MPE/iX, the following document is available on HP's online document site, http://docs.hp.com:
The paper, "HP e3000:Entering the Wireless Internet," provides an example of how to write your first wireless WAP application on the HP e3000 using Apache. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
 Printable version |
|
|
|
|
|
|||||||||||||||
|
|||||||||||||||
