Chapter 7 Web Services Administration

Accessing the Secure Web Servers

The Secure Web Server provides the following servers for managing Internet services:

Table 7-1 summarizes the ports on which the administration accounts are installed by default, and shows the URLs for accessing these accounts. In the URLs listed, host.domain.name represents the fully qualified host name of the local system (the system on which Internet Express is installed). For information on how to allow access from a remote system when running the Secure Web Server, see the Secure Web Server Administration Guide.

Table 7-1 Internet Express Ports and URLs

Port Number	Description	URL
80	Public Web Server listening on the default http: port (if configured)	http://host.domain.name:80/
8081	Administration Web Server	http://host.domain.name:8081/
443	Secure Socket Layer (SSL) Web Server	https://host.domain.name:443/
8086	Internet Monitor Administration Server	http://host.domain.name:8086/

To access the Secure Web Servers, follow these steps:

When you access the Web server, you are given access to privileged files and can perform system management tasks until exiting the browser. Do not leave an Administration session unattended. Limit access to the admin account to those individuals authorized to perform Internet system management tasks.

In a TruCluster Server environment, the Secure Web Server runs on all cluster members concurrently. Connections are distributed among the cluster members based on how the cluster alias has been configured. See the cluamgr(8) reference page.

Web Server Management

All Web server management operations are performed using port 8081, the Administration Web Server. All activity is recorded in the associated log files described in the Secure Web Server Administration Guide.

Management tasks available from the Secure Web Server administration menus include the following items. Steps for performing these tasks are described in the Secure Web Server Administration Guide, unless otherwise noted.

Changing Configuration Parameters

A configuration parameter is specified by a directive and is stored in one of the configuration files listed in Table 7-2.

You can specify the following types of configuration parameters using the Administration utility. (See the Secure Web Server Administration Guide for detailed information on specifying each configuration parameter.)

The Secure Web Server configuration files are read in the following order:

	Note: By default, the configuration files access.conf and srm.conf do not contain any directives. While they remain supported in Internet Express Version 6.4, all directives are defined in httpd.conf.

If you specify the same directive in more than one configuration file, the first directive found takes precedence.

In the tables in the following sections, a directive enclosed in angle brackets can be defined using multiple lines and must be delimited by a <directive>...</directive> pair (where directive is the directive name). The following example shows the proper syntax for a multiple-line directive:

<Limit GET POST>
order deny,allow
deny from all
allow from host1.domain.name domain2.name<
/Limit>

Through the Change Configuration Parameters menu for each server, theSecure Web Server Administration utility allows you to set many of the frequently used configuration parameters. If you want to take advantage of more specializedWeb Server functionality, you must manually edit the configuration files listed in Table 7-2. Avoid modifying the configuration parameters that are handled by the Administration utility when manually editing these files.

For a complete listing of Secure Web Server directives, visit the following Web site:

http://www.apache.org/docs/mod/directives.html

Changing the Password for the Administration Web Server

To change the password used for the Administration Web Server, follow these steps:

The new password takes effect immediately.

If you decide not to change the password, cancel the operation by clicking on one of the following:

Allowing Remote Access to the Internet Monitor Administration Server

The installation procedure installs the Internet Monitor Administration Server on port 8086, and initially allows access to the server from the local system only.

To allow access to the Internet Monitor Administration Server from remote systems, follow these steps:

Creating the Search Index

Internet Express provides a link from the Manage Components menu for creating a search index using ht://Dig. Perform the following steps:

You can also configure the ht://Dig search index and run a search fromTru64 UNIX the command shell. After installing ht://Dig, the Internet Express installation script displays the following message, prompting you to create a search index on the server:

    To create an index of this server, review the configuration in
  /usr/internet/www/conf/htdig.conf and run /usr/internet/www/bin/rundig

For example, to configure ht://Dig to index the Internet Express documentation, follow these steps:

Searching the Index

After creating the search index (Section : Creating the Search Index), search the index by opening the search page.

From the Ht://Dig Indexing and Search Administration page, click on the Ht://Dig Search Page link.

Alternately, from your Web browser, enter the following URL

http://hostname/htdig/search.html

“”where hostname is your system's host name.

Documentation

Documentation for ht://Dig is installed in the /usr/internet/docs/htdig/ directory and is also available at http://www.htdig.org.