These release notes contain important information available at the time of the Version 6.1 release of Netscape Enterprise Server (NES). New features and enhancements, installation notes, known problems, and other late-breaking issues are addressed here. Read this document before you begin using Enterprise Server.
These release notes contain the following sections:
These release notes describe changes made for Version 6.1. See also:
Configure automatic CRL downloads to help ensure that your CRLs are kept up to date with minimal inconvenience. Enterprise Server supports CRL downloads over HTTP, HTTP over SSL, LDAP, and LDAP over SSL. Once a CRL is downloaded, Enterprise Server stores the information in memory. Enterprise Server will not communicate with a client or server with a certificate listed on a CRL. See the Netscape Enterprise Server Administrator's Guide for details.
In support of this feature, there are four new magnus.conf directives:
Specifies whether to shut down Enterprise Server if the age of a downloaded CRL exceeds the time specified in its Next Update field. This condition indicates that the CRL may not contain the most recent information available.
Specifies the download instructions for individual CRLs.
Specifies whether to shut down Enterprise Server when a CRL update fails for any reason. Before Enterprise Server shuts down, an error message is written to the log for later analysis.
Specifies whether automatic downloading of CRLs is enabled.
See the Netscape Enterprise Server NSAPI Programmer's Guide for details.
In a Windows NT® or Windows® 2000 environment, the Concurrency directive creates a specified number of native threads that:
By default, NSPR uses the main native thread to perform these tasks. On a multiprocessor host, however, you may need to create additional native threads to take advantage of the extra CPUs. Use this variable to override the default native thread allocation, which equals twice the number of CPUs. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
Allows you to set the interval in seconds between collections of OS-specific statistics. The maximum interval is 86400 seconds (24 hours). To disable the gathering of OS-specific statistics altogether, set to 0. The server uptime in seconds will continue to be processed, even when statistics gathering is disabled. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
The ssl3tlsciphers attribute supports two additional ciphers:
Both ciphers default to OFF. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
You can configure Enterprise Server to use an LDAP attribute other than uid for user authentication. The dbswitch.conf property uniqueattr allows you to specify an alternative LDAP attribute that will be used to determine the user’s DN. See the Netscape Enterprise Server Administrator's Guide for details.
The server.xml element LS has two new attributes to help improve server performance under Linux:
(optional) Valid on Linux only. Specifies how long in seconds the kernel should perform connection preprocessing and wait until the first packet of real data has arrived before waking the server. A value of 0 deactivates this feature. The default is 0.
(optional) Allows you to modify the default TCP data-gathering algorithm for sockets accepted from a particular listen socket. The default algorithm is to send out TCP data as soon as possible, even if this means sending out more small packets. The legal values are on or off. The default is on.
The Enterprise Server Java web container is now compliant with Servlet 2.3 and JSP 1.2, including support for context/session listeners.
To help make it easier to debug Java programs, two new parameters on the start command allow you to keep stderr and stdout open for printing:
|e||keep stderr open for printing|
|o||keep stdout open for printing|
To keep both stderr and stdout open for printing, enter:
start -e -o
When using the perfdump utility, Average Queueing Delay statistics are now provided for the past minute, five minutes, and 15 minutes as well as for the lifetime of the Enterprise Server instance. If there are short but significant spikes in the amount of time a connection spends in the connection queue, the lifetime average can be skewed for the duration of the server instance. Compare the values for different time intervals to understand how well requests from the connection queue are being serviced. See the Netscape Enterprise Server Performance Tuning, Sizing, and Scaling Guide for details.
The new magnus.conf directive ServerString modifies the HTTP header Server. Use ServerString when the type, version, and name of the web server needs to be suppressed for security reasons. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
Applicable in Error-class directives, the send-error function sends an HTML file to the client in place of a specific HTTP response status. Use its new uri parameter to specify which URI to display when an error is encountered. The URI can be an HTML or SHTML page, a CGI, a JSP, and so on. If Enterprise Server is unable to access the specified URI, it will try to display the file specified by another send-error parameter, path. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
Virtual Server support was enhanced in NES 6.0. You currently have one or more
classic Virtual Servers (using <Client> tags) within obj.conf. You can choose to
migrate them to the new format automatically, or you can choose to keep them as is. |
[x] Convert Virtual Servers
Deselect the checkbox if you want to keep your virtual servers in the old format.
During the migration process, a warning message appears, reminding you to manually migrate each plug-in and specifying what its new location should be.
Note: If an NSAPI plug-in is not installed in the old server root, that plug-in should work without any changes even after migration.
A new file servlet, FileServlet, is now available as an SDK example that serves static content from within the Java Web Container. Use FileServlet in support of filters when a static file needs to be accessed within the scope of a web application.
A new argument, regex, was added to the NameTrans fn="redirect" function. If regex is set to yes, then the expression is to be parsed as a regular expression. See the Netscape Enterprise Server NSAPI Programmer’s Guide for details.
As of Version 6.1, Netscape Enterprise Server no longer supports JSP 0.9. If you have a previous version of Enterprise Server, edit the obj.conf file and remove the entire <Object>/</Object> entry for the object jsp092.
For each patch, use the listed revision or a higher revision. For example, if you need patch 111111-01, the later revision 111111-03 will also work.
Note that if you are using a JDK, you may need additional patches.
The following patch is required to run Enterprise Server 6.1 on Solaris 2.6: 105591-09
Note: You can determine if you have the patch by running the following command:
% showrev -p | grep 105591
Use the latest Solaris patches for Solaris 7.
The following patch is required to run Enterprise Server 6.1 on Solaris 8: 108827-19
This patch is one of Sun's recommended patches for Solaris 8.
Note: You can determine if you have the patch by running the following command:
% showrev -p | grep 108827
The following Solaris 2.6 patch is recommended when using the CC4.2 compiler: 104668-09.
Windows 2000 Server SP1 or later is required for running Enterprise Server 6.1.
|Platform||JRE / JVM / JIT Version||Comments|
|Solaris 2.8||Solaris VM
|Comment out the -Xrs flag in config/jvm12.conf to generate stack traces. For more details, see the section "Generating a Stack Trace for Debugging" in the Netscape Enterprise Server Installation and Migration Guide.
For JVMPI-based profiling (such as hprof) or debugging purposes (such as attaching Solaris dbx), use the reference implementation downloadable from:
|Windows NT 4.0||Java version 1.4.0_00 Classic VM|
|Windows 2000||Java version 1.4.0_00 Classic VM|
|RedHat Linux 6.2||Java version 1.4.0_00 Classic VM|
The following table summarizes the supported platforms for Enterprise Server 6.1. All platforms, except for Microsoft Windows 2000, require a minimum of 128 MB memory (256 MB recommended) and 150 MB disk space. Windows 2000 requires at least 512 MB of memory and 2GB of disk space to run Enterprise Server 6.1 successfully.
|Microsoft||Pentium||Windows NT 4.0 SP6a|
|RedHat||X86||Red Hat Linux Advanced Server, based on kernel 2.4.9 with glibc 184.108.40.206|
|Sun||UltraSPARC**||Solaris 2.6, 7*, 8|
* Supported via binary compatibility.
**As of Enterprise Server 6.x, older SPARC CPUs are not supported. Enterprise Server 6.1 continues to support the UltraSPARC architecture.
If you are running an earlier version of this product, see the table below to determine how to upgrade to Netscape Enterprise Server 6.1.
|If you are running...||Then...|
|iPlanet Web Server 6.x||Install Netscape Enterprise Server 6.1 in the same server root.|
|iPlanet Web Server 4.x||Install Netscape Enterprise Server 6.1 in a different server root then migrate your data to the new server.|
|Netscape Enterprise Server 6.0||Install Netscape Enterprise Server 6.1 in the same server root.|
|Netscape Enterprise Server 3.x or earlier||Install Netscape Enterprise Server 6.1 in a different server root. There is no migration path.|
See the Netscape Enterprise Server Installation and Migration Guide for details.
Due to problems with the drivers, Rainbow SSL hardware accelerators do not work with Enterprise Server 6.1.
If you are upgrading from Enterprise Server 6.0 and use Java, you need to increase the stack size for the Administration Server to 128K or higher. Version 6.1 uses JDK 1.4, and the Verison 1.4 classloading schemes require a larger stack size.
To increase the stack size to 128K, add the following to magnus.conf:
# Stack size is 128k
In order to use Distributed Admininstration, you must use LDAP, not LDAP over SSL. This problem will be corrected in a subsequent release.
When a virtual server is defined under a user-created class and access control is disabled, a server error page displays when a user's browser attempts to access the virtual server.
Workaround: Always leave Access Control ON under Restrict Access.
The start script rejects the -i option. The -i option prevents the server from putting itself in a background process. For information about the start script and its options, see the Netscape Enterprise Server Administrator's Guide.
Workaround: To use the -i option, add the following two lines to the $ac_option case statement in the start script:
The final case should statement should look like:
for ac_option do case "$ac_option" in -e) arg="-start";; -o) arg="-start";; -i) arg="-start";; esac done
If you renew then import the Enterprise Server security certificate using the old key and subject name, Enterprise Server fails to start afterward. The resulting error message says the certificate or key necessary for authentication could not be found.
Workaround: Use a new key.
If the environment variables SHLIB_PATH or LD_LIBRARY_PATH are set to something other than what is set in the Enterprise Server start script, unpredictable behavior can result (including being unable to start Enterprise Server at all).
If Enterprise Server fails to start and logs an error indicating a dlopen failure and/or undefined symbol errors, check to see if these environment variables have been incorrectly set. You may choose to explicitly unset these environment variables in the start script.
For more information see http://www.mozilla.org/
So that we can best assist you in resolving problems, please be sure to include the following information:
You might also find it useful to subscribe to the following newsgroups:
Use of Netscape Enterprise Server is subject to the terms described in the license agreement accompanying it.
Software applications: © 2001 Sun Microsystems,Inc. Some software code: © 1999, 2002 Netscape Communications Corporation. All rights reserved.
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are the exclusive property of their respective owners.