Oracle iPlanet Web Proxy Server 4.0.15 Release Notes

Oracle iPlanet Web Proxy Server 4.0.15 Release Notes

This Release Notes document contains important information about the 4.0.15 release of Oracle iPlanet Web Proxy Server (Proxy Server). It includes information about features and enhancements, resolved bugs, and known issues. Review this document prior to installing and configuring Proxy Server, and then periodically thereafter for the most up-to-date information.

This document has been reorganized to better highlight the features, enhancements and issues resolved in the latest release of Proxy Server 4.0, and to provide clearer information about the platforms, software, technologies and protocols that the latest release supports. For more information about additional documentation changes, see Product Documentation.

This document contains the following sections:

Release Notes Revision History

Date 

Description 

September 2010 

Updated to support the Proxy Server 4.0.15 release. 

June 2010 

Initial publication for the Proxy Server 4.0.14 release. 

Features and Enhancements in 4.0.15

In addition to fixing a number of bugs, as listed in Table 1, the 4.0.15 release of iPlanet Web Proxy Server provides a number of enhancements to address customer requests:

Issues Resolved in 4.0.15

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.15.

Table 1 Issues Resolved in iPlanet Web Proxy Server 4.0.15

ID 

Summary 

6524998 

proxy 4.0 urldb utility crashes when processing an invalid regular expression 

6942431 

Proxy 4.0: consider adding time-related parameters to the <Client> tag 

6945755 

web proxy server cannot set the number of Acceptor Threads = no of CPUs as said in docs 

6946517 

WPS4.0: OPTIONS method does not work in SSL 

6946561 

RFE: web proxy 4 - Ability to set ACLCacheMax through Admin GUI 

6946565 

RFE - need Capability to reset Perf counters without server restart 

6946566 

RFE - Capability to manage obj.conf through separate include files e.g. managing url list in another 

6949070 

Proxy 4.0: urldb: expired cache file are not removed 

6951418 

Proxy 4.0: event scheduler: time "drift" causes events to be missed 

6952442 

Proxy 4 Admin cache program crash with <Client> tag in obj.conf 

6955415 

Proxy Server 4.0.13 - need rewrite-host parameter in virt-map function 

6957675 

proxy 4 Admin GUI warnings when users edit NameTrans fn="regexp-redirect" (regex URL redirections) 

6957676 

WPS4.0 Basic Authentication does not work with regular mapping only 

6960464 

proxy 4 - healthcheck in load-balancing likes to be configurable in timeout and frequency 

6964554 

proxy 4 RFE - new lookup-ipv6-first to allow cu to select the order of DNS lookup 

6965840 

query parameter of Service SAFs do not work in forward proxy configurations 

6965842 

RFE: allow send-error to accept a "status" parameter 

6965883 

Version changes for 4.0.15 

6966757 

WPS 4.0.14: URL Rewrite problem (um-output) with missing "/" slash 

6968929 

Integrate NSS 3.12.6 

6970769 

Socks log messages contain invalid session id 

6970776 

Proxy 4.0: Socks server should print meaningful error log information 

6972347 

Proxy 4.0: proxy serves truncated responses from the cache 

6974046 

DTD file rename issue in Web Proxy Server 4.0.14(SVR4 patch) 

6974382 

Proxy 4.0: "url mapping" should allow selective rewriting of javascript 

6974692 

Socks Proxy Hostname Resolution Hostname Unresolved Doesn't Fail Returning Conn to Port on Client 

6977431 

web proxy server number of Acceptor Threads in the admin GUI should be = no of cups as said in docs 

Product Patches for 4.0.15

The Proxy Server 4.0 patches for version 4.0.15 are available on SunSolve Online. The following table lists these patches.

Platform 

Patch ID 

HP-UX 

145608-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145608-01-1)

Linux x86 

145605-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145605-01-1)

Solaris SPARC (32-bit) 

145604-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145604-01-1)

Solaris x86 (32-bit) 

145606-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145606-01-1)

Windows (32-bit) 

145607-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145607-01-1)

Hardware and Software Requirements

This section provides information about the hardware and software requirements of Proxy Server 4.0.15.

This section includes the following topics:

Supported Platforms

Complete information about supported operating environments and hardware for Proxy Server 4.0.15 is available in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, which is accessible at the Oracle Fusion Middleware Supported System Configurations page.

System Virtualization Support

System virtualization is a technology that enables multiple operating system (OS) instances to execute independently on shared hardware. Functionally, software deployed to an OS hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Oracle performs testing of its products on select system virtualization and OS combinations to help validate that Oracle products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems.

For information about Oracle support for Oracle products in virtualized environments, see Supported Virtualization Technologies with Oracle Fusion Middleware.

Swap Space

In addition to the information provided in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, your system must also have adequate swap space:

Operating System Patches

It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.

Solaris Patches

The following is the required patch level for Proxy Server 4.0.15 in Solaris SPARC and x86.

Solaris 8 (SPARC)

Solaris 9 (SPARC)

Solaris 9 (x86)

Solaris 10 (SPARC)

NOT REQUIRED

Solaris 10 (x86)

Linux Patches

The following is the required patch level for Proxy Server 4.0.15 in Linux.

Red Hat Enterprise Linux Advanced Server 3

Red Hat Enterprise Linux Advanced Server 4

HP-UX Patches

The Java Out-of-Box tool is used to configure the necessary kernel tunable parameters. Use of this tool is the recommended method for modifying kernel values. If necessary, modify the following tunable parameters to reflect a value equal to or greater than the following:


Caution – Caution –

Modifying the kernel tunable parameters can have adverse impacts on your system. Do not modify the parameters unless you fully understand what you are doing.


Supported Browsers

Complete information about supported web browsers for Proxy Server 4.0.15 is available in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, which is accessible at the Oracle Fusion Middleware Supported System Configurations page.

Deprecation Noticies

Operating System Versions. As of the release of iPlanet Web Proxy Server 4.0.14, the following operating system versions are deprecated:

HP-UX 11.11 

Microsoft Windows 2000 Server and Windows 2000 Advanced Server 

Red Hat Enterprise Linux Advanced Server 3 

Solaris 8 

Solaris 9 for SPARC and x86 

These operation system versions will become unsupported in a future release of iPlanet Web Proxy Server.

Web Browser Versions. As of the release of iPlanet Web Proxy Server 4.0.14, the following web browser versions are deprecated:

Microsoft Internet Explorer 6 

Mozilla 1.4.1 and 1.7.2 

Netscape Navigator 7.1 and 7.2 

These web browser versions will become unsupported in a future release of iPlanet Web Proxy Server.

Supported Software, Technologies and Protocols

The recent releases of Proxy Server includes the following enhancements.:

Transparent Proxy

Proxy Server 4.0 supports transparent proxy for HTTP/1.1 connections. Transparent proxying involves intercepting and processing web requests by using the proxy server, without the knowledge or control of clients. For example, a router for a local network is configured to redirect incoming TCP connections to the local port, in which the proxy server is active.

Add the following directive to the proxy server default object in the obj.conf file:


NameTrans fn="host-map"

This configuration enables the proxy server to use the HTTP Host: header of incoming requests to identify and redirect the request to the target remote server.


Note –

Transparent proxy servers that decide connections based on the HTTP Host: headers are vulnerable to fake HTTP Host: headers forged through the active content. Therefore, suitable ACL configurations must be implemented to prevent connection to web sites that might host malicious content.


URL Mapping

URL Mapping has been implemented in Proxy Server 4.0.8. It enables the Proxy Server to act as a reverse proxy. This feature enables Proxy Server to provide a single front-end hostname for back-end application servers. Based on a requester's URI, access is provided to back-end servers.

For more information about URL Mapping, see Reverse Proxy Scenario in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

For information about Server Application Functions (SAFs) used in URL Mapping, see Server Application Functions (SAFs) in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

Monitoring Server

The monitoring capabilities of iPlanet Web Proxy Server provides a detailed list of the server parameters that you can monitor at instance level.

From the Web Proxy Administration Server, you can perform the following actions:

ProcedureMonitoring Server

  1. Access the Administration Server

  2. Click the Instance link from the Manage Servers page

  3. Click the Server Status tab

  4. Click the Monitor Current Activity tab

  5. Set the Monitoring Current Activity to ON to monitor the server

    You can also refresh the server in following intervals 5,10 and 15 seconds and view the statistics of the DNS, Keep-Alive, Cache, Server Requests and Work Thread connections.

Embedded DNS Resolution

The embedded DNS supports the non-default name resolution. The DNS client interacts with a DNS server to perform the name resolution. The new SAF dns-lookup, receives the DNS server's IP address as a server argument. This IP address should be added as a DNS directive in the obj.conf file.

In the following example, IP of the DNS server is specified in the server parameter.

<object>
....
DNS fn="dns-lookup" server="170.168.10.3"
...
</object>

In the following example, you can add multiple DNS server IPs to dns-lookup-init, and it will be used in round robin model. In this scenario, do not add DNS server IP to dns-lookup. If DNS server parameters are added to both dns-lookup and dns-lookup-init, the dns-lookup argument will take the precedence.

...
<Object>
...
DNS fn="dns-lookup"
....
Init fn="dns-lookup-init" servers="170.168.10.3, 170.158.10.4"
</Object>

ACL Cache Tuning

The ACLCacheMax is a magnus.conf parameter that sets a limit to the total number of ACLs stored in the ACL cache. There is no default value for ACLCacheMax and it should be configured for a specific limit.

For example, ACLCacheMax 16384


Note –

The ACL cache in this context does not refer to the ACL user cache. It refers to a cache where ACLs are applicable to specific URLs that are cached for performance reasons.


The GCAtStartup is a magnus.conf parameter that allows boolean value. By default the value is false, if set to true, Cache garbage collector clears the garbage during the server startup. This can increase the server startup time when the cache size is high.

Cache PURGE Feature

Proxy Server allows PURGE requests to clear the cached URL. If the requested URL is purged successfully, a response with an HTTP status code of 200 (OK) is sent by the server. If the specified URL is not cached, a 404 (Not Found) response is sent.

In the following example, the server returns the value 200

bash-2.03$ telnet localhost 8088
Trying 172.9.10.1...
Connected to localhost.
Escape character is '^]'.
PURGE http://foo.com/ HTTP/1.0

HTTP/1.1 200 OK
Server: Oracle-iPlanet-Proxy-Server/4.0
Date: Fri, 26 Oct 2007 08:15:30 GMT
Connection: close

In the following example, the server returns the value 404.

Connection closed by foreign host.
bash-2.03$ telnet localhost 8088
Trying 172.9.10.1...
Connected to localhost.
Escape character is '^]'.
PURGE http://foo.com/ HTTP/1.0

HTTP/1.1 404 Not Found
Server: Oracle-iPlanet-Proxy-Server/4.0
Date: Mon, 17 Sep 2007 10:13:28 GMT
Content-length: 96
Content-type: text/html
Connection: close

Internet Protocol Version 6 (IPv6) Support

You can connect to an IPv6 enabled Web site through the Proxy Server 4.0.11. Proxy server also supports ftp extension for IPv6 in default (passive) mode.

NSS and NSPR Support

Proxy Server 4.0.15 supports Network Security Services (NSS) 3.12.6 and Netscape Portable Runtime (NSPR) 4.8.4.

Modified FTP Transfer Mode

From Proxy Server 4.0.6 release, support for Extended address Passive port (EPSV) mode has been introduced.

Upgrade Support

From Proxy Server 4.0.2 release, the installer supports the upgrade of an existing Proxy Server 4.0 installation to the later version. For the Java Enterprise System installations of Proxy Server 4.0.1, you need to install the patches that correspond to the later release.

Enhanced Hardware Accelerator Encryption Support

Proxy Server 4.0.12 provides hardware accelerator support for Sun Crypto Accelerator 6000, a cryptographic accelerator board that enhances the performance of SSL on the Proxy Server.

Impact of US DST Changes 2007

Daylight Savings Time (DST) starts in USA from the 2nd Sunday of March and ends on the 1st Sunday of November. This impacts the date and time rules of the Operating System.

To make sure that the log files contain the correct time in US time zones, and that the Administration Server is not impacted by this change, you should do the following:

Product Documentation

The iPlanet Web Proxy Server 4.0 documentation is provided in a number of ways:

Proxy Server 4.0.14 is the last release at which the entire documentation set for Proxy Server 4.0 was updated. Subsequent to the 4.0.14 release, updates and corrections to Proxy Server 4.0 documentation are provided in this Release Notes document; see Corrections and Updates to 4.0.14 Manuals.

The Proxy Server 4.0.14 documentation set is available at http://docs.sun.com/coll/1311.14. For an introduction to Proxy Server, refer to the books in the order in which they are listed in the following table.

Table 2 iPlanet Web Proxy Server 4.0.14 Documentation Set

Document Title 

Contents 

Release Notes

The Proxy Server release:

  • Late-breaking information about the software and the documentation

  • New features

  • Supported platforms and environments

  • System requirements

  • Known issues and workarounds

Installation and Migration Guide

Performing installation and migration tasks: 

  • Installing iPlanet Web Proxy Server

  • Migrating from version 3.6 to version 4.0

Administration Guide

Performing administration and management tasks: 

  • Using the administration and command-line interfaces

  • Configuring server preferences

  • Managing users and groups

  • Monitoring and logging server activity

  • Using certificates and public key cryptography to secure the server

  • Controlling server access

  • Proxying and routing URLs

  • Caching

  • Filtering content

  • Using a reverse proxy

  • Using SOCKS

Configuration File Reference

Editing configuration files 

NSAPI Developer’s Guide

Creating custom Netscape Server Application Programming Interface (NSAPI) plugins

Performance Tuning, Sizing, and Scaling Guide

Tuning iPlanet Web Proxy Server to optimize performance  

Corrections and Updates to 4.0.14 Manuals

The following sections describe corrections and updates to Proxy Server 4.0.14 manuals:

Information About the admin.conf File

The admin.conf file, located in the install-dir/proxyadmserv/config directory, is an internal configuration file that Proxy Server maintains. Do not modify this file.

Information About the Date and Time Parameters of the <Client> Tag

Proxy Server 4.0.15 supports several new parameters for the <Client> tag, as described in the following table.

Parameter 

Description 

date-start and date-end

These two parameters specify the start date and end date, respectively, for a time interval. They take values of the format of the UNIX date command, excluding the time zone specification. Additionally, the weekday portion of the date command format is optional.

day-start and day-end

These two parameters specify the start day number and end day number, respectively, for a day interval in a month. They take values in the range 1 through 31. 

month-start and month-end

These two parameters specify the start month and end month, respectively, for a month interval in a year. They take the values Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov and Dec.

time-start and time-end

These two parameters specify the start time and end time, respectively, for a time interval in a day. They take values of the form hour:minute:second on a 24–hour clock.

weekday-start and weekday-end

These two parameters specify the start day and end day, respectively, for a day interval in a week. They take the values Sun, Mon, Tue, Wed, Thu, Fri and Sat.

Examples

Information About the disable-javascript-rewrite Parameter of the um-define-junction SAF

Proxy Server 4.0.15 supports a new parameter, disable-javascript-rewrite, for the um-define-junction SAF of the Init directive. The following table provides information about this new parameter.

Parameter 

Description 

disable-javascript-rewrite 

(Optional) A regular expression matched against the names of JavaScript variables when the has-javascript parameter is set to yes. Variables whose names match the regular expression are not rewritten (as they normally would be with has-javascript set to yes). There is no default value for this parameter.

Information About the forward-unread-request-body Parameter of the http-client-config SAF

The section http-client-config in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference does not include information about the forward-unread-request-body parameter, which became available in Proxy Server 4.0.14. The following table provides information about this parameter.

Parameter 

Description 

forward-unread-request-body 

(Optional) Boolean that indicates whether a request body that arrives in a TCP packet separate from the request header should be forwarded to the origin server. The default value is false, meaning that request bodies arriving in TCP packets separate from their request headers are not forwarded to the origin server.

Information About the <Include> Tag in the obj.conf File

Proxy Server 4.0.15 supports a new tag in the obj.conf file. This tag, <Include>, includes the content of another file in the obj.conf file, effectively enabling you to divide the content of obj.conf across several files to make management of your configuration easier.

The syntax of the <Include> tag is:

<Include>
  filename
</Include>

where filename is the name of the file to be included in obj.conf where the <Include> tag occurs.

When using the <Include> tag, keep these points in mind:

Information About the lookup-ipv6-first Parameter of the dns-config SAF

Proxy Server 4.0.15 supports a new parameter, lookup-ipv6-first, for the dns-config SAF of the DNS directive. The following table provides information about this new parameter.

Parameter 

Description 

lookup-ipv6–first 

(Optional) Boolean that specifies whether to look up IPv6 or IPv4 addresses first. The default value is false, meaning that IPv4 addresses are looked up first.

Information About the regexp-redirect Function of the NameTrans Directive

The section NameTrans in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference does not include information about the regexp-redirect function. Information about this function follows.

regexp-redirect

Applicable in NameTrans-class directives.

The regexp-redirect function enables you to change URLs and send the updated URL to the client. When a client accesses your server with an old path, the server treats the request as a request for the new URL.

Parameters

The following table describes parameters for the regexp-redirect function.

Parameter 

Description 

from

A regular expression for the prefix of the requested URI to match. 

url/url-prefix

url specifies a complete URL to return to the client. url-prefix specifies the new URL prefix to return to the client. The from prefix is simply replaced by this URL prefix. You cannot use these parameters together.

escape

(Optional) Flag that tells the server to util_uri_escape the URL before sending it. It should be yes or no. The default is yes.

For more information about util_uri_escape, see Oracle iPlanet Web Proxy Server 4.0.14 NSAPI Developer’s Guide.

bucket

(Optional) Common to all obj.conf functions.

Information About the status-code and status-desc Parameters of the send-error SAF

Proxy Server 4.0.15 supports two new parameters for the send-error SAF of the Service and Error directives. The following table provides information about these new parameters.

Parameter 

Description 

status-code 

(Optional) Specifies a status code to be set in the HTTP response. It differs from the code parameter in that code specifies which error code triggers execution of the send-error SAF, while status-code specifies a status code to be set in the response generated by the send-error SAF.

status-desc 

(Optional) Specifies a reason string for the status code.

Information About New Directives in the magnus.conf File

This section lists directives added to the magnus.conf file. Note that these directives are not documented in Chapter 3, Syntax and Use of the magnus.conf File, in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

Table 3 magnus.conf Directives

Parameters 

Valid Values 

Description 

ChannelPoolMonitorInterval

Any number of seconds 

(Added in 4.0.14 release.) Specify how frequently (in seconds) Proxy Server checks the channel pool for stale or closed connections. This value is used when ChannelPoolValidate is set to true. The default value is 30.

ChannelPoolValidate

true, false

(Added in 4.0.14 release.) Cause Proxy Server to actively check the channel pool for stale or closed connections every ChannelPoolMonitorInterval seconds. The default value is false.

ChannelReuseValidate

true, false

(Added in 4.0.14 release.) Cause Proxy Server to validate channels in the channel pool before reusing them. The default value is false

FtpPoolSize

1 – 65536

(Added in 4.0.12 release.) Specify the size of the FTP connection pool. The default value is 256. 

FtpPoolLife

1 – 65536

(Added in 4.0.12 release.) Specify the life of the connection in seconds, that the FTP connection remain unused in the pool before the monitor thread closes it. The default value is 3600. 

FtpPoolMonitorThread

OFF

(Added in 4.0.12 release.) Specify the boolean value to monitor the FTP thread functionality. The default is ON.

FtpPoolMonitorLevel

0

(Added in 4.0.12 release.) Specify an integer value. If set to 0 the pool monitor thread checks whether the connection is dead or alive. 

If set to 1, the NOOP command is sent to the connection and awaits for the reply. Failure to get a response will cause the connection to be removed from the pool. The default level is 1.

FtpPoolMonitorInterval

30 – 65536

(Added in 4.0.12 release.) Specify an integer value in seconds, after which the pool connections are monitored. The default value is 30 

LDAPPoolMonitorThread

Takes a boolean value. 

(Added in 4.0.12 release.) If set to TRUE, a ldap pool monitor thread would be created which monitors the ldap connection pool at regular intervals. The default value is FALSE.

LDAPPoolMonitorInterval

Takes an integer argument.  

(Added in 4.0.12 release.) Specifies the interval at which the ldap pool monitor thread inspects the ldap connection pool. The default value is 30.

LDAPPoolRevalidate

Takes a boolean value. 

(Added in 4.0.12 release.) If set to TRUE, every connection that is picked off the connection pool will be "revalidated" before being passed on to the caller. The default value is FALSE.

RouteOfflineCheckInterval

Takes an integer value. 

(Added in 4.0.15 release.) Specifies the interval, in seconds, at which Proxy Server performs a health check on gateways marked as offine by the routing subsystem. The default value is 30.

Documentation, Support, and Training

The Oracle web site provides information about the following additional resources:

Searching Product Documentation

Besides searching product documentation from the docs.sun.com web site, you can use a search engine by typing the following syntax in the search field:


search-term site:docs.sun.com

For example, to search for “proxy,” type the following:


proxy site:docs.sun.com

To include other Oracle web sites in your search (for example, java.sun.com, www.sun.com, and developers.sun.com), use sun.com in place of docs.sun.com in the search field.

Third-Party Web Site References

Third-party URLs are referenced in this document and provide additional, related information.


Note –

Oracle is not responsible for the availability of third-party web sites mentioned in this document. Oracle does not endorse and is not responsible or liable for any content, advertising, products, or other materials that are available on or through such sites or resources. Oracle will not be responsible or liable for any actual or alleged damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods, or services that are available on or through such sites or resources.


Known Issues

This section lists the more important known issues and limitations at the time of the iPlanet Web Proxy Server 4.0.13 release. The issues are listed by category:

Administration

The following table lists the known issues related to the administration user interface.

Table 4 Known Issues in Administration

ID 

Summary 

6653507 

If Monitor Current Activity Statistics/Profiling is set to ON, it cannot be turned OFF from the user's interface 

6212701 

Conflicting error message is displayed when server instance fails to start. 

The chances of occurrence of this conflicting error message is minimal as the chances of the administration interface writing wrong information in the configuration file is minimal. It can only occur if the user manually writes wrong information into the configuration file.  

6231297 

The Restart Required link disappears if changes are made to the SOCKS configuration and the Proxy Server is restarted instead of the SOCKS Server. 

6484502 

Proxy Server administration interface is not localized. 

6509535 

Daylight Savings Time (DST) will start in USA from the 2nd Sunday of March and end on the 1st Sunday of November. This will impact the date and time rules of the operating system and JRE.  

In the standalone version of proxy server, JRE version compatible with 2007 DST changes is bundled with the installer. However, you need to address the impact on the date and time rules of the operating system by installing the appropriate Operating System patches as explained in step 1 of the Workaround. 

For the JavaES 5 installation of proxy server, you need to install the Operating System patches and also the compatible version of JRE . Follow steps 1 and 2 of the Workaround. 

Workaround

  1. Download and use the appropriate operating system patches. You can download the Solaris patches from http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1.

    For other platforms, download similar DST compatible patches from the Operating System vendor's web site.

  2. For Solaris, Windows, and Linux, run proxy server with JRE 1.4.2_13. For HP-UX, run proxy server with JRE 1.4.2.12.

6558027 

On Windows, server identifier with multibyte characters causes server-side createInstance.exe error.

6867774 

The administration server fails to start up when a proxy installation that uses a custom JDK configuration is upgraded to a service pack version that requires a newer JDK version. After the upgrade, the JDK configuration must be manually modified to point to either the bundled JDK or a custom JDK of the required version. 

6909558 

Backslashes should be used in LDAP uids only to escape special characters. The ldap sdk used by the Proxy server will remove backslashes from the uid before sending the same to the directory server. This can possibly lead to a situation where the authentication fails where it should succeed (because the uid, with backslashes stripped, finds no match in the directory server), or even succeeds where it should fail (because the uid, with backslashes stripped, finds a match in the directory server).

6888170 

Upgrade fails on RHEL4 when the specified target directory name contains a trailing slash.

Caching

The following table lists the known issues related to caching.

Table 5 Known Issues in Caching

ID 

Summary 

6654514 

Proxy-Agent header displays the original header for request type 504. 

6229823 

When a new partition is added a default section s0.0 is also created irrespective of the partition size. Warning messages are logged in the errors file. 

Workaround

Use the cbuild utility to add the new partition or delete the s0.0 folder under the new cache partition, and restart the proxy server.

The error messages can be ignored. 

6619620 

Doc RFE: Proxy Server should not be used with Network Cache Accelerator (NCA). 

When the Proxy Server 4.0.8 is used with NCA, a browser repeatedly prompts for the User ID and password. This happens because NCA does not support Proxy-specific headers like Proxy-authorization.

Workaround

Do not select NCA in the Proxy Listen Socket setting. 

Installation

The following table lists the known issues related to installation.

Table 6 Known Issues in Installation

ID 

Summary 

6205683 

Windows console installation fails. 

6255325 

The installer throws an exception and the installation fails on Linux if the user installs the Proxy Server as a non-root user and the /var/opt/sun/install directory does not exist.

6353576 

Silent upgrade installation does not work. 

6587776 

Proxy Server from Java ES 5 on Windows XP displays system error 1067. 

6756659 

Proxy Server 4.0.9 can be installed on OpenSolaris by using the GUI installer only if the --javahome option of the setup command is used to specify a JDK 1.6 location.

6607551 

On Windows, uninstalling the patch does not change the Proxy Server version to the previous version number. 

Reverting the patch through Uninstaller script does not change the service description name to the previous Proxy Server version due to RenameService.exe utility limitations. Therefore, even after uninstalling the patch, the service description shows the latest Proxy version instead of the previous version number.

Internationalization

The following table lists the known issues related to internationalization.

Table 7 Known Issues in Internationalization

ID 

Summary 

6233080 

The Disable Proxying option does not work for the URL with multibyte data (URL encoded) when routing is set through another proxy server. 

6233090 

A URL with multibyte data (URL encoded) cannot be mapped. 

6253844 

Proxy server online help does not support the language zh-cn. 

6297168 

Starting the server in a different system encoding causes any errors returned by the system in that particular system encoding to be logged in the error log. When viewed through the Administration server, the error log might have characters in system encoding that do not display properly. 

Workaround

Change the browser encoding to match the OS locale so that the error log can be properly viewed through the administration interface. But this will be needed every time you move to other pages and then return to View Error Log again. 

6300080 

Proxy server's content rewriting function is inconsistent.  

6526476 and 6526488 

In a standalone installation of proxy server on HP-UX, the installation in GUI mode results in the display of corrupted Japanese characters (ID no. 6526476). If the installation is continued, it results in error while creating an instance (ID no. 6526488).  

Workaround

You can use either of the following workarounds: 

  • Use the CLI mode of installation for Japanese locale on HP-UX.

  • Continue the installation even with the corrupted display of characters. When the installer fails to create an instance, log in to the administration interface and create an instance.

6550995 

The following error message is not localized for all the locales: 

HTTP7774: received extraneous data following response

Localization

The following table lists the know issues related to Localization.

Table 8 Known Issues in Localization

ID 

Summary 

6779070 

The Proxy Server OLH has broken links for Terms of Use.

6253844 

The set language option in the Proxy Server OLH does not support the language zh-cn.

6828246 

The Korean characters are not displayed in the Proxy Server installer on RHEL 5.2. 

SOCKS

The following table lists the known issues related to SOCKS.

Table 9 Known Issues in SOCKS

ID 

Summary 

6245453 

The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented. 

6263389 

No error is reported when two instances of SOCKS are started using the same port on Windows. 

6285791 

SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in stand-alone installation of Proxy Server.

Documentation

The following table lists the known issues related to the Proxy Server 4.0 documentation.

Table 10 Known Issues in Documentation

ID 

Summary 

6957135 

Documentation of the magnus.conf directives added in Proxy Server 4.0.12 is missing from Chapter 3, Syntax and Use of the magnus.conf File, in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.

Workaround

See the documentation for these directives in Information About New Directives in the magnus.conf File.

Features and Enhancements in Previous Proxy Server 4.0 Releases

The features and enhancements in Proxy Server 4.0 releases prior to Proxy Server 4.0.14 are described in the individual Release Notes documents specific to those releases, available on docs.sun.com at http://docs.sun.com/prod/webproxys4.0#hic. This section lists the important features and enhancements provided in Proxy Server 4.0 releases between 4.0.13 and the current release:

Features and Enhancements in 4.0.14

In addition to fixing quite a number of bugs, as listed in Table 11, the 4.0.14 release of iPlanet Web Proxy Server provides a number of enhancements to address customer requests:

Issues Resolved in Previous Proxy Server 4.0 Releases

This section lists the most important issues fixed in the following releases:

Issues Resolved in 4.0.14

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.14.

Table 11 Issues Resolved in iPlanet Web Proxy Server 4.0.14

ID 

Summary 

6914759 

the pool monitor thread's interval should be configurable 

6916393 

Proxy 4.0: channel pool implementation: need optional validation of pooled channels 

6917624 

Proxy 4.0: httpclient should (optionally) always retry when a keep-alive connection is stale 

6917655 

Proxy 4.0: (optionally) validate a connection before reusing 

6920803 

document the new directive: ChannelPoolValidate added as part of the fix for 6916393 

6920804 

document the new directive: ChannelPoolMonitorInterval added as part of the fix for 6914759 

6920805 

document the new directive: ChannelReuseValidate added as part of the fix for 6917624 

6920806 

document the new parameter: always-retry-stale-keep-alive added as part of the fix for 6917655 

6920836 

CR#6648470 is not listed in Readme of patch#120981-19 

6921169 

There's no description about "retries" parameter of http-client-config in the manual. 

6921170 

The behavior with retries="0" is not described. 

6921721 

Proxy 4.0: crash under load on linux 

6923914 

SJSPS 4.0.13 server instance fails to start for T5240 niagara cert token "Sun Metaslot" 

6931137 

Proxy 4.0: rebranding: installer: change default install location 

6931138 

Proxy 4.0: rebranding: change product name/version string 

6931139 

Proxy 4.0: rebranding: admin OLH: modify image and links 

6931140 

Proxy 4.0: rebranding: top frame of admin GUI screen needs changes to reflect oracle rebranding 

6931141 

Proxy 4.0: rebranding: admin: the copyright text in the "Version" popup window should be modified 

6931142 

Proxy 4.0: rebranding: Product README file should be updated as part of oracle rebranding 

6931143 

proxy 4.0: rebranding: installer: change installer's left pane image 

6931988 

proxy 4.0: rebranding: installer should not display any license 

6931989 

Proxy 4.0: rebranding: Support browsers IE8 and FF 3.5 

6931990 

Proxy 4.0: rebranding: Product License file should be updated as part of oracle rebranding 

6931991 

Proxy 4.0: rebranding: installer: Product name should be changed 

6931994 

Proxy 4.0: rebranding: installer: change installer's/uninstaller's log file name 

6931996 

Proxy 4.0: rebranding: installer: copyright string should change in instance/admin scripts/config 

6931997 

Proxy 4.0: rebranding: dtd file names should be changed 

6932000 

Proxy 4.0: rebranding: default value of "Proxy-agent" header should be changed 

6932002 

Proxy 4.0: rebranding: default authentication prompt in ACL templates should be changed 

6932476 

Proxy 4.0: NTLM support: server keeps wrong count of idle connections in connection pool 

6932483 

Proxy 4.0: NTLM: server should not cache responses passing through an authenticated connection 

6933138 

Proxy 4.0: rebranding: change copyright strings in external header files 

6933148 

Proxy4.0.13 Admin GUI default security Cryptographic Module should not set to NSS Generic Crypto Ser 

6933175 

WPS suffers from an input checking error which permits the reading of arbitrary files from local fs 

6933223 

Version changes for 4.0.14 

6933599 

Proxy 4.0: issues with support of "Proxy-support:" header 

6933647 

Proxy 4.0: rebranding: admin OLH: changes to reflect new product name 

6934367 

Upgrade on windows creates a "Oracle iPlanet Web Proxy Server" entry in add/remove programs 

6936445 

proxy 4.0.13 - 2 new CA root certs cannot be displayed correctly from admin GUI 

6937256 

submit and revert button under ACL setting under admin GUI are not being dispalyed in firefox 3.6 

6937459 

Proxy forwards POST headers without POST entity body 

6939617 

Proxy 4.0: rebranding: installation: windows upgrade fails upon change of product name 

6939990 

Proxy 4.0: rebranding: admin GUI: change images in the "Version" popup 

6940022 

Proxy 4.0: compiler version change: move to sun studio 12 

6941325 

Pxy 4.0 Docs: Cache Capacity needs updating in Proxy Admin Guide  

6941493 

Proxy 4.0: rebranding: changes to package/rpm related files 

6941954 

Proxy 4.0: rebranding: Admin server's realm string should not contain a "Web" prefix 

6941956 

Proxy 4.0: rebranding: OLH: modify/remove the "Document Information" page 

6944070 

Proxy 4.0: rebranding: admin GUI version window title needs to be changed 

6945311 

Proxy 4.0: rebranding: Proxy Agent Header in the Admin GUI should show Oracle iplanet Proxy Server 

6945318 

Proxy 4.0: urldb emits invalid warning/error message while expiring cache files 

6946167 

Proxy 4.0: rebranding: upgrade in windows should not create a new entry of start > programs > 

6955678 

Problem with directory permissions 

6955684 

Problem with file permissions 

6955723 

Problem with JSESSIONID 

6955741 

Problem with html pages 

6955759 

problem with admin console (param INSTANCE_NAME) 

6955761 

problem with admin console (reflected XSS) 

6955762 

problem with admin console (param absolute) 

6955763 

problem with admin console (param mime) 

6955764 

problem with admin console (param cmd) 

6955765 

problem with admin console (param type) 

6955766 

problem with admin console (adminReferrer) 

6955769 

problem with admin console (resource) 

6956084 

Problem with admin console (target) 

6956086 

Problem with admin console (dscruser-lang) 

6956143 

Problem with admin console (clickjacking) 

Issues Resolved in 4.0.13

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.13.

Table 12 Issues Resolved in iPlanet Web Proxy Server 4.0.13

ID 

Summary 

6886805 

Proxy Server 4.0 appears to go into a high CPU consumption loopwhile processing POST requests for ftp URLs. This is accompaniedby memory growth.

6896637 

Proxy Server 4.0 goes into high CPU consumption and memory leak while processing ftp HEAD requests.

6896640 

Proxy Server 4.0 crashes during startup if server.xml does not contain GC-related configuration.

6900117 

Integrate NSS 3.12.5 which contains fixes for the SSL/TLS vulnerabilities. 

6905852 

Proxy Server 4.0 crashes due to a bug in caching subsystem. 

6862976 

Proxy Server 4.0's "map" SAF should allow mappings to specific files on a remote server. 

6875375 

Proxy Server 4.0 Admin GUI Cache View (cv) program crashes. 

6878190 

Proxy Server 4.0.x supports Sun Fire T-Series Crypto Accelerator when installation user and instance user are the same, such as root

6878699 

Proxy Server 4.0.8 has .htaccess issues with grpfile if this user belongs to multiple groups.

6885145 


 "HTTP3287: connection limit (XXXX) exceeded, closing socket"

Proxy Server 4.0 displays the above error message every time when the requests exceed a ConnectionQueue size.

6888184 

After upgrade, installer displays strangely worded message in Proxy Server 4.0.11.  

6891353 

Proxy Sever 4.0.x does not recognize $ character. 

6895030 

The cache finish status can be missing/empty due to existing lock file under heavy load conditions. 

6897536 

Proxy 4.0 currently does not support the behavior promised by a "Proxy-support: Session-Based-Authentication". 

6898929 

Proxy 4.0.13 supports Microsoft Windows 2008 Enterprise Edition. 

6900151 

When a cached object is being refreshed after it's size has changed at the remote server, and chunked encoding is used, the cache-finish status is absent in the server's access logs. 

6901079 

The http client can be enhanced to optionally run the Error stage for any error responses that it receives from a backend server.

6906258 

Proxy Server 4.0 needs to support arbitrary LDAP search filter in dbswitch.conf.

6906789 

Corrupted cache files can be formed in a Proxy 4.0 installations cache under load. 

6910914 

URL mapping does not work with send-error.

Issues Resolved in 4.0.12

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.12.

Table 13 Issues Resolved in iPlanet Web Proxy Server 4.0.12

ID 

Summary 

6856153 

Proxy 4.0 crashes in the ftp subsystem under stress.

6856800 

Mapping cache breaks under a high load environment on Proxy Server 4.0.8. 

6869927 

Integrates NSS 3.12. 

6882485 

Proxy Server 4.0 crashes during startup with ICP enabled and MaxProcs > 1.

6851886 

Adds a dedicated thread to monitor the ldap connection pool for validation.

6863071 

Proxy Server 4.0 caching does not happen for large query strings (> 150 characters, approximately). 

6864966 

Feature request to strip the version number out of the service name (Proxy Server 4.0.11). 

6864967 

Notifies the end user when the upgrade custom Proxy Server installation to check javahome .

6868580 

Version changes for 4.0.12. 

6872808 

Proxy Server 4.0 should support Windows 2003 R2 SP2. 

6874449 

Proxy Server 4.0 build patch scripts need to be notified for new buildpatch location.

6876811 

SSL tunnel does not log initial wait time and full wait time in extended2 logging.

6882926 

Proxy Server 4.0 ICP port not available on Solaris x86. 

6883024 

Proxy Server 4.0 byte range handling is broken. 

6883480 

Proxy Server 4.0 displays “Bad CIF entry” message while looking up a cache file. 

6883492 

Proxy Server 4.0 does not receive ICP messages by peers on x86. 

6878213 

send-error should choose error file path based on browser locale.

Issues Resolved in 4.0.11

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.11.

Table 14 Issues Resolved in iPlanet Web Proxy Server 4.0.11

ID 

Summary 

6835885 

The ftp subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and server crash.

6837779 

A memory leak is observed in Proxy Sever 4.0 ftp subsystem while accessing directories through ftp.

6842576 

The caching subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and returns incomplete response headers when served from the cache.  

6844188 

Proxy Server 4.0 can crash due to memory corruption, while serving ftp requests from the cache.

6847078 

The caching subsystem of Proxy 4.0 should identify and avoid processing of corrupt cache files to serve requests. 

6847467 

Configuring the Proxy Server 4.0 to use the pre-filter SAF causes server to crash.

6853447 

Proxy server crashes when the script associated with the pre-filter SAF contains an empty line at the beginning. 

6827602 

The statistics generation in Proxy Server 4.0 should show data for both "Client DNS cache" (host-to-ip) and "Host DNS cache" (ip-to-host).

6836430 

The Expires header is not handled correctly in Proxy Server 4.0.9. 

6837471 

Proxy Server 4.0.9 fails to display Statistics page on Linux and throws a "500 Error".  

6838323 

Proxy Server 4.0 displays wrong "504 Gateway Timeout Error" when <NameTrans fn="set-variable" error="504">.

6838907 

Windows Installer for Proxy Server 4.0 does not allow port values less than 1024 for the server instance, while allows for Admin server. 

6843724 

Garbage collection in Proxy Server 4.0 may produce a race condition under heavy load. 

6847488 

A bug in the Proxy Server 4.0 Admin interface makes it difficult to edit template assignments that contain '+' characters. 

6847849 

The server.xml file is not updated on modifying the cache "Working Directory" in Proxy 4.0 Admin interface.

6848296 

Authentication problems is observed in Proxy 4.0, while using ACLCacheMax parameter.

6849204 

A potential memory corruption and server crash occurs in Proxy Server 4.0 due to a parray module issue.

6849650 

Proxy server crashes during restarts when configured for MaxProcs > 1. 

6853436 

While updating the cache size through "Set Cache Specifics", server.xml does not get updated.

6808135 

Proxy Server 4.0.9 has a typo issue while accessing "Server Config Information" panel in both Admin GUI and CLI. 

6825292 

Proxy Server 4.0 should allow Admin GUI to enable or disable both types of DNS cache; ip-dns-cache-init and host-dns-cache-init.

6840526 

Proxy Server 4.0 has potential problems with parray code.

6841509 

During Proxy installation, selecting “Startup on Boot = yes” results in an error. 

6843134 

Verbose logging mode of automatic GC is required. 

Issues Resolved in 4.0.10

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.10.

Table 15 Issues Resolved in iPlanet Web Proxy Server 4.0.10

ID 

Summary 

6764910 

Proxy Server 4.0 crashes due to dynamic reconfiguration. 

6783252 

Proxy Server 4.0, should display cache finish status for responses marked as non-cacheable by the remote server.

6793247 

Proxy Server should optionally ignore caching directives in HTTP request headers. 

6559322 

Proxy Server must support large web proxy cache size greater than 32 GB. 

6773378 

URL filtering must allow to specify relative URLs. This facilitates URL filtering to work along with load balancing. 

6781954 

The passthru-cookies parameter, in URL mapping feature, used to specify cookies does not function properly in few cases.

6785653 

POST with proxy authentication fails with a 407 error if you have not authenticated before the POST.  

6789769 

The URL filter functionality does not consider CONNECT requests.

6791870 

Proxy Server's admin interface does not allow multiple reverse mappings to the same destination. 

6798154 

Certain url constructs, with a space and a single quote, are not translated properly by the Proxy Emulator.

6804616 

Proxy Server 4.0.10 supports the feature - Transparent Proxy Support for HTTP/1.1 requests.  

6803379 

The iPlanet Web Proxy Server 4.0.9 patch, 120983–16 and prior versions, provides support for RHEL 3.0, 4.0, and 5.0.  

6796045 

In Proxy Server's admin interface, the DNS cache information in Monitoring functionality should be updated appropriately. 

6754044 

Upgrading Proxy Server on a Windows box fails, as only a single installation of Proxy Server 4.0 is allowed on Windows box.  

6781259 

The Java version information on the Proxy Server installation wizard is not updated. 

6820625 

URL rewriting fails, when an url has a space after a quote.

6820622 

Proxy Server inserts a wrong If-modified-since: request header when without-lastmod is enabled.

6817164 

cbuild should include appropriate help message for the -R option.

6816997 

Proxy Server 4.0 has a problem in the map SAF's HTTP redirect functionality.

6812802 

Proxy statistics is not displayed for DNS on HPUX, after enabling the Activate Statistics/Profiling.

6805450 

Web Proxy Emulator problem while using DHML application. 

Issues Resolved in 4.0.9

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.9.

Table 16 Issues Resolved in iPlanet Web Proxy Server 4.0.9

ID 

Summary 

6712042 

Proxy Server 4.0 encounters an instance hang in cache_filter_remove function.

6713723 

In Proxy Server 4.0, the cache partition/section .size files do not always show accurate values.

6715885 

Proxy Server 4.0 reported log error messages related to cache lock file problem. 

6715891 

In Proxy Server 4.0, templates meant for CONNECT requests do not function properly.

6721344 

Proxy Server 4.0 should have the ability to rewrite client headers. 

6722629 

Proxy Server 4.0 leaks file descriptors in the ftp subsystem when configured in PORT mode.

6722646 

Proxy Server 4.0 leaks file descriptors in the caching subsystem while handling partial HTTP responses.  

6723344 

In Proxy Server 4.0 the cache statistics collection logic performs a complete cache traversal, during startup. This happens multiple times, contributing to a slow server startup.  

6725741 

Disabling statistics or profiling functionality in Proxy Server 4.0 Admin interface, does not function properly. 

6727215 

In Proxy Server 4.0, large negative values are seen for xfer-time in access log.

6728447 

In Proxy Server 4.0.7, digest authentication used to process an ACL fails when the URI contains a query string with backslashes.  

6735228 

In Proxy Server 4.0, caching subsystem has a file descriptor leak under certain conditions. 

6739585 

Proxy Server 4.0 needs an alternative faster method to find out current cache size.  

6740248 

In Proxy Server 4.0.7, Admin GUI displays null for Processes and Listen Queue Size instead of default values.

6741262 

Performance optimization is required for Proxy Server 4.0 caching subsystem.  

6745095 

Proxy Server 4.0 should tolerate HTTP responses that contain embedded spaces in header names.  

6745170 

Proxy Server 4.0 should support on RHEL5. 

6746138 

Proxy Server 4.0 should have the capability to rewrite HTTP request bodies.  

6747928 

FTP requests going through Proxy Server 4.0 as URL ftp://user:password@server, where password contains @ character generates an incorrect response.

6750791 

Proxy Server 4.0.7 crashes under load, due to a problem in the ACL subsystem.  

6759153 

Proxy Server 4.0.8 crashes, due to a problem in the URL Mapping subsystem. 

6762346 

Improper handling of cache-control header in Proxy Server 4.0.

6768244 

Improper functioning of channel pooling logic in Proxy Server 4.0, results in service unavailability and possible memory leak. 

6275141 

File cache functionality is not implemented in Proxy Server 4.0. 

6767688 

Proxy Server 4.0 should support the “only-if-cached” cache-control directive.

6767691 

Proxy Server 4.0 should support the "stale-while-revalidate" cache-control extension.

Issues Resolved in 4.0.8

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.8.

Table 17 Issues Resolved in iPlanet Web Proxy Server 4.0.8

ID 

Summary 

6648112  

Proxy Server 4.0.6 and 4.0.7 does not provide a way to disable EPSV FTP Transfer Mode. 

6655221  

Increase the maximum timeout for idle connections on the Proxy Socks Server 4.x. 

6660265  

flexanlg/dpstats log analyzer is unable to deal with large access log files.

6660814 

In Proxy Server 4.0, the block/fwd IP character of the most specific object is not enforced correctly. 

6664392 

In Proxy Server 4.0, improper handling of vary header occurs.

6664646 

In Proxy Server 4.0, improper handling of via header occurs.

6670738 

In Proxy Server 4.0, there is a possible 'High CPU Utilization' problem in the FTP subsystem. 

6688600 

Proxy Server 4.0.7 Admin GUI adds am into server.xml when using Caching-Schedule Garbage Collection page.

6692494  

In Proxy Server 4.0, cache filter masks client write failures even when a cache file is not opened. 

6692495 

Proxy Server 4.0 can crash during Garbage Collection/Cache iteration code. 

6695257 

Integrate URL Mapping feature. 

6707473 

Heap-based buffer overflow exists in FTP Proxy Server. 

6708838 

Upgrade to JDK 1.5 in Proxy Server 4.0. 

6708842 

Telemetry feature for Proxy Server 4.0. 

6711396 

dpstats dumps core in customer log file.

6454382  

Reverse Proxy should allow changing cookie domain value in set-cookie.

Issues Resolved in 4.0.7

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.7.

Table 18 Issues Resolved in iPlanet Web Proxy Server 4.0.7

ID 

Summary 

6729343 

Proxy Server 4.0.7 - Upgrading on Windows 2003 while the server is running fails. 

When upgrading on Windows from Proxy Server 4.0.6 to Proxy Server 4.0.7 without stopping the server, the process fails with errors. 

Stopping the server before attempting the upgrade will ensure the upgrade runs successfully. 

6261401  

URL filter files should be created under config directory instead of the conf_bk directory.

6590476 

FTP subsystem is not closing the old connections appropriately. 

6591980 

The ownership of the URL filter is not set to that of the server instance user. 

6592079 

Backup files are getting created with wrong ownership. 

6594729 

Receives an HTTP 7756 invalid response header, but serves the file to the client.

6595773 

FTP in Proxy Server 4.0.5 shows incorrect directory list.  

6596860 

Proxy Server should return a correct response when a pooled FTP connection receives the reset packet. 

6599212 

Add a dedicated thread which monitors the FTP connection pool for dead connections. 

6600193 

Proxy-Agent header does not work. 

6602044 

Incorrect FTP response while reloading the page multiple times. 

6602049 

Need to improve handling of FTP requests for internal objects like file and folder icons.

6604108 

Incorrect response while dealing with invalid response headers. 

6605322 

Provide an in-process cleaning facility to clean cache entries fast. 

6613934 

Digest authentication prompts user to authenticate repeatedly. 

6619592 

httpacl and alias directories exist for the removed instance.

6620274 

Proxy Server 4.0.6 is unable to create new cache working directory if parent directory does not exist. 

6621398 

Proxy Server 4.0.6 fails to work with FTP server when you try to forward map to a back end of FTP server. 

6622805 

Proxy Server 4.0 does not respond and gets timed out, while accessing certain FTP URLs. 

6622813 

Proxy Server 4.0: starts very slow when the cache size is huge. 

6628381 

A proxy instance for which the cache is disabled cannot be removed cleanly. 

6634127 

Memory corruption causes server crash. 

6635864 

Manage Certificates screen on the administration interface is not displayed correctly. 

6639455 

Proxy server does not respond on stop or restart.  

6641201 

The Proxy-Authenticate headers are not passed correctly to the end client in a forward proxy. 

6648470 

Proxy 4.0: Possible memory corruption while processing responses that contain “Vary:” 

Issues Resolved in 4.0.6

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.6

Table 19 Issues Resolved in iPlanet Web Proxy Server 4.0.6

ID 

Summary 

6224535 

Timeout functionality does not work. 

6460215 

Cannot connect to an IPv6 enabled web site when connecting through proxy server. 

6478413 

Uninstalling a proxy server instance does not result in the removal of the files corresponding to the instance from the alias and httpacl directories.

6494418 

block-multipart-posts doesn't block the request when content-type parameter is set. 

6505578 

sockd daemon can run out of worker threads when processing UDP associated requests.

6513846 

Proxy Server 4.0.6 documents are updated to remove reference to HTTPS caching. 

6514870 

Removing a template through the Remove Template option does not remove all the assignments for that template. 

6520593 

A new section “Precedence of Regular Expressions Over Templates in Set Cache Configuration” is added to chapter 16 in the Proxy Server 4.0.6 Administration Guide to explain why templates used within Set Configuration do not work but manually entered regular expressions do.

6526659 

Incorrect server start command is displayed in the installer. 

6529376 

The default cache size for proxy server on Windows is 100 MBytes but the help page states that it is 1.6 GBytes. 

6530476 

The path to the libjvm.sl file in the start script is not set correctly.

6534717 

When cache-status is enabled in access log, the access logs repeatedly show cache file as written and deleted for request headers that have cache-control set to no-cache.

6537346 

Log entries show cache status as written , even when cache file is not created. 

6538613 

cachegc dumps core if the proxy instance's cache directory has been modified.

6541327 

cachegc sometimes works incorrectly.

6545753 

Error log shows a confusing error message when the proxy server encounters an invalid request line. 

6546256 

On Windows, a regular expression is not registered correctly in obj.conf .

6546720 

Cannot connect to certain sites when DNS cache is enabled. 

6547808 

On Windows, the watchdog process crashes when the proxy instance is stopped through the service manager.

6559837 

Proxy server crashes while handling an ftp request.

6560432 

The Proxy Server 4.0.6 Administration Guide and the online help are updated to include description for Source Port Number.

6562122 

For a SSL proxy instance an incorrect password entry does not get written to the errors file. 

6562165 

Proxy Server 4.0.6 Administration Guide is updated to remove references to the file cache functionality.

6562585 

Proxy Server 4.0.6 Release Notes is updated to provide the correct version number for NSPR.

6563262 

During ftp access some error log messages are noticed that convey no information and can be confusing.

6564435 

Details of the Cache Section Table on the administration interface are not displayed correctly. 

6565004 

Proxy Server 4.0.6 Release Notes is updated to provide correct link to the Proxy Server documentation page.

6565021 

Internal log rotation rotates the files twice if the system time is changed between two scheduled rotations.  

6565436 

The section "Disabling the Forward Proxying feature in a Reverse Proxy Setup" under "Setting Up a Reverse Proxy" in Chapter 14 of the Proxy Server 4.0.6 Administration Guide is updated to add information about how to prevent a security vulnerability in a reverse proxy server configuration.

6566246 

Cross site scripting vulnerability in the View Error Log functionality. 

6566309 

Cross site scripting vulnerability in the View URL Database functionality. 

6566352 

Cannot connect to an IPv6 FTP server through proxy server. 

6566822 

HTTP headers with a very long value can cause memory corruption in proxy server.  

6566836 

flexanlg dumps core.

6566889 

After setting a value for Processes in the Configure System Preferences page , the value can not be changed back to null. 

6566924 

Help page is updated to provide a clearer explanation for Processes in the Configure System Preferences page. 

6568534 

Reference to Proxy Server 3.6 documentation issue is removed from Proxy Server 4.0.6 Release Notes.

6569516 

Proxy Server accepts and forwards responses whose header names contain spaces. 

6572128 

Localized online help is updated to provide the correct context sensitive help page. 

6572138 

The access log does not include certain connection related information. 

6574401 

Proxy Server supported browsers to be enhanced to include Internet Explorer (IE) v7  

6576044 

Proxy Server 4.0.6 Configuration File Reference is updated to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT.

6576050 

Proxy Server 4.0.6 Online Help is updated to specify the effect of HTTP client's retry functionality. 

6576065 

Proxy Server 4.0.6 Online Help is updated to make it consistent with Sun's style guidelines and proxy server's product user interface. 

6577128 

Proxy server support to be extended for Sun Crypto Accelerator 6000. 

6578024 

LDAP connection failure errors. 

6578560 

In the message that proxy server displays after an upgrade to indicate how you can access the administration server, the server name and port name are indicated as null (http://null:null). 

6579049 

Proxy server creates an incorrect partition which causes errors during startup. 

6579781 

An empty host-regex argument in the virt-map directive results in proxy server crash.

6581350 

Proxy server installation contains debug JDK binaries. 

6584989 

In the Version window, the label is not located in the center of the Close button when the browser is IE 7. 

6594191 

Localized Online Help has to be integrated to Proxy Server 4.0.6. 

Issues Resolved in 4.0.5

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.5

Table 20 Issues Resolved in iPlanet Web Proxy Server 4.0.5

ID 

Summary 

6240773 

Deleting listen socket and restarting the server does not clear the port. 

6390867 

On Windows, cv.exe fails when you try to view the information for a cached csv file.

6391439 

Clearing the Enable DNS subdomains option in the administration interface does not remove the line DNS fn="dns-config" local-domain-levels="0" from the obj.conf file.

6413536 

webservd must be used as the default user and not nobody.

6463455 

Proxy Server 4.0.5 Release Notes is updated to state the version of Sun Crypto Accelerator that supports the proxy server.

6466910 

Proxy Server 4.0.5 Administration Guide is updated to describe the procedure to set up Sun Crypto Accelerator to work with proxy server.

6482102 

Files cannot be retrieved from certain FTP sites through web browsers when connecting through the proxy server. 

6500200 

Expired page is not displayed in the administration interface. 

6500224 

FTP through SOCKS routing does not work. 

6500232 

Proxy Server 4.0.5 Online Help is updated to mention Cache in the help page for the Monitoring Server Status page. 

6500547 

FTP through SOCKS routing occasionally results in file corruption. 

6506550 

Proxy server can crash due to null pointer access in caching subsystem. 

6513846 

Proxy Server 4.0.5 Release Notes is updated to state that proxy server does not support HTTPS caching. 

6517969 

Processing of obj.conf and ACL does not work as expected.

6520629 

Configure Virtual Multihosting page in the administration interface does not allow user port number in host-regex.

6521610 

When the Set Cache Specifics page in the administration interface is used to enable cache, it does not remove "cache-disable" line in the obj.conf file.

6523139 

Proxy server debug build does not log all the information, such as disconnects. 

6524253 

Proxy server watchdog core dump. 

6524898 

When the cache structure is created by cbuild.exe, the .sects file in the cache becomes empty after the instance starts up.

6525294 

The flexanlg utility dumps core if there are any syntax problems in the log file.

6526297 

The Manage Section page in the proxy server administration interface lists all the sections of all the partitions, and offers a way to move sections from one partition to another. This feature does not work correctly. 

6526354 

When a new Partition is added, one section is gets created.  

6526964 

SOCKS v5 server disconnects sessions unexpectedly. 

6526990 

The localized versions of Proxy Server 4.0.4 Online Help have a link that does not work properly. 

6527840 

Shutting down the SOCKS server using the administration interface results in a different message compared to the message that is displayed while starting up.  

6528069 

Though the maximum cache partitions possible in proxy server is 32, there is a problem in creating 32 partitions in Proxy Server 4.0.3. 

6529305 

When using Virtual Multihosting, if you define the host in upper case, it does not work. 

6534208 

Version string has to be changed for the 4.0.5 release. 

6537410 

Proxy server sometimes waits to receive a new http request until the web server closes the connection. 

6537736 

Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the handling of domain name address types within the sockd daemon.

6537745 

Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the s5auth_userpass() function within the sockd daemon.

6538060 

The startsvr and stopsvr scripts of proxy administration server refer to proxy-admserv404 instead of proxy-admserv405.

6538173 

On HP-UX, the administration server displays an error page when you try to add a listen socket to a proxy instance. 

6539318 

On Linux, the utility cbuild does not work.

6539689 

On Linux, if the group ID 80 already exists, proxy server installation does not work and the installation failure does not result in proper installation log. 

6544263 

Localized versions of the Proxy Server 4.0.5 Online Help must be updated with the changes made to the English version of the Online Help.  

6545267 

Proxy Server 4.0.5 Configuration File Reference is updated with information about log parameters.

Issues Resolved in 4.0.4

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.4

Table 21 Issues Resolved in iPlanet Web Proxy Server 4.0.4

ID 

Summary 

4973509 

Cache-Control directive for private/no-cache headers is not supported for multiple values.

4973523 

HEAD requests are not cached. 

4973652 

Proxy server does not support 65536–byte long URIs. 

4999184 

When proxy server is configured in reverse proxy mode pointing to a web server, the error message displayed when the web server is down should not mention that it is a proxy sever. 

5093104 

Proxy server administration interface allows trailing white space for a HTTP header in client IP forwarding. 

6208895 

An FTP request through the proxy server to a Microsoft IIS FTP server does not work. 

6214329 

Error in error log for HTTP4352:zlib internal error. 

6233086 

For client credentials forwarding with multi-byte user name, validation check needs to be added. 

6243358 

A deleted user still appears as part of a group. 

6245972 

User's permission set through the Administer Access Control page does not get implemented. 

6246562 

Controlling a set of servers installed on different locales and platforms through clusters fails when stopping the set of servers. 

6253844 

There is no support for “zh-cn” for proxy server online help. 

6255761 

There is no content at the Installer Help page.  

6255838 

When a proxy server instance is removed without stopping the SOCKS server and a new instance is created, you will not be able to start the SOCKS server on the new instance as the port would be in use.  

6256442 

The installer displays the error message "Password should be at least 8 characters" only in English.  

6266497 

Administration interface allows duplicate port numbers in the Add Server page. 

6268356 

On Windows, SNMP service does not work if libnspr4.dll is not present in the system32 directory.

6274424 

On Windows, the value for defaultInstallDirectory in the state file is wrong. The default installation directory in the installer is c:\sun\ProxyServer40, but the state file generated when you use the command setup --savestate does not have c:\sun\ProxyServer40 as the default installation directory. The state file displays the UNIX template value as the default installation directory.

6304981 

Proxy server installation fails on Linux if ksh is not installed on the machine. 

6310283 

In the proxy server administration interface, sometimes the tabs display incorrect page content.  

6312087 

Localized online help is not context sensitive. 

6313904 

The administration server does not allow you to set a listen socket with a port number that is used for another IP address. 

6321797 

Proxy Server 4.0.3 Configuration File Reference is updated with information for the flex-init parameter no-format-str.access.

6331035 

Load balancing feature works only for regular expressions.  

6333355 

When the ACL caching is enabled, the user/group definition in the ACL has to exactly match the case of the LDAP entry for the ACL caching to happen. 

6337657 

Proxy server displaying Internal Server Error message when the configuration of Distributed Administration is attempted.  

6369549 

Proxy patch installation on JavaES 5 results in some errors on Linux. 

6371618 

Can not change Compression Level to NONE. Documentation should state what to select as the compression level.

6380736 

Control does not transfer to Schedule GC page when Explicit GC is selected in the Set GC Preferences page. 

6382393 

Proxy server is unable to perform FTP uploads. 

6382692 

During migration, the format string Req->vars.pauth-user in the 3.6 obj.conf should be changed to Req->vars.auth-user .

6383320 

Cannot remove cache file when contents file name has space or Japanese characters. 

6383435 

sockd process uses high memory on Linux .

6387166 

View Server Settings page in the proxy server administration interface does not display MaxProcs value.

6388818 

The SOCKS server requires the Directory Service ID to be default.  

6390034 

libnspr4.dll should be referred first on the directory <install-dir>\bin\proxy\bin instead of the directory system32.

6390054 

Copyright year should be changed in the version window of the administration interface.  

6399395 

The Select Directory Services page does not reflect the directory service selection. 

6402589 

The function http-client-config does not take the setting from the most specific object.

6411505 

The Redirect URLs page in the administration interface does not function as expected. 

6412129 

Proxy Server 4.0 migration tool must add the line fn=“block-ip” if the setting is not found in the Proxy Server 3.6 instance.

6414355 

Executing the command batchupdate with an invalid bu.conf file results in segmentation fault on Linux.

6415125 

Change the compiler from Sun Studio 8 to Sun Studio 10.  

6416272 

Proxy server fails to start properly after the server user is changed.  

6417755 

Links like Previous, Main and Next not localized in the proxy server online help. 

6419925 

More cache-related statistics required in proxy server. 

6423487 

Detailed description on how to enable DNS statistics has been added to the online help. 

6425025 

The directive host-map does not work unless a url-prefix parameter is explicitly provided.

6425026 

Proxy server needs to distinguish cache objects based on Accept-Encoding headers. 

6425038 

Proxy server does not consider query-maxlen when acting as reverse proxy with cache-local value set to 1.

6425601 

The automatic garbage collection does not work in certain conditions. 

6425752 

There are duplicate headers in a 304 response from the cache. 

6426543 

Cache iterator leaks memory. 

6427137 

Proxy server transmits micro version number in responses. 

6433285 

Some of the proxy core error messages are not localized. 

6433776 

.sects files are not created when the command cbuild is executed.

6433807 

On Windows, proxy server and administration server display wrong version number in the start up message. 

6434137 

Proxy server displays wrong error message on timeout. 

6435491 

In the Proxy Server 4.0.4 Configuration File Reference, in chapter 5, the reference to type parameter is removed in the section on Service derivative.

6441601 

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, notes have been added to clarify the need to load the root keys of Certification Authority or the self-signing application.

6442054 

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, the section Using SSL to Communicate with LDAP has been updated with information about importing LDAP root CA certificates to the proxy server.

6442071 

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, a new section is added to clarify about securing access to administration server.

6442090 

In the Proxy Server 4.0.4 Installation and Migration Guide, clarification has been added to clarify that:

- Proxy Server can be installed as a non-root user  

- Proxy Server can run as a non-root user 

6442091 

Cache must correctly compute the value of current_age with the request delay added to the age.

6442641 

Proxy Server 4.0 does not work well with CONNECT requests that specify a content-length. 

6443160 

On HP-UX, zlib library needs to be packaged with the product for JavaES 5. 

6443720 

Log Analyzer can have issues when the access log file has no log information. 

6443731 

On Windows 2000 SP4, the system requires restart after configuration in JavaES environment. 

6444332 

On HP-UX, executing batchupdate with invalid bu.conf results in segmentation fault.

6444363 

On HP-UX, proxy instance does not get created with non-root user. 

6444942 

Executing the command cachegc on a nonexistent instance fails.

6445440 

Error messages are incompletely localized. 

6446098 

On HP-UX, there is an internal error in View URL Database page. 

6446349 

On HP-UX, stress test results in mmap() failure. 

6446933 

In the Proxy Server 4.0.4 Configuration File Reference, references to docs directory are removed.

6447423 

Proxy Server 4.0 leaks memory because the daemon structures are not freed properly. 

6447427 

Proxy Server 4.0 leaks memory while acquiring channel in common client. 

6447476 

The proxy server administration interface always displays the cache partition size as 0. 

6450886 

The new maximum value of 360 minutes for the socks5.conf parameter SOCKS5_TIMEOUT has been documented in the Proxy Server 4.0.4 Configuration File Reference.

6454032 

Proxy server binds to the same port each time the Address directive is set. 

6455411 

On Windows, proxy server needs to support coexistence of JavaES 4 and JavaES 5. 

6459839 

Migrating Proxy Server 3.6 to 4.0.3 with the cache disabled results in unusable server instance. 

6461889 

HTML filter corrupts the transformed data. 

6461896 

HTML tag filter does not update the content length when it transforms the source document. 

6461991 

Typographic errors in the English source of proxyResources.properties file.

6462366 

On HP-UX, proxy server fails to restart after configuring SOCKS name server. 

6463404 

Distributed administration does not work correctly when a user is given access to all programs. 

6463927 

The template file WPSProp.properties has entries for Windows platform.

6465608 

On Windows, the shortcut for Stop Admin Server is not created for the administration server when the proxy server is installed. 

6465984 

The file proxyResources.properties contains duplicate keys.

6466452 

Proxy server should update the installer registry key from Entsys to Entsys5. 

6467644 

On Windows Server 2003 Enterprise platform, running reconfig.bat fails.

6470294 

On Windows, running cbuild.exe to decrease the cache sections does not remove the sections properly.

6473677 

On JavaES 4 system, proxy server does not start after applying the patch 120981–08/120982–08. 

6478407 

In the Proxy Server 4.0.4 Administration Guide, in chapter 7, the section Starting SSL-Enabled Servers is modified to remove the suggestion for start script modification.

6480637 

Proxy server crashes every hour. 

6484781 

After enabling distributing administration, even unauthentic users can log in to administration server. 

6485988 

In the Proxy Server 4.0.4 Configuration File Reference, the section on Send-Error in chapter 5 is updated to add a note stating that send-error does not work for Web Server HTTP response.

6505480 

In a standalone installation of proxy server on HP-UX, installation fails on HP-UX 11.11. 

6519072 

In the installer for a standalone installation of Proxy Server 4.0.4, the JRE version compatible with the US DST changes 2007 needs to be shipped. The compatible JRE version is 1.4.2_13 on Solaris, Windows, and Linux. On HP-UX, the compatible JRE version is 1.4.2.12.  

6519113 

In the Proxy Server 4.0.4 Configuration File Reference, the section on Error in chapter 5 is updated to remove references to error response codes 404 and 500.

6511549 

In a standalone installation of proxy server on HP-UX, installation fails in CLI mode. 

6520577 

In the Proxy Server 4.0.4 Administration Guide, the section on Virtual Multihosting is updated to add a note to indicate that the reverse mapping should be specified before the other mappings.

Issues Resolved in 4.0.3

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.3

Table 22 Issues Resolved in iPlanet Web Proxy Server 4.0.3

ID 

Summary 

6191615 

Certain regular expressions when used as URL filters cause the Proxy Server to crash while starting. 

6213012 

ROTATELOGS event on Windows is not triggered at the time specified. 

6213726 

The Transfer Time Report reports a constant value of “0.00 sec/req”. 

6215659 

The Transfer Time Distribution Report shows a constant value of “< 1 sec [100.0%]”. 

6239292 

Log Analyzer error with Extended2 format when access log file has no log information. 

6242032 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 7, the section “Configuring System Preferences” has wrong description for Parent Array. The correct description is, “A parent array is a proxy array that a proxy or proxy array member routes through”.

6264079 

The administration interface overwrites default, which is the default value for Directory Service.

6275141 

In Proxy Server 4.0.2, the File Cache feature is shown in the GUI and documented for the Server Manager > Caching > Configure File Cache page, but the feature is not implemented. 

6270693 

Sometimes the Filter directive is invoked twice per request.

6285076 

SOCKS server cannot handle both LDAP & password file for user authentication, when both the methods are configured. 

6285183 

PR_MemUnmap() call results in error in Windows.

6285791 

SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in standalone installation of Proxy Server.

6289188 

When you install Proxy Server 4.0 as non-root user and administration server as root user, any changes you make to the cache settings in the administration user interface result in the permissions for cache file and cache directory changing from non-root to root.  

6292729 

The default setting for Client IP Addressing Forwarding should be Blocked.  

6294282 

The Proxy Server 4.0 administration interface cannot set the ACL correctly for any resource which includes a “\” in its pattern. 

6294563 

Default setting of the access log format to be different from the Web Server. 

6295286 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 14, the section “Setting up a Reverse Proxy” needs to note in Step 5 that the “/” mapping is added only if the user doesn't change the contents of the “Map Source Prefix” text box provided automatically by the Administration GUI.

6296870 

Details of the Cache Section Table on the administration interface are not displayed correctly. 

6299913 

The ConnAddress directive is not changed to Address during a migration from Proxy 3.6 to 4.0.

6300480 

The setting of Cache tab is not migrated successfully during a migration from Proxy 3.6 to 4.0. 

6300615 

The meta tag is missing in localized core messages. 

6301140 

Migration creates invalid Cache entries when migrating an instance of proxy that has the cache disabled. 

6303619 

An ACL with a database that is registered with a name other than default does not work properly.

6304354 

"Do Not Log Client Accesses From" option creates an invalid configuration. 

6311548 

The Proxy Server 4.0 uses pauth-user instead of auth-user for Access Log.

6312044 

In the Proxy Server 4.0 administration interface, the Monitor Current Activity page under the Server Status tab is not updated for DNS, Keep-Alive, and Cache Statistics. 

6313910 

On Windows, the Rewrite Headername feature fails and displays the message "Internal server error occurred". 

6313959 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To configure the file cache” provides wrong description for step 1. The correct description is, “From the Server Manager, click the Caching tab”.

6313960 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To create a batch update” includes step 10 that refers to a “Timing section”. This step is an error. The Set Cache Batch Updates page does not have a Timing section.

6316289 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “Building the Cache Directory Structure” includes an example that refers to figure 12-1 instead of 12-2.

6325537 

Not able to change RqThrottle value through the administration interface.

6325616 

Scheduled (explicit) Garbage Collection does not clear cache. 

6328678 

Cannot set ICPtimeout value to less than 400 milliseconds through the administration interface.

6331044 

In the Proxy Server 4.0.2 Administration Guide, in the preface, the section “Using the Documentation” specifies the location of the Proxy Server 4 documentation.

http://docs.sun.com/app/docs/prod/s1.webproxys#hic

The section should point to Proxy Server 4.0.2 documentation at: http://docs.sun.com/app/docs/coll/1311.2

6334854 

Inconsistency between documentation for Proxy Server and sun-web-proxy-server_4_0.dtd .

6337102 

Proxy Server crashes with DNS fn = “dns-config” local-domain-levels = “8”

6338719 

Patch upgrade of proxy server on Linux AS 3.0 installs in a different location.  

6338875 

Proxy 4.0.1 FTP Client fails to process symbolic links correctly. 

6350957 

In the Proxy Server 4.0.2 Administration Guide, in Chapter 5, the section “Enabling Security for Listen Sockets” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode.

Also, in Chapter 8, the section “Specifying Users and Groups” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode. 

6365433 

Unable to create proxy server instance when Automatic Start option is selected in proxy server administration interface. 

6367375 

Mapping with CONNECT doesn't work when there is a parent proxy. 

6369095 

Memory leak in Proxy Server 4.0 . 

6371084 

Requesting SSL site doesn't work in chained proxy environment when using IP address of the web server. 

6371618 

Can not change Compression Level to NONE. 

6371731 

No “connect://.*:563” in the default resource.

6371793 

pkginfo displays $distro for SUNWproxy-l10n.

6373101 

Administration server creates invalid parameter for ssl-client-config. 

6373622 

cache-disable SAF is not documented.

6374279 

Response to webdav OPTIONS method not according to RFC2518.

6376065 

max-uncheck function does not work as expected.

6376153 

Proxy Server 4.0.2 does not update cache for ftp/gopher protocols. 

6381373 

Proxy server crashes during run after restart if the cache is already warmed. 

6381419 

The value in Cache-last-checked header is invalid. 

6381424 

Warning header should contain the host:port value of the agent adding this header. 

6382729 

Proxy server does not accept utf-8 encoded parameters. 

6383301 

Proxy Server 4.0 has a problem in channel pooling. 

6383456 

Proxy Server 4.0.2 uses high CPU in Linux. 

6384616 

Proxy Server 4.0.3 online help has typographic errors. 

6385902 

The format in Set Access Log Preferences does not match with default format. 

6387772 

Changes in OLH, due to bugs (6325537, 6303619) fixed, need to be localized. 

6387901 

In the Proxy Server 4.0.2 Administration Guide, in chapter 11, the section “Chaining Proxy Servers” is not clear.

6388156 

The headers of cached files can get corrupted. 

6390237 

Proxy passes incorrect content-length if the response contains double content-length headers. 

6392875 

regexp-map does not work for connect.

6393573 

Proxy 4.0.2 crashes when DNS fn=“dns-config” local-domain-levels=“1”

6394287 

SOCKS process polls too often which leads to sockd process taking up as much as 50% of CPU.

6395473 

High CPU utilization problem in Proxy Server 4.0 while handling “slow” clients. 

6395889 

Windows Server Update Service (WSUS) does not work using proxy server 4.0.2. 

6400981 

SOCKS5_TIMEOUT value set in socks5.conf is ignored.

6402698 

High CPU utilization in FTP client. 

6418214 

Issues with Proxy Server 4.0 garbage collection feature. 

6424527 

Proxy server crashes while processing a request containing an empty cache-control header. 

Issues Resolved in 4.0.2

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.2

Table 23 Issues Resolved in iPlanet Web Proxy Server 4.0.2

ID 

Summary 

5097664 

ssl-tunnel-timeout parameter does not work on Windows.

6225025 

ftp-listing-width parameter does not work correctly.

6251805 

Changes to archive logs results in a crash. 

6262277 

Changing the minimum timeout value for ICP from 400 to 50.

6292690 

In Proxy Server 4, while using IE 6.0 to access the administration interface, can not select the original partition using Manage Sections>Partition .  

6292786 

Proxy Server does not write transfer time (and other times) to access log.  

6308714 

Proxy Server fails to start if umask is not set to 022.  

6310909 

In Proxy Server 4.0.1 point product, version string of the product name was over translated for French locale from 2005Q3 to 2005T3. 

6310910 

In Proxy Server 4.0.1 point product, many missing apostrophes in installer messages on French locale. 

6310944 

In Proxy Server 4.0.1 point product, CLI installer fails to display the license. 

6310961 

In Proxy Server 4.0.1 point product, the “Yes” in the license installer screen on Spanish locale not localized. 

6312723 

Cannot access SSL sites with IP address while using Proxy Server 4.0. 

6313981 

In Proxy Server 4, not able to change the value of Rewrite Content Location and Rewrite Headername after creating a new Reverse Mapping using the administration interface. 

6315817 

Multiple simultaneous CONNECT (SSL Tunneling) requests cause thread starvation.  

6330348 

High Memory usage by proxy process in Solaris 10 during stress run. 

6333995 

Memory leak while running stress tests for CONNECT. 

6335919 

Proxy Server's FTP client does not close a connection when the FTP Server has closed. 

6335922 

Proxy Server FTP client does not send USER request to FTP Server. 

6336550 

Error when trying to install Proxy Server 4.0.1 into a directory that contains a Proxy Server 4.0 install. 

Issues Resolved in 4.0.1

The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.1.

Table 24 Issues Resolved in iPlanet Web Proxy Server 4.0.1

ID 

Summary 

2126143 

The same regular expression does not work in URL Filters, but works in Access Control and Routing. 

2126380 

Memory leak in the ICP process of the proxy server. 

6231283 

The administration server on Linux Red Hat Advanced Server 3.0, fails to startup. 

6237346 

The flexanlg utility dumps core while generating a log analysis report using the Extended2 log file format.

6240767 

The add/edit listen sockets for the administration server and the proxy server instance do not verify for used ports. 

6242627 

Localized core messages are not getting displayed. 

6243369 

Entry of multi-byte characters in the pages related to SOCKS need to be prevented. 

6244103 

Internal server error is displayed when the Set Connectivity Mode page of the proxy server instances is accessed on a Linux Advanced Server 3.0, Korean locale. 

6245408 

An internal error is displayed when a newly added partition is accessed if the administration user and the proxy instance user are different. 

6249166 

Inconsistency in the display of the Control Cluster, Modify Server, and Remove Server pages in the Cluster tab when the host name in the URL is replaced with localhost while accessing the proxy server.

6253014 

Crash occurs in the init-proxy SAF when there are more than 9 NameTrans directives in the obj.conf file on Linux Red Hat Advanced Server 3.0.

6254508 

The batch update command exits with segmentation fault. 

6255214 

Cannot edit or remove an entry in the content URL rewriting page consisting of multibyte characters. 

6255216 

Some LDAP entries in the socks5.conf lead to socksd crash.

6259314 

Some of the localized online help pages are not synchronized with the English online help pages. 

6261440 

Duplicate English online help exists in the installation directory. 

6263694 

Online Help unavailable for the Add and Replace Compromised Key List and Certificate Revocation List pages. 

6263721 

The wrong help page is displayed for the Add/Replace Cert pages in the Server Manager. 

6274186 

Unable to delete a server instance. 

6276398 

Remove the localized online help from the base workspace. 

6285078 

Entry for authentication failure of SOCKS request missing from log files. 

6285779 

Unable to start the proxy server instance if the serverID has a white space. 

6285788 

SOCKS server crashes when authentication is used. 

6289242 

HTTP smuggling in Proxy Server 4. 

6293449 

Proxy Server 4 does not close the connection immediately with the CONNECT method. 

6295622 

The function ConnAddress is not realized or documented in Proxy Server 4.0.

6296169 

The header Cache-last-checked is broken in Proxy Server 4 installed on other locales.

6296225 

The Proxy Server instance may intermittently crash when DNS caching is enabled. 

6301786 

Localized Core Message not getting displayed on Solaris 9 x86, Linux AS 3.0. 

6311463 

On the proxy process, the number of open file descriptors keeps increasing with time, resulting in the proxy running out of file descriptors and dropping connections.