This Release Notes document contains important information about the 4.0.15 release of Oracle iPlanet Web Proxy Server (Proxy Server). It includes information about features and enhancements, resolved bugs, and known issues. Review this document prior to installing and configuring Proxy Server, and then periodically thereafter for the most up-to-date information.
This document has been reorganized to better highlight the features, enhancements and issues resolved in the latest release of Proxy Server 4.0, and to provide clearer information about the platforms, software, technologies and protocols that the latest release supports. For more information about additional documentation changes, see Product Documentation.
This document contains the following sections:
Date |
Description |
---|---|
September 2010 |
Updated to support the Proxy Server 4.0.15 release. |
June 2010 |
Initial publication for the Proxy Server 4.0.14 release. |
In addition to fixing a number of bugs, as listed in Table 1, the 4.0.15 release of iPlanet Web Proxy Server provides a number of enhancements to address customer requests:
Date and time parameters have been added to the <Client> tag to enable use of time intervals to limit execution of directives on requests received from specific clients. For details, see Information About the Date and Time Parameters of the <Client> Tag.
The disable-javascript-rewrite parameter has been added to the um-define-junction SAF to suppress JavaScript variable rewriting for specific JavaScript variables. For details, see Information About the disable-javascript-rewrite Parameter of the um-define-junction SAF.
The <Include> tag has been added to the obj.conf file syntax to support the inclusion of other files in obj.conf. For details, see Information About the <Include> Tag in the obj.conf File
The lookup-ipv6-first parameter has been added to the dns-config SAF to control whether IPv6 or IPv4 addresses are looked up first. For details, see Information About the lookup-ipv6-first Parameter of the dns-config SAF
The RouteOfflineCheckInterval directive has been added to the magnus.conf file to configure the frequency at which Proxy Server checks the health of gateways marked as offline. For details, see Information About New Directives in the magnus.conf File.
The status-code and status-desc parameters have been added to the send-error SAF . For details, see Information About the status-code and status-desc Parameters of the send-error SAF
The NSS version supported by iPlanet Web Proxy Server has been updated to 3.12.6, and the NSPR version has been updated to 4.8.4.
The “Enter ACL List Cache Size” field has been added to the Admin GUI to support specification of this value interactively.
The “Reset Status” button has been added to the Admin GUI Proxy-instance⇒ Server Status⇒ Monitor Current Activity page to reset the monitored values without restarting Proxy Server.
The section Corrections and Updates to 4.0.14 Manuals has been updated to address the following documentation issues:
Issue ID |
Description |
---|---|
6294290 |
Proxy 4: admin.conf has no documentation |
6962675 |
proxy 4 doc RFE - need some descriptions for regexp-redirect function in WPS docs/manual. |
6965246 |
DOCS: WPS4.0.14 introduces new parameter to the http-client-config function |
6968536 |
Document the new parameters ("status-desc" and "status-code") added to send-error |
6968573 |
Document new magnus.conf parameter "RouteOfflineCheckInterval" |
6968574 |
Document the new parameters added to <Client> tag (bug# 6942431) |
6969302 |
Document new feature: include file capability in obj.conf (bug# 6946566) |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.15.
Table 1 Issues Resolved in iPlanet Web Proxy Server 4.0.15
ID |
Summary |
---|---|
6524998 |
proxy 4.0 urldb utility crashes when processing an invalid regular expression |
6942431 |
Proxy 4.0: consider adding time-related parameters to the <Client> tag |
6945755 |
web proxy server cannot set the number of Acceptor Threads = no of CPUs as said in docs |
6946517 |
WPS4.0: OPTIONS method does not work in SSL |
6946561 |
RFE: web proxy 4 - Ability to set ACLCacheMax through Admin GUI |
6946565 |
RFE - need Capability to reset Perf counters without server restart |
6946566 |
RFE - Capability to manage obj.conf through separate include files e.g. managing url list in another |
6949070 |
Proxy 4.0: urldb: expired cache file are not removed |
6951418 |
Proxy 4.0: event scheduler: time "drift" causes events to be missed |
6952442 |
Proxy 4 Admin cache program crash with <Client> tag in obj.conf |
6955415 |
Proxy Server 4.0.13 - need rewrite-host parameter in virt-map function |
6957675 |
proxy 4 Admin GUI warnings when users edit NameTrans fn="regexp-redirect" (regex URL redirections) |
6957676 |
WPS4.0 Basic Authentication does not work with regular mapping only |
6960464 |
proxy 4 - healthcheck in load-balancing likes to be configurable in timeout and frequency |
6964554 |
proxy 4 RFE - new lookup-ipv6-first to allow cu to select the order of DNS lookup |
6965840 |
query parameter of Service SAFs do not work in forward proxy configurations |
6965842 |
RFE: allow send-error to accept a "status" parameter |
6965883 |
Version changes for 4.0.15 |
6966757 |
WPS 4.0.14: URL Rewrite problem (um-output) with missing "/" slash |
6968929 |
Integrate NSS 3.12.6 |
6970769 |
Socks log messages contain invalid session id |
6970776 |
Proxy 4.0: Socks server should print meaningful error log information |
6972347 |
Proxy 4.0: proxy serves truncated responses from the cache |
6974046 |
DTD file rename issue in Web Proxy Server 4.0.14(SVR4 patch) |
6974382 |
Proxy 4.0: "url mapping" should allow selective rewriting of javascript |
6974692 |
Socks Proxy Hostname Resolution Hostname Unresolved Doesn't Fail Returning Conn to Port on Client |
6977431 |
web proxy server number of Acceptor Threads in the admin GUI should be = no of cups as said in docs |
The Proxy Server 4.0 patches for version 4.0.15 are available on SunSolve Online. The following table lists these patches.
Platform |
Patch ID |
---|---|
HP-UX |
145608-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145608-01-1) |
Linux x86 |
145605-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145605-01-1) |
Solaris SPARC (32-bit) |
145604-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145604-01-1) |
Solaris x86 (32-bit) |
145606-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145606-01-1) |
Windows (32-bit) |
145607-01 (http://sunsolve.sun.com/search/document.do?assetkey=1-21-145607-01-1) |
This section provides information about the hardware and software requirements of Proxy Server 4.0.15.
This section includes the following topics:
Complete information about supported operating environments and hardware for Proxy Server 4.0.15 is available in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, which is accessible at the Oracle Fusion Middleware Supported System Configurations page.
System virtualization is a technology that enables multiple operating system (OS) instances to execute independently on shared hardware. Functionally, software deployed to an OS hosted in a virtualized environment is generally unaware that the underlying platform has been virtualized. Oracle performs testing of its products on select system virtualization and OS combinations to help validate that Oracle products continue to function on properly sized and configured virtualized environments as they do on non-virtualized systems.
For information about Oracle support for Oracle products in virtualized environments, see Supported Virtualization Technologies with Oracle Fusion Middleware.
In addition to the information provided in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, your system must also have adequate swap space:
Solaris requires swap space at least as large as the amount of RAM on your system (twice the amount of RAM is recommended)
Linux requires 256 Mbytes swap space
It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.
The following is the required patch level for Proxy Server 4.0.15 in Solaris SPARC and x86.
108434–18 (shared library patch for C++)
111711–12 (shared library patch for C++)
111713–12 (shared library patch for C++)
NOT REQUIRED
119964–03 (shared library patch for C++)
108434–18 (shared library patch for C++)
The following is the required patch level for Proxy Server 4.0.15 in Linux.
compat-libstdc++-7.3-2.96.128.rpm
compat-libstdc++-33-3.2.3-47.3.rpm compat-libstdc++-296-2.96-132.7.2.rpm
HP-UX 11i Operating Environment Component-B.11.11.0412
Required patch bundle for 11i, June 2003–B.11.11.0306.1
Gold Base patches for HP-UX 11i, December 2006–B.11.11.0612.459
Gold Application patches for HP-UX 11i, December 2006–B.11.11.0612.459
Pthread enhancement and fixes-PHCO_29109
Pthread.h fix and new enhancement-PHCO_27633
libc manpage cumulative patch-PHCO_29328
libc cumulative patch-PHCO_29495
Java Out-of-Box-JAVAOOB, 1.0.00.02
The Java Out-of-Box tool is used to configure the necessary kernel tunable parameters. Use of this tool is the recommended method for modifying kernel values. If necessary, modify the following tunable parameters to reflect a value equal to or greater than the following:
nkthreads— 3635
maxfiles–60
maxfiles_lim–1024
max_thread_proc–512
maxswapchunks–2048
nfile4–136
ncallout–3651
nproc–2068
Modifying the kernel tunable parameters can have adverse impacts on your system. Do not modify the parameters unless you fully understand what you are doing.
Complete information about supported web browsers for Proxy Server 4.0.15 is available in the Oracle iPlanet Web Proxy Server 4.0.14 Certification Matrix, which is accessible at the Oracle Fusion Middleware Supported System Configurations page.
Operating System Versions. As of the release of iPlanet Web Proxy Server 4.0.14, the following operating system versions are deprecated:
HP-UX 11.11 |
Microsoft Windows 2000 Server and Windows 2000 Advanced Server |
Red Hat Enterprise Linux Advanced Server 3 |
Solaris 8 |
Solaris 9 for SPARC and x86 |
These operation system versions will become unsupported in a future release of iPlanet Web Proxy Server.
Web Browser Versions. As of the release of iPlanet Web Proxy Server 4.0.14, the following web browser versions are deprecated:
Microsoft Internet Explorer 6 |
Mozilla 1.4.1 and 1.7.2 |
Netscape Navigator 7.1 and 7.2 |
These web browser versions will become unsupported in a future release of iPlanet Web Proxy Server.
The recent releases of Proxy Server includes the following enhancements.:
Proxy Server 4.0 supports transparent proxy for HTTP/1.1 connections. Transparent proxying involves intercepting and processing web requests by using the proxy server, without the knowledge or control of clients. For example, a router for a local network is configured to redirect incoming TCP connections to the local port, in which the proxy server is active.
Add the following directive to the proxy server default object in the obj.conf file:
NameTrans fn="host-map" |
This configuration enables the proxy server to use the HTTP Host: header of incoming requests to identify and redirect the request to the target remote server.
Transparent proxy servers that decide connections based on the HTTP Host: headers are vulnerable to fake HTTP Host: headers forged through the active content. Therefore, suitable ACL configurations must be implemented to prevent connection to web sites that might host malicious content.
URL Mapping has been implemented in Proxy Server 4.0.8. It enables the Proxy Server to act as a reverse proxy. This feature enables Proxy Server to provide a single front-end hostname for back-end application servers. Based on a requester's URI, access is provided to back-end servers.
For more information about URL Mapping, see Reverse Proxy Scenario in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.
For information about Server Application Functions (SAFs) used in URL Mapping, see Server Application Functions (SAFs) in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.
The monitoring capabilities of iPlanet Web Proxy Server provides a detailed list of the server parameters that you can monitor at instance level.
From the Web Proxy Administration Server, you can perform the following actions:
View server statistics at an instance level.
Enable/Disable at an instance level.
Access the Administration Server
Click the Instance link from the Manage Servers page
Click the Server Status tab
Click the Monitor Current Activity tab
Set the Monitoring Current Activity to ON to monitor the server
You can also refresh the server in following intervals 5,10 and 15 seconds and view the statistics of the DNS, Keep-Alive, Cache, Server Requests and Work Thread connections.
The embedded DNS supports the non-default name resolution. The DNS client interacts with a DNS server to perform the name resolution. The new SAF dns-lookup, receives the DNS server's IP address as a server argument. This IP address should be added as a DNS directive in the obj.conf file.
In the following example, IP of the DNS server is specified in the server parameter.
<object> .... DNS fn="dns-lookup" server="170.168.10.3" ... </object>
In the following example, you can add multiple DNS server IPs to dns-lookup-init, and it will be used in round robin model. In this scenario, do not add DNS server IP to dns-lookup. If DNS server parameters are added to both dns-lookup and dns-lookup-init, the dns-lookup argument will take the precedence.
... <Object> ... DNS fn="dns-lookup" .... Init fn="dns-lookup-init" servers="170.168.10.3, 170.158.10.4" </Object>
The ACLCacheMax is a magnus.conf parameter that sets a limit to the total number of ACLs stored in the ACL cache. There is no default value for ACLCacheMax and it should be configured for a specific limit.
For example, ACLCacheMax 16384
The ACL cache in this context does not refer to the ACL user cache. It refers to a cache where ACLs are applicable to specific URLs that are cached for performance reasons.
The GCAtStartup is a magnus.conf parameter that allows boolean value. By default the value is false, if set to true, Cache garbage collector clears the garbage during the server startup. This can increase the server startup time when the cache size is high.
Proxy Server allows PURGE requests to clear the cached URL. If the requested URL is purged successfully, a response with an HTTP status code of 200 (OK) is sent by the server. If the specified URL is not cached, a 404 (Not Found) response is sent.
In the following example, the server returns the value 200
bash-2.03$ telnet localhost 8088 Trying 172.9.10.1... Connected to localhost. Escape character is '^]'. PURGE http://foo.com/ HTTP/1.0 HTTP/1.1 200 OK Server: Oracle-iPlanet-Proxy-Server/4.0 Date: Fri, 26 Oct 2007 08:15:30 GMT Connection: close
In the following example, the server returns the value 404.
Connection closed by foreign host. bash-2.03$ telnet localhost 8088 Trying 172.9.10.1... Connected to localhost. Escape character is '^]'. PURGE http://foo.com/ HTTP/1.0 HTTP/1.1 404 Not Found Server: Oracle-iPlanet-Proxy-Server/4.0 Date: Mon, 17 Sep 2007 10:13:28 GMT Content-length: 96 Content-type: text/html Connection: close
You can connect to an IPv6 enabled Web site through the Proxy Server 4.0.11. Proxy server also supports ftp extension for IPv6 in default (passive) mode.
Proxy Server 4.0.15 supports Network Security Services (NSS) 3.12.6 and Netscape Portable Runtime (NSPR) 4.8.4.
From Proxy Server 4.0.6 release, support for Extended address Passive port (EPSV) mode has been introduced.
From Proxy Server 4.0.2 release, the installer supports the upgrade of an existing Proxy Server 4.0 installation to the later version. For the Java Enterprise System installations of Proxy Server 4.0.1, you need to install the patches that correspond to the later release.
Proxy Server 4.0.12 provides hardware accelerator support for Sun Crypto Accelerator 6000, a cryptographic accelerator board that enhances the performance of SSL on the Proxy Server.
Daylight Savings Time (DST) starts in USA from the 2nd Sunday of March and ends on the 1st Sunday of November. This impacts the date and time rules of the Operating System.
To make sure that the log files contain the correct time in US time zones, and that the Administration Server is not impacted by this change, you should do the following:
Download and install the appropriate Operating System patches. You can download the Solaris patches from: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1
For other platforms, download similar DST compatible patches from the respective Operating System vendor's web sites.
For Solaris, Windows, and Linux, run Proxy Server with JRE 1.5.0_12. For HP-UX, run Proxy Server with JRE 1.5.0_12.
The iPlanet Web Proxy Server 4.0 documentation is provided in a number of ways:
Manuals – You can view the Proxy Server 4.0 manuals and release notes in HTML and in printable PDF formats.
Online help – Click the Help button in the graphical interface to launch a context-sensitive help window.
Proxy Server 4.0.14 is the last release at which the entire documentation set for Proxy Server 4.0 was updated. Subsequent to the 4.0.14 release, updates and corrections to Proxy Server 4.0 documentation are provided in this Release Notes document; see Corrections and Updates to 4.0.14 Manuals.
The Proxy Server 4.0.14 documentation set is available at http://docs.sun.com/coll/1311.14. For an introduction to Proxy Server, refer to the books in the order in which they are listed in the following table.
Table 2 iPlanet Web Proxy Server 4.0.14 Documentation Set
The following sections describe corrections and updates to Proxy Server 4.0.14 manuals:
Information About the Date and Time Parameters of the <Client> Tag
Information About the disable-javascript-rewrite Parameter of the um-define-junction SAF
Information About the forward-unread-request-body Parameter of the http-client-config SAF
Information About the lookup-ipv6-first Parameter of the dns-config SAF
Information About the regexp-redirect Function of the NameTrans Directive
Information About the status-code and status-desc Parameters of the send-error SAF
The admin.conf file, located in the install-dir/proxyadmserv/config directory, is an internal configuration file that Proxy Server maintains. Do not modify this file.
Proxy Server 4.0.15 supports several new parameters for the <Client> tag, as described in the following table.
Parameter |
Description |
---|---|
date-start and date-end |
These two parameters specify the start date and end date, respectively, for a time interval. They take values of the format of the UNIX date command, excluding the time zone specification. Additionally, the weekday portion of the date command format is optional. |
day-start and day-end |
These two parameters specify the start day number and end day number, respectively, for a day interval in a month. They take values in the range 1 through 31. |
month-start and month-end |
These two parameters specify the start month and end month, respectively, for a month interval in a year. They take the values Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov and Dec. |
time-start and time-end |
These two parameters specify the start time and end time, respectively, for a time interval in a day. They take values of the form hour:minute:second on a 24–hour clock. |
weekday-start and weekday-end |
These two parameters specify the start day and end day, respectively, for a day interval in a week. They take the values Sun, Mon, Tue, Wed, Thu, Fri and Sat. |
Examples
This example specifies a time interval of every Tuesday through Friday from 9:00 AM through 5:00 PM:
<Client weekday-start="Tue" weekday-end="Fri" time-start="09:00:00" time-end="17:00:00">
This example specifies a time interval of the first through the fifteenth of every month from 12:00 AM through 4:00 AM:
<Client day-start="1" day-end="15" time-start="00:00:00" time-end="04:00:00">
Proxy Server 4.0.15 supports a new parameter, disable-javascript-rewrite, for the um-define-junction SAF of the Init directive. The following table provides information about this new parameter.
Parameter |
Description |
---|---|
disable-javascript-rewrite |
(Optional) A regular expression matched against the names of JavaScript variables when the has-javascript parameter is set to yes. Variables whose names match the regular expression are not rewritten (as they normally would be with has-javascript set to yes). There is no default value for this parameter. |
The section http-client-config in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference does not include information about the forward-unread-request-body parameter, which became available in Proxy Server 4.0.14. The following table provides information about this parameter.
Parameter |
Description |
---|---|
forward-unread-request-body |
(Optional) Boolean that indicates whether a request body that arrives in a TCP packet separate from the request header should be forwarded to the origin server. The default value is false, meaning that request bodies arriving in TCP packets separate from their request headers are not forwarded to the origin server. |
Proxy Server 4.0.15 supports a new tag in the obj.conf file. This tag, <Include>, includes the content of another file in the obj.conf file, effectively enabling you to divide the content of obj.conf across several files to make management of your configuration easier.
The syntax of the <Include> tag is:
<Include> filename </Include>
where filename is the name of the file to be included in obj.conf where the <Include> tag occurs.
When using the <Include> tag, keep these points in mind:
The <Include> tag can be used outside the context of <Object>. For example, you could put all the Init directives in a file and then include that file at the start of obj.conf.
An included file can contain other included files; that is, an included file can itself contain an <Include> tag.
An included file cannot cross <Object> boundaries; that is, and included file cannot end one object and start another.
Proxy Server 4.0.15 supports a new parameter, lookup-ipv6-first, for the dns-config SAF of the DNS directive. The following table provides information about this new parameter.
Parameter |
Description |
---|---|
lookup-ipv6–first |
(Optional) Boolean that specifies whether to look up IPv6 or IPv4 addresses first. The default value is false, meaning that IPv4 addresses are looked up first. |
The section NameTrans in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference does not include information about the regexp-redirect function. Information about this function follows.
Applicable in NameTrans-class directives.
The regexp-redirect function enables you to change URLs and send the updated URL to the client. When a client accesses your server with an old path, the server treats the request as a request for the new URL.
Parameters
The following table describes parameters for the regexp-redirect function.
Parameter |
Description |
---|---|
from |
A regular expression for the prefix of the requested URI to match. |
url specifies a complete URL to return to the client. url-prefix specifies the new URL prefix to return to the client. The from prefix is simply replaced by this URL prefix. You cannot use these parameters together. |
|
(Optional) Flag that tells the server to util_uri_escape the URL before sending it. It should be yes or no. The default is yes. For more information about util_uri_escape, see Oracle iPlanet Web Proxy Server 4.0.14 NSAPI Developer’s Guide. |
|
bucket |
(Optional) Common to all obj.conf functions. |
Proxy Server 4.0.15 supports two new parameters for the send-error SAF of the Service and Error directives. The following table provides information about these new parameters.
Parameter |
Description |
---|---|
status-code |
(Optional) Specifies a status code to be set in the HTTP response. It differs from the code parameter in that code specifies which error code triggers execution of the send-error SAF, while status-code specifies a status code to be set in the response generated by the send-error SAF. |
status-desc |
(Optional) Specifies a reason string for the status code. |
This section lists directives added to the magnus.conf file. Note that these directives are not documented in Chapter 3, Syntax and Use of the magnus.conf File, in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference.
Table 3 magnus.conf Directives
Parameters |
Valid Values |
Description |
---|---|---|
ChannelPoolMonitorInterval |
Any number of seconds |
(Added in 4.0.14 release.) Specify how frequently (in seconds) Proxy Server checks the channel pool for stale or closed connections. This value is used when ChannelPoolValidate is set to true. The default value is 30. |
ChannelPoolValidate |
true, false |
(Added in 4.0.14 release.) Cause Proxy Server to actively check the channel pool for stale or closed connections every ChannelPoolMonitorInterval seconds. The default value is false. |
ChannelReuseValidate |
true, false |
(Added in 4.0.14 release.) Cause Proxy Server to validate channels in the channel pool before reusing them. The default value is false |
FtpPoolSize |
1 – 65536 |
(Added in 4.0.12 release.) Specify the size of the FTP connection pool. The default value is 256. |
FtpPoolLife |
1 – 65536 |
(Added in 4.0.12 release.) Specify the life of the connection in seconds, that the FTP connection remain unused in the pool before the monitor thread closes it. The default value is 3600. |
FtpPoolMonitorThread |
OFF |
(Added in 4.0.12 release.) Specify the boolean value to monitor the FTP thread functionality. The default is ON. |
FtpPoolMonitorLevel |
0 |
(Added in 4.0.12 release.) Specify an integer value. If set to 0 the pool monitor thread checks whether the connection is dead or alive. If set to 1, the NOOP command is sent to the connection and awaits for the reply. Failure to get a response will cause the connection to be removed from the pool. The default level is 1. |
FtpPoolMonitorInterval |
30 – 65536 |
(Added in 4.0.12 release.) Specify an integer value in seconds, after which the pool connections are monitored. The default value is 30 |
LDAPPoolMonitorThread |
Takes a boolean value. |
(Added in 4.0.12 release.) If set to TRUE, a ldap pool monitor thread would be created which monitors the ldap connection pool at regular intervals. The default value is FALSE. |
LDAPPoolMonitorInterval |
Takes an integer argument. |
(Added in 4.0.12 release.) Specifies the interval at which the ldap pool monitor thread inspects the ldap connection pool. The default value is 30. |
LDAPPoolRevalidate |
Takes a boolean value. |
(Added in 4.0.12 release.) If set to TRUE, every connection that is picked off the connection pool will be "revalidated" before being passed on to the caller. The default value is FALSE. |
RouteOfflineCheckInterval |
Takes an integer value. |
(Added in 4.0.15 release.) Specifies the interval, in seconds, at which Proxy Server performs a health check on gateways marked as offine by the routing subsystem. The default value is 30. |
The Oracle web site provides information about the following additional resources:
Documentation (http://docs.sun.com/)
Support (http://www.sun.com/support/)
Training (http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=315)
Besides searching product documentation from the docs.sun.com web site, you can use a search engine by typing the following syntax in the search field:
search-term site:docs.sun.com |
For example, to search for “proxy,” type the following:
proxy site:docs.sun.com |
To include other Oracle web sites in your search (for example, java.sun.com, www.sun.com, and developers.sun.com), use sun.com in place of docs.sun.com in the search field.
Third-party URLs are referenced in this document and provide additional, related information.
Oracle is not responsible for the availability of third-party web sites mentioned in this document. Oracle does not endorse and is not responsible or liable for any content, advertising, products, or other materials that are available on or through such sites or resources. Oracle will not be responsible or liable for any actual or alleged damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods, or services that are available on or through such sites or resources.
This section lists the more important known issues and limitations at the time of the iPlanet Web Proxy Server 4.0.13 release. The issues are listed by category:
The following table lists the known issues related to the administration user interface.
Table 4 Known Issues in Administration
ID |
Summary |
---|---|
6653507 |
If Monitor Current Activity Statistics/Profiling is set to ON, it cannot be turned OFF from the user's interface |
6212701 |
Conflicting error message is displayed when server instance fails to start. The chances of occurrence of this conflicting error message is minimal as the chances of the administration interface writing wrong information in the configuration file is minimal. It can only occur if the user manually writes wrong information into the configuration file. |
6231297 |
The Restart Required link disappears if changes are made to the SOCKS configuration and the Proxy Server is restarted instead of the SOCKS Server. |
6484502 |
Proxy Server administration interface is not localized. |
6509535 |
Daylight Savings Time (DST) will start in USA from the 2nd Sunday of March and end on the 1st Sunday of November. This will impact the date and time rules of the operating system and JRE. In the standalone version of proxy server, JRE version compatible with 2007 DST changes is bundled with the installer. However, you need to address the impact on the date and time rules of the operating system by installing the appropriate Operating System patches as explained in step 1 of the Workaround. For the JavaES 5 installation of proxy server, you need to install the Operating System patches and also the compatible version of JRE . Follow steps 1 and 2 of the Workaround. Workaround
|
6558027 |
On Windows, server identifier with multibyte characters causes server-side createInstance.exe error. |
6867774 |
The administration server fails to start up when a proxy installation that uses a custom JDK configuration is upgraded to a service pack version that requires a newer JDK version. After the upgrade, the JDK configuration must be manually modified to point to either the bundled JDK or a custom JDK of the required version. |
6909558 |
Backslashes should be used in LDAP uids only to escape special characters. The ldap sdk used by the Proxy server will remove backslashes from the uid before sending the same to the directory server. This can possibly lead to a situation where the authentication fails where it should succeed (because the uid, with backslashes stripped, finds no match in the directory server), or even succeeds where it should fail (because the uid, with backslashes stripped, finds a match in the directory server). |
6888170 |
Upgrade fails on RHEL4 when the specified target directory name contains a trailing slash. |
The following table lists the known issues related to caching.
Table 5 Known Issues in Caching
ID |
Summary |
---|---|
6654514 |
Proxy-Agent header displays the original header for request type 504. |
6229823 |
When a new partition is added a default section s0.0 is also created irrespective of the partition size. Warning messages are logged in the errors file. Workaround Use the cbuild utility to add the new partition or delete the s0.0 folder under the new cache partition, and restart the proxy server. The error messages can be ignored. |
6619620 |
Doc RFE: Proxy Server should not be used with Network Cache Accelerator (NCA). When the Proxy Server 4.0.8 is used with NCA, a browser repeatedly prompts for the User ID and password. This happens because NCA does not support Proxy-specific headers like Proxy-authorization. Workaround Do not select NCA in the Proxy Listen Socket setting. |
The following table lists the known issues related to installation.
Table 6 Known Issues in Installation
ID |
Summary |
---|---|
6205683 |
Windows console installation fails. |
6255325 |
The installer throws an exception and the installation fails on Linux if the user installs the Proxy Server as a non-root user and the /var/opt/sun/install directory does not exist. |
6353576 |
Silent upgrade installation does not work. |
6587776 |
Proxy Server from Java ES 5 on Windows XP displays system error 1067. |
6756659 |
Proxy Server 4.0.9 can be installed on OpenSolaris by using the GUI installer only if the --javahome option of the setup command is used to specify a JDK 1.6 location. |
6607551 |
On Windows, uninstalling the patch does not change the Proxy Server version to the previous version number. Reverting the patch through Uninstaller script does not change the service description name to the previous Proxy Server version due to RenameService.exe utility limitations. Therefore, even after uninstalling the patch, the service description shows the latest Proxy version instead of the previous version number. |
The following table lists the known issues related to internationalization.
Table 7 Known Issues in Internationalization
The following table lists the know issues related to Localization.
Table 8 Known Issues in Localization
ID |
Summary |
---|---|
6779070 |
The Proxy Server OLH has broken links for Terms of Use. |
6253844 |
The set language option in the Proxy Server OLH does not support the language zh-cn. |
6828246 |
The Korean characters are not displayed in the Proxy Server installer on RHEL 5.2. |
The following table lists the known issues related to SOCKS.
Table 9 Known Issues in SOCKS
ID |
Summary |
---|---|
6245453 |
The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented. |
6263389 |
No error is reported when two instances of SOCKS are started using the same port on Windows. |
6285791 |
SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in stand-alone installation of Proxy Server. |
The following table lists the known issues related to the Proxy Server 4.0 documentation.
Table 10 Known Issues in Documentation
ID |
Summary |
---|---|
6957135 |
Documentation of the magnus.conf directives added in Proxy Server 4.0.12 is missing from Chapter 3, Syntax and Use of the magnus.conf File, in Oracle iPlanet Web Proxy Server 4.0.14 Configuration File Reference. Workaround See the documentation for these directives in Information About New Directives in the magnus.conf File. |
The features and enhancements in Proxy Server 4.0 releases prior to Proxy Server 4.0.14 are described in the individual Release Notes documents specific to those releases, available on docs.sun.com at http://docs.sun.com/prod/webproxys4.0#hic. This section lists the important features and enhancements provided in Proxy Server 4.0 releases between 4.0.13 and the current release:
In addition to fixing quite a number of bugs, as listed in Table 11, the 4.0.14 release of iPlanet Web Proxy Server provides a number of enhancements to address customer requests:
The ChannelPoolValidate directive has been added to the magnus.conf file. It controls whether the channel pool is actively checked for stale or closed connections.
The ChannelPoolMonitorInterval directive has been added to the magnus.conf file. It specifies how frequently the channel pool is to be checked for stale or closed connections.
The ChannelReuseValidate directive has been added to the magnus.conf file. It controls whether persistent connections are validated before they are reused.
The always-retry-stale-keep-alive parameter has been added to the http-client-config SAF. It controls whether the HTTP client retries a failed request even when the number of retries is set to zero, provided that the request failure was due to a stale persistent connection.
This section lists the most important issues fixed in the following releases:
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.14.
Table 11 Issues Resolved in iPlanet Web Proxy Server 4.0.14
ID |
Summary |
---|---|
6914759 |
the pool monitor thread's interval should be configurable |
6916393 |
Proxy 4.0: channel pool implementation: need optional validation of pooled channels |
6917624 |
Proxy 4.0: httpclient should (optionally) always retry when a keep-alive connection is stale |
6917655 |
Proxy 4.0: (optionally) validate a connection before reusing |
6920803 |
document the new directive: ChannelPoolValidate added as part of the fix for 6916393 |
6920804 |
document the new directive: ChannelPoolMonitorInterval added as part of the fix for 6914759 |
6920805 |
document the new directive: ChannelReuseValidate added as part of the fix for 6917624 |
6920806 |
document the new parameter: always-retry-stale-keep-alive added as part of the fix for 6917655 |
6920836 |
CR#6648470 is not listed in Readme of patch#120981-19 |
6921169 |
There's no description about "retries" parameter of http-client-config in the manual. |
6921170 |
The behavior with retries="0" is not described. |
6921721 |
Proxy 4.0: crash under load on linux |
6923914 |
SJSPS 4.0.13 server instance fails to start for T5240 niagara cert token "Sun Metaslot" |
6931137 |
Proxy 4.0: rebranding: installer: change default install location |
6931138 |
Proxy 4.0: rebranding: change product name/version string |
6931139 |
Proxy 4.0: rebranding: admin OLH: modify image and links |
6931140 |
Proxy 4.0: rebranding: top frame of admin GUI screen needs changes to reflect oracle rebranding |
6931141 |
Proxy 4.0: rebranding: admin: the copyright text in the "Version" popup window should be modified |
6931142 |
Proxy 4.0: rebranding: Product README file should be updated as part of oracle rebranding |
6931143 |
proxy 4.0: rebranding: installer: change installer's left pane image |
6931988 |
proxy 4.0: rebranding: installer should not display any license |
6931989 |
Proxy 4.0: rebranding: Support browsers IE8 and FF 3.5 |
6931990 |
Proxy 4.0: rebranding: Product License file should be updated as part of oracle rebranding |
6931991 |
Proxy 4.0: rebranding: installer: Product name should be changed |
6931994 |
Proxy 4.0: rebranding: installer: change installer's/uninstaller's log file name |
6931996 |
Proxy 4.0: rebranding: installer: copyright string should change in instance/admin scripts/config |
6931997 |
Proxy 4.0: rebranding: dtd file names should be changed |
6932000 |
Proxy 4.0: rebranding: default value of "Proxy-agent" header should be changed |
6932002 |
Proxy 4.0: rebranding: default authentication prompt in ACL templates should be changed |
6932476 |
Proxy 4.0: NTLM support: server keeps wrong count of idle connections in connection pool |
6932483 |
Proxy 4.0: NTLM: server should not cache responses passing through an authenticated connection |
6933138 |
Proxy 4.0: rebranding: change copyright strings in external header files |
6933148 |
Proxy4.0.13 Admin GUI default security Cryptographic Module should not set to NSS Generic Crypto Ser |
6933175 |
WPS suffers from an input checking error which permits the reading of arbitrary files from local fs |
6933223 |
Version changes for 4.0.14 |
6933599 |
Proxy 4.0: issues with support of "Proxy-support:" header |
6933647 |
Proxy 4.0: rebranding: admin OLH: changes to reflect new product name |
6934367 |
Upgrade on windows creates a "Oracle iPlanet Web Proxy Server" entry in add/remove programs |
6936445 |
proxy 4.0.13 - 2 new CA root certs cannot be displayed correctly from admin GUI |
6937256 |
submit and revert button under ACL setting under admin GUI are not being dispalyed in firefox 3.6 |
6937459 |
Proxy forwards POST headers without POST entity body |
6939617 |
Proxy 4.0: rebranding: installation: windows upgrade fails upon change of product name |
6939990 |
Proxy 4.0: rebranding: admin GUI: change images in the "Version" popup |
6940022 |
Proxy 4.0: compiler version change: move to sun studio 12 |
6941325 |
Pxy 4.0 Docs: Cache Capacity needs updating in Proxy Admin Guide |
6941493 |
Proxy 4.0: rebranding: changes to package/rpm related files |
6941954 |
Proxy 4.0: rebranding: Admin server's realm string should not contain a "Web" prefix |
6941956 |
Proxy 4.0: rebranding: OLH: modify/remove the "Document Information" page |
6944070 |
Proxy 4.0: rebranding: admin GUI version window title needs to be changed |
6945311 |
Proxy 4.0: rebranding: Proxy Agent Header in the Admin GUI should show Oracle iplanet Proxy Server |
6945318 |
Proxy 4.0: urldb emits invalid warning/error message while expiring cache files |
6946167 |
Proxy 4.0: rebranding: upgrade in windows should not create a new entry of start > programs > |
6955678 |
Problem with directory permissions |
6955684 |
Problem with file permissions |
6955723 |
Problem with JSESSIONID |
6955741 |
Problem with html pages |
6955759 |
problem with admin console (param INSTANCE_NAME) |
6955761 |
problem with admin console (reflected XSS) |
6955762 |
problem with admin console (param absolute) |
6955763 |
problem with admin console (param mime) |
6955764 |
problem with admin console (param cmd) |
6955765 |
problem with admin console (param type) |
6955766 |
problem with admin console (adminReferrer) |
6955769 |
problem with admin console (resource) |
6956084 |
Problem with admin console (target) |
6956086 |
Problem with admin console (dscruser-lang) |
6956143 |
Problem with admin console (clickjacking) |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.13.
Table 12 Issues Resolved in iPlanet Web Proxy Server 4.0.13
ID |
Summary |
|
---|---|---|
6886805 |
Proxy Server 4.0 appears to go into a high CPU consumption loopwhile processing POST requests for ftp URLs. This is accompaniedby memory growth. |
|
6896637 |
Proxy Server 4.0 goes into high CPU consumption and memory leak while processing ftp HEAD requests. |
|
6896640 |
Proxy Server 4.0 crashes during startup if server.xml does not contain GC-related configuration. |
|
6900117 |
Integrate NSS 3.12.5 which contains fixes for the SSL/TLS vulnerabilities. |
|
6905852 |
Proxy Server 4.0 crashes due to a bug in caching subsystem. |
|
6862976 |
Proxy Server 4.0's "map" SAF should allow mappings to specific files on a remote server. |
|
6875375 |
Proxy Server 4.0 Admin GUI Cache View (cv) program crashes. |
|
6878190 |
Proxy Server 4.0.x supports Sun Fire T-Series Crypto Accelerator when installation user and instance user are the same, such as root |
|
6878699 |
Proxy Server 4.0.8 has .htaccess issues with grpfile if this user belongs to multiple groups. |
|
6885145 |
Proxy Server 4.0 displays the above error message every time when the requests exceed a ConnectionQueue size. |
|
6888184 |
After upgrade, installer displays strangely worded message in Proxy Server 4.0.11. |
|
6891353 |
Proxy Sever 4.0.x does not recognize $ character. |
|
6895030 |
The cache finish status can be missing/empty due to existing lock file under heavy load conditions. |
|
6897536 |
Proxy 4.0 currently does not support the behavior promised by a "Proxy-support: Session-Based-Authentication". |
|
6898929 |
Proxy 4.0.13 supports Microsoft Windows 2008 Enterprise Edition. |
|
6900151 |
When a cached object is being refreshed after it's size has changed at the remote server, and chunked encoding is used, the cache-finish status is absent in the server's access logs. |
|
6901079 |
The http client can be enhanced to optionally run the Error stage for any error responses that it receives from a backend server. |
|
6906258 |
Proxy Server 4.0 needs to support arbitrary LDAP search filter in dbswitch.conf. |
|
6906789 |
Corrupted cache files can be formed in a Proxy 4.0 installations cache under load. |
|
6910914 |
URL mapping does not work with send-error. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.12.
Table 13 Issues Resolved in iPlanet Web Proxy Server 4.0.12
ID |
Summary |
---|---|
6856153 |
Proxy 4.0 crashes in the ftp subsystem under stress. |
6856800 |
Mapping cache breaks under a high load environment on Proxy Server 4.0.8. |
6869927 |
Integrates NSS 3.12. |
6882485 |
Proxy Server 4.0 crashes during startup with ICP enabled and MaxProcs > 1. |
6851886 |
Adds a dedicated thread to monitor the ldap connection pool for validation. |
6863071 |
Proxy Server 4.0 caching does not happen for large query strings (> 150 characters, approximately). |
6864966 |
Feature request to strip the version number out of the service name (Proxy Server 4.0.11). |
6864967 |
Notifies the end user when the upgrade custom Proxy Server installation to check javahome . |
6868580 |
Version changes for 4.0.12. |
6872808 |
Proxy Server 4.0 should support Windows 2003 R2 SP2. |
6874449 |
Proxy Server 4.0 build patch scripts need to be notified for new buildpatch location. |
6876811 |
SSL tunnel does not log initial wait time and full wait time in extended2 logging. |
6882926 |
Proxy Server 4.0 ICP port not available on Solaris x86. |
6883024 |
Proxy Server 4.0 byte range handling is broken. |
6883480 |
Proxy Server 4.0 displays “Bad CIF entry” message while looking up a cache file. |
6883492 |
Proxy Server 4.0 does not receive ICP messages by peers on x86. |
6878213 |
send-error should choose error file path based on browser locale. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.11.
Table 14 Issues Resolved in iPlanet Web Proxy Server 4.0.11
ID |
Summary |
---|---|
6835885 |
The ftp subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and server crash. |
6837779 |
A memory leak is observed in Proxy Sever 4.0 ftp subsystem while accessing directories through ftp. |
6842576 |
The caching subsystem of Proxy Server 4.0 has a bug which leads to memory corruption and returns incomplete response headers when served from the cache. |
6844188 |
Proxy Server 4.0 can crash due to memory corruption, while serving ftp requests from the cache. |
6847078 |
The caching subsystem of Proxy 4.0 should identify and avoid processing of corrupt cache files to serve requests. |
6847467 |
Configuring the Proxy Server 4.0 to use the pre-filter SAF causes server to crash. |
6853447 |
Proxy server crashes when the script associated with the pre-filter SAF contains an empty line at the beginning. |
6827602 |
The statistics generation in Proxy Server 4.0 should show data for both "Client DNS cache" (host-to-ip) and "Host DNS cache" (ip-to-host). |
6836430 |
The Expires header is not handled correctly in Proxy Server 4.0.9. |
6837471 |
Proxy Server 4.0.9 fails to display Statistics page on Linux and throws a "500 Error". |
6838323 |
Proxy Server 4.0 displays wrong "504 Gateway Timeout Error" when <NameTrans fn="set-variable" error="504">. |
6838907 |
Windows Installer for Proxy Server 4.0 does not allow port values less than 1024 for the server instance, while allows for Admin server. |
6843724 |
Garbage collection in Proxy Server 4.0 may produce a race condition under heavy load. |
6847488 |
A bug in the Proxy Server 4.0 Admin interface makes it difficult to edit template assignments that contain '+' characters. |
6847849 |
The server.xml file is not updated on modifying the cache "Working Directory" in Proxy 4.0 Admin interface. |
6848296 |
Authentication problems is observed in Proxy 4.0, while using ACLCacheMax parameter. |
6849204 |
A potential memory corruption and server crash occurs in Proxy Server 4.0 due to a parray module issue. |
6849650 |
Proxy server crashes during restarts when configured for MaxProcs > 1. |
6853436 |
While updating the cache size through "Set Cache Specifics", server.xml does not get updated. |
6808135 |
Proxy Server 4.0.9 has a typo issue while accessing "Server Config Information" panel in both Admin GUI and CLI. |
6825292 |
Proxy Server 4.0 should allow Admin GUI to enable or disable both types of DNS cache; ip-dns-cache-init and host-dns-cache-init. |
6840526 |
Proxy Server 4.0 has potential problems with parray code. |
6841509 |
During Proxy installation, selecting “Startup on Boot = yes” results in an error. |
6843134 |
Verbose logging mode of automatic GC is required. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.10.
Table 15 Issues Resolved in iPlanet Web Proxy Server 4.0.10
ID |
Summary |
---|---|
6764910 |
Proxy Server 4.0 crashes due to dynamic reconfiguration. |
6783252 |
Proxy Server 4.0, should display cache finish status for responses marked as non-cacheable by the remote server. |
6793247 |
Proxy Server should optionally ignore caching directives in HTTP request headers. |
6559322 |
Proxy Server must support large web proxy cache size greater than 32 GB. |
6773378 |
URL filtering must allow to specify relative URLs. This facilitates URL filtering to work along with load balancing. |
6781954 |
The passthru-cookies parameter, in URL mapping feature, used to specify cookies does not function properly in few cases. |
6785653 |
POST with proxy authentication fails with a 407 error if you have not authenticated before the POST. |
6789769 |
The URL filter functionality does not consider CONNECT requests. |
6791870 |
Proxy Server's admin interface does not allow multiple reverse mappings to the same destination. |
6798154 |
Certain url constructs, with a space and a single quote, are not translated properly by the Proxy Emulator. |
6804616 |
Proxy Server 4.0.10 supports the feature - Transparent Proxy Support for HTTP/1.1 requests. |
6803379 |
The iPlanet Web Proxy Server 4.0.9 patch, 120983–16 and prior versions, provides support for RHEL 3.0, 4.0, and 5.0. |
6796045 |
In Proxy Server's admin interface, the DNS cache information in Monitoring functionality should be updated appropriately. |
6754044 |
Upgrading Proxy Server on a Windows box fails, as only a single installation of Proxy Server 4.0 is allowed on Windows box. |
6781259 |
The Java version information on the Proxy Server installation wizard is not updated. |
6820625 |
URL rewriting fails, when an url has a space after a quote. |
6820622 |
Proxy Server inserts a wrong If-modified-since: request header when without-lastmod is enabled. |
6817164 |
cbuild should include appropriate help message for the -R option. |
6816997 |
Proxy Server 4.0 has a problem in the map SAF's HTTP redirect functionality. |
6812802 |
Proxy statistics is not displayed for DNS on HPUX, after enabling the Activate Statistics/Profiling. |
6805450 |
Web Proxy Emulator problem while using DHML application. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.9.
Table 16 Issues Resolved in iPlanet Web Proxy Server 4.0.9
ID |
Summary |
---|---|
6712042 |
Proxy Server 4.0 encounters an instance hang in cache_filter_remove function. |
6713723 |
In Proxy Server 4.0, the cache partition/section .size files do not always show accurate values. |
6715885 |
Proxy Server 4.0 reported log error messages related to cache lock file problem. |
6715891 |
In Proxy Server 4.0, templates meant for CONNECT requests do not function properly. |
6721344 |
Proxy Server 4.0 should have the ability to rewrite client headers. |
6722629 |
Proxy Server 4.0 leaks file descriptors in the ftp subsystem when configured in PORT mode. |
6722646 |
Proxy Server 4.0 leaks file descriptors in the caching subsystem while handling partial HTTP responses. |
6723344 |
In Proxy Server 4.0 the cache statistics collection logic performs a complete cache traversal, during startup. This happens multiple times, contributing to a slow server startup. |
6725741 |
Disabling statistics or profiling functionality in Proxy Server 4.0 Admin interface, does not function properly. |
6727215 |
In Proxy Server 4.0, large negative values are seen for xfer-time in access log. |
6728447 |
In Proxy Server 4.0.7, digest authentication used to process an ACL fails when the URI contains a query string with backslashes. |
6735228 |
In Proxy Server 4.0, caching subsystem has a file descriptor leak under certain conditions. |
6739585 |
Proxy Server 4.0 needs an alternative faster method to find out current cache size. |
6740248 |
In Proxy Server 4.0.7, Admin GUI displays null for Processes and Listen Queue Size instead of default values. |
6741262 |
Performance optimization is required for Proxy Server 4.0 caching subsystem. |
6745095 |
Proxy Server 4.0 should tolerate HTTP responses that contain embedded spaces in header names. |
6745170 |
Proxy Server 4.0 should support on RHEL5. |
6746138 |
Proxy Server 4.0 should have the capability to rewrite HTTP request bodies. |
6747928 |
FTP requests going through Proxy Server 4.0 as URL ftp://user:password@server, where password contains @ character generates an incorrect response. |
6750791 |
Proxy Server 4.0.7 crashes under load, due to a problem in the ACL subsystem. |
6759153 |
Proxy Server 4.0.8 crashes, due to a problem in the URL Mapping subsystem. |
6762346 |
Improper handling of cache-control header in Proxy Server 4.0. |
6768244 |
Improper functioning of channel pooling logic in Proxy Server 4.0, results in service unavailability and possible memory leak. |
6275141 |
File cache functionality is not implemented in Proxy Server 4.0. |
6767688 |
Proxy Server 4.0 should support the “only-if-cached” cache-control directive. |
6767691 |
Proxy Server 4.0 should support the "stale-while-revalidate" cache-control extension. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.8.
Table 17 Issues Resolved in iPlanet Web Proxy Server 4.0.8
ID |
Summary |
---|---|
6648112 |
Proxy Server 4.0.6 and 4.0.7 does not provide a way to disable EPSV FTP Transfer Mode. |
6655221 |
Increase the maximum timeout for idle connections on the Proxy Socks Server 4.x. |
6660265 |
flexanlg/dpstats log analyzer is unable to deal with large access log files. |
6660814 |
In Proxy Server 4.0, the block/fwd IP character of the most specific object is not enforced correctly. |
6664392 |
In Proxy Server 4.0, improper handling of vary header occurs. |
6664646 |
In Proxy Server 4.0, improper handling of via header occurs. |
6670738 |
In Proxy Server 4.0, there is a possible 'High CPU Utilization' problem in the FTP subsystem. |
6688600 |
Proxy Server 4.0.7 Admin GUI adds am into server.xml when using Caching-Schedule Garbage Collection page. |
6692494 |
In Proxy Server 4.0, cache filter masks client write failures even when a cache file is not opened. |
6692495 |
Proxy Server 4.0 can crash during Garbage Collection/Cache iteration code. |
6695257 |
Integrate URL Mapping feature. |
6707473 |
Heap-based buffer overflow exists in FTP Proxy Server. |
6708838 |
Upgrade to JDK 1.5 in Proxy Server 4.0. |
6708842 |
Telemetry feature for Proxy Server 4.0. |
6711396 |
dpstats dumps core in customer log file. |
6454382 |
Reverse Proxy should allow changing cookie domain value in set-cookie. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.7.
Table 18 Issues Resolved in iPlanet Web Proxy Server 4.0.7
ID |
Summary |
---|---|
6729343 |
Proxy Server 4.0.7 - Upgrading on Windows 2003 while the server is running fails. When upgrading on Windows from Proxy Server 4.0.6 to Proxy Server 4.0.7 without stopping the server, the process fails with errors. Stopping the server before attempting the upgrade will ensure the upgrade runs successfully. |
6261401 |
URL filter files should be created under config directory instead of the conf_bk directory. |
6590476 |
FTP subsystem is not closing the old connections appropriately. |
6591980 |
The ownership of the URL filter is not set to that of the server instance user. |
6592079 |
Backup files are getting created with wrong ownership. |
6594729 |
Receives an HTTP 7756 invalid response header, but serves the file to the client. |
6595773 |
FTP in Proxy Server 4.0.5 shows incorrect directory list. |
6596860 |
Proxy Server should return a correct response when a pooled FTP connection receives the reset packet. |
6599212 |
Add a dedicated thread which monitors the FTP connection pool for dead connections. |
6600193 |
Proxy-Agent header does not work. |
6602044 |
Incorrect FTP response while reloading the page multiple times. |
6602049 |
Need to improve handling of FTP requests for internal objects like file and folder icons. |
6604108 |
Incorrect response while dealing with invalid response headers. |
6605322 |
Provide an in-process cleaning facility to clean cache entries fast. |
6613934 |
Digest authentication prompts user to authenticate repeatedly. |
6619592 |
httpacl and alias directories exist for the removed instance. |
6620274 |
Proxy Server 4.0.6 is unable to create new cache working directory if parent directory does not exist. |
6621398 |
Proxy Server 4.0.6 fails to work with FTP server when you try to forward map to a back end of FTP server. |
6622805 |
Proxy Server 4.0 does not respond and gets timed out, while accessing certain FTP URLs. |
6622813 |
Proxy Server 4.0: starts very slow when the cache size is huge. |
6628381 |
A proxy instance for which the cache is disabled cannot be removed cleanly. |
6634127 |
Memory corruption causes server crash. |
6635864 |
Manage Certificates screen on the administration interface is not displayed correctly. |
6639455 |
Proxy server does not respond on stop or restart. |
6641201 |
The Proxy-Authenticate headers are not passed correctly to the end client in a forward proxy. |
6648470 |
Proxy 4.0: Possible memory corruption while processing responses that contain “Vary:” |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.6
Table 19 Issues Resolved in iPlanet Web Proxy Server 4.0.6
ID |
Summary |
---|---|
6224535 |
Timeout functionality does not work. |
6460215 |
Cannot connect to an IPv6 enabled web site when connecting through proxy server. |
6478413 |
Uninstalling a proxy server instance does not result in the removal of the files corresponding to the instance from the alias and httpacl directories. |
6494418 |
block-multipart-posts doesn't block the request when content-type parameter is set. |
6505578 |
sockd daemon can run out of worker threads when processing UDP associated requests. |
6513846 |
Proxy Server 4.0.6 documents are updated to remove reference to HTTPS caching. |
6514870 |
Removing a template through the Remove Template option does not remove all the assignments for that template. |
6520593 |
A new section “Precedence of Regular Expressions Over Templates in Set Cache Configuration” is added to chapter 16 in the Proxy Server 4.0.6 Administration Guide to explain why templates used within Set Configuration do not work but manually entered regular expressions do. |
6526659 |
Incorrect server start command is displayed in the installer. |
6529376 |
The default cache size for proxy server on Windows is 100 MBytes but the help page states that it is 1.6 GBytes. |
6530476 |
The path to the libjvm.sl file in the start script is not set correctly. |
6534717 |
When cache-status is enabled in access log, the access logs repeatedly show cache file as written and deleted for request headers that have cache-control set to no-cache. |
6537346 |
Log entries show cache status as written , even when cache file is not created. |
6538613 |
cachegc dumps core if the proxy instance's cache directory has been modified. |
6541327 |
cachegc sometimes works incorrectly. |
6545753 |
Error log shows a confusing error message when the proxy server encounters an invalid request line. |
6546256 |
On Windows, a regular expression is not registered correctly in obj.conf . |
6546720 |
Cannot connect to certain sites when DNS cache is enabled. |
6547808 |
On Windows, the watchdog process crashes when the proxy instance is stopped through the service manager. |
6559837 |
Proxy server crashes while handling an ftp request. |
6560432 |
The Proxy Server 4.0.6 Administration Guide and the online help are updated to include description for Source Port Number. |
6562122 |
For a SSL proxy instance an incorrect password entry does not get written to the errors file. |
6562165 |
Proxy Server 4.0.6 Administration Guide is updated to remove references to the file cache functionality. |
6562585 |
Proxy Server 4.0.6 Release Notes is updated to provide the correct version number for NSPR. |
6563262 |
During ftp access some error log messages are noticed that convey no information and can be confusing. |
6564435 |
Details of the Cache Section Table on the administration interface are not displayed correctly. |
6565004 |
Proxy Server 4.0.6 Release Notes is updated to provide correct link to the Proxy Server documentation page. |
6565021 |
Internal log rotation rotates the files twice if the system time is changed between two scheduled rotations. |
6565436 |
The section "Disabling the Forward Proxying feature in a Reverse Proxy Setup" under "Setting Up a Reverse Proxy" in Chapter 14 of the Proxy Server 4.0.6 Administration Guide is updated to add information about how to prevent a security vulnerability in a reverse proxy server configuration. |
6566246 |
Cross site scripting vulnerability in the View Error Log functionality. |
6566309 |
Cross site scripting vulnerability in the View URL Database functionality. |
6566352 |
Cannot connect to an IPv6 FTP server through proxy server. |
6566822 |
HTTP headers with a very long value can cause memory corruption in proxy server. |
6566836 |
flexanlg dumps core. |
6566889 |
After setting a value for Processes in the Configure System Preferences page , the value can not be changed back to null. |
6566924 |
Help page is updated to provide a clearer explanation for Processes in the Configure System Preferences page. |
6568534 |
Reference to Proxy Server 3.6 documentation issue is removed from Proxy Server 4.0.6 Release Notes. |
6569516 |
Proxy Server accepts and forwards responses whose header names contain spaces. |
6572128 |
Localized online help is updated to provide the correct context sensitive help page. |
6572138 |
The access log does not include certain connection related information. |
6574401 |
Proxy Server supported browsers to be enhanced to include Internet Explorer (IE) v7 |
6576044 |
Proxy Server 4.0.6 Configuration File Reference is updated to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT. |
6576050 |
Proxy Server 4.0.6 Online Help is updated to specify the effect of HTTP client's retry functionality. |
6576065 |
Proxy Server 4.0.6 Online Help is updated to make it consistent with Sun's style guidelines and proxy server's product user interface. |
6577128 |
Proxy server support to be extended for Sun Crypto Accelerator 6000. |
6578024 |
LDAP connection failure errors. |
6578560 |
In the message that proxy server displays after an upgrade to indicate how you can access the administration server, the server name and port name are indicated as null (http://null:null). |
6579049 |
Proxy server creates an incorrect partition which causes errors during startup. |
6579781 |
An empty host-regex argument in the virt-map directive results in proxy server crash. |
6581350 |
Proxy server installation contains debug JDK binaries. |
6584989 |
In the Version window, the label is not located in the center of the Close button when the browser is IE 7. |
6594191 |
Localized Online Help has to be integrated to Proxy Server 4.0.6. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.5
Table 20 Issues Resolved in iPlanet Web Proxy Server 4.0.5
ID |
Summary |
---|---|
6240773 |
Deleting listen socket and restarting the server does not clear the port. |
6390867 |
On Windows, cv.exe fails when you try to view the information for a cached csv file. |
6391439 |
Clearing the Enable DNS subdomains option in the administration interface does not remove the line DNS fn="dns-config" local-domain-levels="0" from the obj.conf file. |
6413536 |
webservd must be used as the default user and not nobody. |
6463455 |
Proxy Server 4.0.5 Release Notes is updated to state the version of Sun Crypto Accelerator that supports the proxy server. |
6466910 |
Proxy Server 4.0.5 Administration Guide is updated to describe the procedure to set up Sun Crypto Accelerator to work with proxy server. |
6482102 |
Files cannot be retrieved from certain FTP sites through web browsers when connecting through the proxy server. |
6500200 |
Expired page is not displayed in the administration interface. |
6500224 |
FTP through SOCKS routing does not work. |
6500232 |
Proxy Server 4.0.5 Online Help is updated to mention Cache in the help page for the Monitoring Server Status page. |
6500547 |
FTP through SOCKS routing occasionally results in file corruption. |
6506550 |
Proxy server can crash due to null pointer access in caching subsystem. |
6513846 |
Proxy Server 4.0.5 Release Notes is updated to state that proxy server does not support HTTPS caching. |
6517969 |
Processing of obj.conf and ACL does not work as expected. |
6520629 |
Configure Virtual Multihosting page in the administration interface does not allow user port number in host-regex. |
6521610 |
When the Set Cache Specifics page in the administration interface is used to enable cache, it does not remove "cache-disable" line in the obj.conf file. |
6523139 |
Proxy server debug build does not log all the information, such as disconnects. |
6524253 |
Proxy server watchdog core dump. |
6524898 |
When the cache structure is created by cbuild.exe, the .sects file in the cache becomes empty after the instance starts up. |
6525294 |
The flexanlg utility dumps core if there are any syntax problems in the log file. |
6526297 |
The Manage Section page in the proxy server administration interface lists all the sections of all the partitions, and offers a way to move sections from one partition to another. This feature does not work correctly. |
6526354 |
When a new Partition is added, one section is gets created. |
6526964 |
SOCKS v5 server disconnects sessions unexpectedly. |
6526990 |
The localized versions of Proxy Server 4.0.4 Online Help have a link that does not work properly. |
6527840 |
Shutting down the SOCKS server using the administration interface results in a different message compared to the message that is displayed while starting up. |
6528069 |
Though the maximum cache partitions possible in proxy server is 32, there is a problem in creating 32 partitions in Proxy Server 4.0.3. |
6529305 |
When using Virtual Multihosting, if you define the host in upper case, it does not work. |
6534208 |
Version string has to be changed for the 4.0.5 release. |
6537410 |
Proxy server sometimes waits to receive a new http request until the web server closes the connection. |
6537736 |
Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the handling of domain name address types within the sockd daemon. |
6537745 |
Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the s5auth_userpass() function within the sockd daemon. |
6538060 |
The startsvr and stopsvr scripts of proxy administration server refer to proxy-admserv404 instead of proxy-admserv405. |
6538173 |
On HP-UX, the administration server displays an error page when you try to add a listen socket to a proxy instance. |
6539318 |
On Linux, the utility cbuild does not work. |
6539689 |
On Linux, if the group ID 80 already exists, proxy server installation does not work and the installation failure does not result in proper installation log. |
6544263 |
Localized versions of the Proxy Server 4.0.5 Online Help must be updated with the changes made to the English version of the Online Help. |
6545267 |
Proxy Server 4.0.5 Configuration File Reference is updated with information about log parameters. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.4
Table 21 Issues Resolved in iPlanet Web Proxy Server 4.0.4
ID |
Summary |
---|---|
4973509 |
Cache-Control directive for private/no-cache headers is not supported for multiple values. |
4973523 |
HEAD requests are not cached. |
4973652 |
Proxy server does not support 65536–byte long URIs. |
4999184 |
When proxy server is configured in reverse proxy mode pointing to a web server, the error message displayed when the web server is down should not mention that it is a proxy sever. |
5093104 |
Proxy server administration interface allows trailing white space for a HTTP header in client IP forwarding. |
6208895 |
An FTP request through the proxy server to a Microsoft IIS FTP server does not work. |
6214329 |
Error in error log for HTTP4352:zlib internal error. |
6233086 |
For client credentials forwarding with multi-byte user name, validation check needs to be added. |
6243358 |
A deleted user still appears as part of a group. |
6245972 |
User's permission set through the Administer Access Control page does not get implemented. |
6246562 |
Controlling a set of servers installed on different locales and platforms through clusters fails when stopping the set of servers. |
6253844 |
There is no support for “zh-cn” for proxy server online help. |
6255761 |
There is no content at the Installer Help page. |
6255838 |
When a proxy server instance is removed without stopping the SOCKS server and a new instance is created, you will not be able to start the SOCKS server on the new instance as the port would be in use. |
6256442 |
The installer displays the error message "Password should be at least 8 characters" only in English. |
6266497 |
Administration interface allows duplicate port numbers in the Add Server page. |
6268356 |
On Windows, SNMP service does not work if libnspr4.dll is not present in the system32 directory. |
6274424 |
On Windows, the value for defaultInstallDirectory in the state file is wrong. The default installation directory in the installer is c:\sun\ProxyServer40, but the state file generated when you use the command setup --savestate does not have c:\sun\ProxyServer40 as the default installation directory. The state file displays the UNIX template value as the default installation directory. |
6304981 |
Proxy server installation fails on Linux if ksh is not installed on the machine. |
6310283 |
In the proxy server administration interface, sometimes the tabs display incorrect page content. |
6312087 |
Localized online help is not context sensitive. |
6313904 |
The administration server does not allow you to set a listen socket with a port number that is used for another IP address. |
6321797 |
Proxy Server 4.0.3 Configuration File Reference is updated with information for the flex-init parameter no-format-str.access. |
6331035 |
Load balancing feature works only for regular expressions. |
6333355 |
When the ACL caching is enabled, the user/group definition in the ACL has to exactly match the case of the LDAP entry for the ACL caching to happen. |
6337657 |
Proxy server displaying Internal Server Error message when the configuration of Distributed Administration is attempted. |
6369549 |
Proxy patch installation on JavaES 5 results in some errors on Linux. |
6371618 |
Can not change Compression Level to NONE. Documentation should state what to select as the compression level. |
6380736 |
Control does not transfer to Schedule GC page when Explicit GC is selected in the Set GC Preferences page. |
6382393 |
Proxy server is unable to perform FTP uploads. |
6382692 |
During migration, the format string Req->vars.pauth-user in the 3.6 obj.conf should be changed to Req->vars.auth-user . |
6383320 |
Cannot remove cache file when contents file name has space or Japanese characters. |
6383435 |
sockd process uses high memory on Linux . |
6387166 |
View Server Settings page in the proxy server administration interface does not display MaxProcs value. |
6388818 |
The SOCKS server requires the Directory Service ID to be default. |
6390034 |
libnspr4.dll should be referred first on the directory <install-dir>\bin\proxy\bin instead of the directory system32. |
6390054 |
Copyright year should be changed in the version window of the administration interface. |
6399395 |
The Select Directory Services page does not reflect the directory service selection. |
6402589 |
The function http-client-config does not take the setting from the most specific object. |
6411505 |
The Redirect URLs page in the administration interface does not function as expected. |
6412129 |
Proxy Server 4.0 migration tool must add the line fn=“block-ip” if the setting is not found in the Proxy Server 3.6 instance. |
6414355 |
Executing the command batchupdate with an invalid bu.conf file results in segmentation fault on Linux. |
6415125 |
Change the compiler from Sun Studio 8 to Sun Studio 10. |
6416272 |
Proxy server fails to start properly after the server user is changed. |
6417755 |
Links like Previous, Main and Next not localized in the proxy server online help. |
6419925 |
More cache-related statistics required in proxy server. |
6423487 |
Detailed description on how to enable DNS statistics has been added to the online help. |
6425025 |
The directive host-map does not work unless a url-prefix parameter is explicitly provided. |
6425026 |
Proxy server needs to distinguish cache objects based on Accept-Encoding headers. |
6425038 |
Proxy server does not consider query-maxlen when acting as reverse proxy with cache-local value set to 1. |
6425601 |
The automatic garbage collection does not work in certain conditions. |
6425752 |
There are duplicate headers in a 304 response from the cache. |
6426543 |
Cache iterator leaks memory. |
6427137 |
Proxy server transmits micro version number in responses. |
6433285 |
Some of the proxy core error messages are not localized. |
6433776 |
.sects files are not created when the command cbuild is executed. |
6433807 |
On Windows, proxy server and administration server display wrong version number in the start up message. |
6434137 |
Proxy server displays wrong error message on timeout. |
6435491 |
In the Proxy Server 4.0.4 Configuration File Reference, in chapter 5, the reference to type parameter is removed in the section on Service derivative. |
6441601 |
In the Proxy Server 4.0.4 Administration Guide, in chapter 5, notes have been added to clarify the need to load the root keys of Certification Authority or the self-signing application. |
6442054 |
In the Proxy Server 4.0.4 Administration Guide, in chapter 5, the section Using SSL to Communicate with LDAP has been updated with information about importing LDAP root CA certificates to the proxy server. |
6442071 |
In the Proxy Server 4.0.4 Administration Guide, in chapter 5, a new section is added to clarify about securing access to administration server. |
6442090 |
In the Proxy Server 4.0.4 Installation and Migration Guide, clarification has been added to clarify that: - Proxy Server can be installed as a non-root user - Proxy Server can run as a non-root user |
6442091 |
Cache must correctly compute the value of current_age with the request delay added to the age. |
6442641 |
Proxy Server 4.0 does not work well with CONNECT requests that specify a content-length. |
6443160 |
On HP-UX, zlib library needs to be packaged with the product for JavaES 5. |
6443720 |
Log Analyzer can have issues when the access log file has no log information. |
6443731 |
On Windows 2000 SP4, the system requires restart after configuration in JavaES environment. |
6444332 |
On HP-UX, executing batchupdate with invalid bu.conf results in segmentation fault. |
6444363 |
On HP-UX, proxy instance does not get created with non-root user. |
6444942 |
Executing the command cachegc on a nonexistent instance fails. |
6445440 |
Error messages are incompletely localized. |
6446098 |
On HP-UX, there is an internal error in View URL Database page. |
6446349 |
On HP-UX, stress test results in mmap() failure. |
6446933 |
In the Proxy Server 4.0.4 Configuration File Reference, references to docs directory are removed. |
6447423 |
Proxy Server 4.0 leaks memory because the daemon structures are not freed properly. |
6447427 |
Proxy Server 4.0 leaks memory while acquiring channel in common client. |
6447476 |
The proxy server administration interface always displays the cache partition size as 0. |
6450886 |
The new maximum value of 360 minutes for the socks5.conf parameter SOCKS5_TIMEOUT has been documented in the Proxy Server 4.0.4 Configuration File Reference. |
6454032 |
Proxy server binds to the same port each time the Address directive is set. |
6455411 |
On Windows, proxy server needs to support coexistence of JavaES 4 and JavaES 5. |
6459839 |
Migrating Proxy Server 3.6 to 4.0.3 with the cache disabled results in unusable server instance. |
6461889 |
HTML filter corrupts the transformed data. |
6461896 |
HTML tag filter does not update the content length when it transforms the source document. |
6461991 |
Typographic errors in the English source of proxyResources.properties file. |
6462366 |
On HP-UX, proxy server fails to restart after configuring SOCKS name server. |
6463404 |
Distributed administration does not work correctly when a user is given access to all programs. |
6463927 |
The template file WPSProp.properties has entries for Windows platform. |
6465608 |
On Windows, the shortcut for Stop Admin Server is not created for the administration server when the proxy server is installed. |
6465984 |
The file proxyResources.properties contains duplicate keys. |
6466452 |
Proxy server should update the installer registry key from Entsys to Entsys5. |
6467644 |
On Windows Server 2003 Enterprise platform, running reconfig.bat fails. |
6470294 |
On Windows, running cbuild.exe to decrease the cache sections does not remove the sections properly. |
6473677 |
On JavaES 4 system, proxy server does not start after applying the patch 120981–08/120982–08. |
6478407 |
In the Proxy Server 4.0.4 Administration Guide, in chapter 7, the section Starting SSL-Enabled Servers is modified to remove the suggestion for start script modification. |
6480637 |
Proxy server crashes every hour. |
6484781 |
After enabling distributing administration, even unauthentic users can log in to administration server. |
6485988 |
In the Proxy Server 4.0.4 Configuration File Reference, the section on Send-Error in chapter 5 is updated to add a note stating that send-error does not work for Web Server HTTP response. |
6505480 |
In a standalone installation of proxy server on HP-UX, installation fails on HP-UX 11.11. |
6519072 |
In the installer for a standalone installation of Proxy Server 4.0.4, the JRE version compatible with the US DST changes 2007 needs to be shipped. The compatible JRE version is 1.4.2_13 on Solaris, Windows, and Linux. On HP-UX, the compatible JRE version is 1.4.2.12. |
6519113 |
In the Proxy Server 4.0.4 Configuration File Reference, the section on Error in chapter 5 is updated to remove references to error response codes 404 and 500. |
6511549 |
In a standalone installation of proxy server on HP-UX, installation fails in CLI mode. |
6520577 |
In the Proxy Server 4.0.4 Administration Guide, the section on Virtual Multihosting is updated to add a note to indicate that the reverse mapping should be specified before the other mappings. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.3
Table 22 Issues Resolved in iPlanet Web Proxy Server 4.0.3
ID |
Summary |
---|---|
6191615 |
Certain regular expressions when used as URL filters cause the Proxy Server to crash while starting. |
6213012 |
ROTATELOGS event on Windows is not triggered at the time specified. |
6213726 |
The Transfer Time Report reports a constant value of “0.00 sec/req”. |
6215659 |
The Transfer Time Distribution Report shows a constant value of “< 1 sec [100.0%]”. |
6239292 |
Log Analyzer error with Extended2 format when access log file has no log information. |
6242032 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 7, the section “Configuring System Preferences” has wrong description for Parent Array. The correct description is, “A parent array is a proxy array that a proxy or proxy array member routes through”. |
6264079 |
The administration interface overwrites default, which is the default value for Directory Service. |
6275141 |
In Proxy Server 4.0.2, the File Cache feature is shown in the GUI and documented for the Server Manager > Caching > Configure File Cache page, but the feature is not implemented. |
6270693 |
Sometimes the Filter directive is invoked twice per request. |
6285076 |
SOCKS server cannot handle both LDAP & password file for user authentication, when both the methods are configured. |
6285183 |
PR_MemUnmap() call results in error in Windows. |
6285791 |
SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in standalone installation of Proxy Server. |
6289188 |
When you install Proxy Server 4.0 as non-root user and administration server as root user, any changes you make to the cache settings in the administration user interface result in the permissions for cache file and cache directory changing from non-root to root. |
6292729 |
The default setting for Client IP Addressing Forwarding should be Blocked. |
6294282 |
The Proxy Server 4.0 administration interface cannot set the ACL correctly for any resource which includes a “\” in its pattern. |
6294563 |
Default setting of the access log format to be different from the Web Server. |
6295286 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 14, the section “Setting up a Reverse Proxy” needs to note in Step 5 that the “/” mapping is added only if the user doesn't change the contents of the “Map Source Prefix” text box provided automatically by the Administration GUI. |
6296870 |
Details of the Cache Section Table on the administration interface are not displayed correctly. |
6299913 |
The ConnAddress directive is not changed to Address during a migration from Proxy 3.6 to 4.0. |
6300480 |
The setting of Cache tab is not migrated successfully during a migration from Proxy 3.6 to 4.0. |
6300615 |
The meta tag is missing in localized core messages. |
6301140 |
Migration creates invalid Cache entries when migrating an instance of proxy that has the cache disabled. |
6303619 |
An ACL with a database that is registered with a name other than default does not work properly. |
6304354 |
"Do Not Log Client Accesses From" option creates an invalid configuration. |
6311548 |
The Proxy Server 4.0 uses pauth-user instead of auth-user for Access Log. |
6312044 |
In the Proxy Server 4.0 administration interface, the Monitor Current Activity page under the Server Status tab is not updated for DNS, Keep-Alive, and Cache Statistics. |
6313910 |
On Windows, the Rewrite Headername feature fails and displays the message "Internal server error occurred". |
6313959 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To configure the file cache” provides wrong description for step 1. The correct description is, “From the Server Manager, click the Caching tab”. |
6313960 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To create a batch update” includes step 10 that refers to a “Timing section”. This step is an error. The Set Cache Batch Updates page does not have a Timing section. |
6316289 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “Building the Cache Directory Structure” includes an example that refers to figure 12-1 instead of 12-2. |
6325537 |
Not able to change RqThrottle value through the administration interface. |
6325616 |
Scheduled (explicit) Garbage Collection does not clear cache. |
6328678 |
Cannot set ICPtimeout value to less than 400 milliseconds through the administration interface. |
6331044 |
In the Proxy Server 4.0.2 Administration Guide, in the preface, the section “Using the Documentation” specifies the location of the Proxy Server 4 documentation. http://docs.sun.com/app/docs/prod/s1.webproxys#hic The section should point to Proxy Server 4.0.2 documentation at: http://docs.sun.com/app/docs/coll/1311.2 |
6334854 |
Inconsistency between documentation for Proxy Server and sun-web-proxy-server_4_0.dtd . |
6337102 |
Proxy Server crashes with DNS fn = “dns-config” local-domain-levels = “8” |
6338719 |
Patch upgrade of proxy server on Linux AS 3.0 installs in a different location. |
6338875 |
Proxy 4.0.1 FTP Client fails to process symbolic links correctly. |
6350957 |
In the Proxy Server 4.0.2 Administration Guide, in Chapter 5, the section “Enabling Security for Listen Sockets” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode. Also, in Chapter 8, the section “Specifying Users and Groups” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode. |
6365433 |
Unable to create proxy server instance when Automatic Start option is selected in proxy server administration interface. |
6367375 |
Mapping with CONNECT doesn't work when there is a parent proxy. |
6369095 |
Memory leak in Proxy Server 4.0 . |
6371084 |
Requesting SSL site doesn't work in chained proxy environment when using IP address of the web server. |
6371618 |
Can not change Compression Level to NONE. |
6371731 |
No “connect://.*:563” in the default resource. |
6371793 |
pkginfo displays $distro for SUNWproxy-l10n. |
6373101 |
Administration server creates invalid parameter for ssl-client-config. |
6373622 |
cache-disable SAF is not documented. |
6374279 |
Response to webdav OPTIONS method not according to RFC2518. |
6376065 |
max-uncheck function does not work as expected. |
6376153 |
Proxy Server 4.0.2 does not update cache for ftp/gopher protocols. |
6381373 |
Proxy server crashes during run after restart if the cache is already warmed. |
6381419 |
The value in Cache-last-checked header is invalid. |
6381424 |
Warning header should contain the host:port value of the agent adding this header. |
6382729 |
Proxy server does not accept utf-8 encoded parameters. |
6383301 |
Proxy Server 4.0 has a problem in channel pooling. |
6383456 |
Proxy Server 4.0.2 uses high CPU in Linux. |
6384616 |
Proxy Server 4.0.3 online help has typographic errors. |
6385902 |
The format in Set Access Log Preferences does not match with default format. |
6387772 |
Changes in OLH, due to bugs (6325537, 6303619) fixed, need to be localized. |
6387901 |
In the Proxy Server 4.0.2 Administration Guide, in chapter 11, the section “Chaining Proxy Servers” is not clear. |
6388156 |
The headers of cached files can get corrupted. |
6390237 |
Proxy passes incorrect content-length if the response contains double content-length headers. |
6392875 |
regexp-map does not work for connect. |
6393573 |
Proxy 4.0.2 crashes when DNS fn=“dns-config” local-domain-levels=“1” |
6394287 |
SOCKS process polls too often which leads to sockd process taking up as much as 50% of CPU. |
6395473 |
High CPU utilization problem in Proxy Server 4.0 while handling “slow” clients. |
6395889 |
Windows Server Update Service (WSUS) does not work using proxy server 4.0.2. |
6400981 |
SOCKS5_TIMEOUT value set in socks5.conf is ignored. |
6402698 |
High CPU utilization in FTP client. |
6418214 |
Issues with Proxy Server 4.0 garbage collection feature. |
6424527 |
Proxy server crashes while processing a request containing an empty cache-control header. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.2
Table 23 Issues Resolved in iPlanet Web Proxy Server 4.0.2
ID |
Summary |
---|---|
5097664 |
ssl-tunnel-timeout parameter does not work on Windows. |
6225025 |
ftp-listing-width parameter does not work correctly. |
6251805 |
Changes to archive logs results in a crash. |
6262277 |
Changing the minimum timeout value for ICP from 400 to 50. |
6292690 |
In Proxy Server 4, while using IE 6.0 to access the administration interface, can not select the original partition using Manage Sections>Partition . |
6292786 |
Proxy Server does not write transfer time (and other times) to access log. |
6308714 |
Proxy Server fails to start if umask is not set to 022. |
6310909 |
In Proxy Server 4.0.1 point product, version string of the product name was over translated for French locale from 2005Q3 to 2005T3. |
6310910 |
In Proxy Server 4.0.1 point product, many missing apostrophes in installer messages on French locale. |
6310944 |
In Proxy Server 4.0.1 point product, CLI installer fails to display the license. |
6310961 |
In Proxy Server 4.0.1 point product, the “Yes” in the license installer screen on Spanish locale not localized. |
6312723 |
Cannot access SSL sites with IP address while using Proxy Server 4.0. |
6313981 |
In Proxy Server 4, not able to change the value of Rewrite Content Location and Rewrite Headername after creating a new Reverse Mapping using the administration interface. |
6315817 |
Multiple simultaneous CONNECT (SSL Tunneling) requests cause thread starvation. |
6330348 |
High Memory usage by proxy process in Solaris 10 during stress run. |
6333995 |
Memory leak while running stress tests for CONNECT. |
6335919 |
Proxy Server's FTP client does not close a connection when the FTP Server has closed. |
6335922 |
Proxy Server FTP client does not send USER request to FTP Server. |
6336550 |
Error when trying to install Proxy Server 4.0.1 into a directory that contains a Proxy Server 4.0 install. |
The following table lists the issues resolved in iPlanet Web Proxy Server 4.0.1.
Table 24 Issues Resolved in iPlanet Web Proxy Server 4.0.1
ID |
Summary |
---|---|
2126143 |
The same regular expression does not work in URL Filters, but works in Access Control and Routing. |
2126380 |
Memory leak in the ICP process of the proxy server. |
6231283 |
The administration server on Linux Red Hat Advanced Server 3.0, fails to startup. |
6237346 |
The flexanlg utility dumps core while generating a log analysis report using the Extended2 log file format. |
6240767 |
The add/edit listen sockets for the administration server and the proxy server instance do not verify for used ports. |
6242627 |
Localized core messages are not getting displayed. |
6243369 |
Entry of multi-byte characters in the pages related to SOCKS need to be prevented. |
6244103 |
Internal server error is displayed when the Set Connectivity Mode page of the proxy server instances is accessed on a Linux Advanced Server 3.0, Korean locale. |
6245408 |
An internal error is displayed when a newly added partition is accessed if the administration user and the proxy instance user are different. |
6249166 |
Inconsistency in the display of the Control Cluster, Modify Server, and Remove Server pages in the Cluster tab when the host name in the URL is replaced with localhost while accessing the proxy server. |
6253014 |
Crash occurs in the init-proxy SAF when there are more than 9 NameTrans directives in the obj.conf file on Linux Red Hat Advanced Server 3.0. |
6254508 |
The batch update command exits with segmentation fault. |
6255214 |
Cannot edit or remove an entry in the content URL rewriting page consisting of multibyte characters. |
6255216 |
Some LDAP entries in the socks5.conf lead to socksd crash. |
6259314 |
Some of the localized online help pages are not synchronized with the English online help pages. |
6261440 |
Duplicate English online help exists in the installation directory. |
6263694 |
Online Help unavailable for the Add and Replace Compromised Key List and Certificate Revocation List pages. |
6263721 |
The wrong help page is displayed for the Add/Replace Cert pages in the Server Manager. |
6274186 |
Unable to delete a server instance. |
6276398 |
Remove the localized online help from the base workspace. |
6285078 |
Entry for authentication failure of SOCKS request missing from log files. |
6285779 |
Unable to start the proxy server instance if the serverID has a white space. |
6285788 |
SOCKS server crashes when authentication is used. |
6289242 |
HTTP smuggling in Proxy Server 4. |
6293449 |
Proxy Server 4 does not close the connection immediately with the CONNECT method. |
6295622 |
The function ConnAddress is not realized or documented in Proxy Server 4.0. |
6296169 |
The header Cache-last-checked is broken in Proxy Server 4 installed on other locales. |
6296225 |
The Proxy Server instance may intermittently crash when DNS caching is enabled. |
6301786 |
Localized Core Message not getting displayed on Solaris 9 x86, Linux AS 3.0. |
6311463 |
On the proxy process, the number of open file descriptors keeps increasing with time, resulting in the proxy running out of file descriptors and dropping connections. |