Thursday Aug 11, 2011

How to Set POST Request Body Size Limit In Oracle iPlanet Web Server 6.1 and 7.0

Very often, you like to set  POST Request Body Size Limit in a web server for different reasons.

I wrote two new Oracle KM docs on this topic:

1. How to Set POST Request Body Size Limit In Oracle iPlanet Web Server 6.1 (Doc ID 1327832.1)

2. How To Set POST Request Body Size Limit In Oracle iPlanet Web Server 7 (Doc ID 1297025.1)

You can login My Oracle Support (MOS) and see the details there.


Thursday Jun 11, 2009

How to generate CSR with SHA1 (Signature Algorithm) with certutil in Web 6.1 SPx

If the security auditor asked you about the SSL certificate which is using MD5 as


Signature Algorithm, (e.g. http://www.kb.cert.org/vuls/id/836068 ) in web server 6.1SPx.


Then you can upgrade to 6.1SP11 which has default to SHA1 in CSR, e.g.


    Signature Algorithm: sha1WithRSAEncryption

If you cannot upgrade to 6.1SP11 now, then you can create a new CSR with SHA1 with certutil -Z option.

e.g. I did an example with -Z below for your reference,

apple:/export/home/iws6.1sp7> ./bin/https/admin/bin/certutil -R -s
"CN=hostname.domain.com,OU=Company,O=Company,L=Anytown,ST=New York,C=US"  -a -o /tmp/testSHA1.csr -k rsa -g 2048 -v 12 -d
/export/home/iws6.1sp7/alias -P https-apple-apple- -Z  SHA1

(Note- you need to change -d and -P to match what you have there in
your site!)

Enter Password or Pin for "NSS Certificate DB": <password to your
web server security DB>

A random seed must be generated that will be used in the
creation of your key.  One of the easiest ways to create a
random seed is to use the timing of keystrokes on a keyboard.

To begin, type keys on the keyboard until this progress meter
is full.  DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD!

Continue typing until the progress meter is full:

|\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*|

Finished.  Press enter to continue:

Generating key.  This may take a few moments...

apple:/export/home/iws6.1sp7> ls -l /tmp/testSHA1.csr

-rw-rw----   1 root     other       1247 May 26 13:57
/tmp/testSHA1.csr

apple:/export/home/iws6.1sp7> cat /tmp/testSHA1.csr

Certificate request generated by Netscape certutil

....

-----BEGIN NEW CERTIFICATE REQUEST-----

MIICxjCCAa4CAQAwgYAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl
...............

OesYDTs6R/KTs6R9o/GX/07eAhMO7m+sBQhd4Q29WUu3mkWRqbVzn9CE

-----END NEW CERTIFICATE REQUEST-----

then goto
http://www.ssldirect.com/ssltools/decode/csr/decode_csr_certificate_signing_request.html

to verify if this is SHA1 now,

......

Public Key Information
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Exponent: 65537 (0x10001)

Attributes
None
 

CSR Signature

Signature Algorithm: sha1WithRSAEncryption 
(see it is SHA1 , instead of MD5)

If you do not add the -Z  SHA1 at the end, then it will be

Signature Algorithm: md5WithRSAEncryption  \*\*\* instead

Then you can submit this CSR (with SHA1) to a CA, e.g. Verisign to sign it.

After you install the new SSL certificate, you can see it ok.

e.g. I added the new SSL cert as "new dumpy cert1" below,

apple:/export/home/iws6.1sp7/alias> /export/home/iws6.1sp7/bin/https/admin/bin/certutil -L -d /export/home/iws6.1sp7/alias -P https-apple-apple-
1000year CT,,
myissuer Cu,Cu,Cu
Server-Cert u,u,u
new dumpy cert1 \*\*\* u,u,u

then I can examine the inside of this new SSL cert,

apple:/export/home/iws6.1sp7/alias> /export/home/iws6.1sp7/bin/https/admin/bin/certutil -L -n "new dumpy cert1" -d /export/home/iws6.1sp7/alias -P https-apple-apple-
Certificate:

Data:
Version: 3 (0x2)
Serial Number:
00:a7:a9:fa:ed:f9:50:f7:7d
Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption

or

apple:/export/home/iws6.1sp7/alias> /export/home/iws6.1sp7/bin/https/admin/bin/certutil -L -n "new dumpy cert1" -d /export/home/iws6.1sp7/alias -P https-apple-apple- | grep -i SHA
Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption
Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption
Fingerprint (SHA1):

see more at

http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html


how to disable directory listing in web 6.1SPx ?

If your security auditor said you need to disable the directory listing in your web 6.1SPx server, then you can do this in Admin GUI - Document Preferences - Directory Indexing - None. You can add an error response page too to send back when a request is asking for directory indexing.


The obj.conf will then look like below,


Service method="(GET|HEAD)" type="magnus-internal/directory" fn="send-error" path="/export/home/iws6.1sp9/docs/error.html"


then you can restart and take effect.


If you just comment out the default line below,


#Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"


Then the end-user will see a Method Not Allowed in the browser when they request a directory listing. They will not see the custom error page as above.







Friday May 15, 2009

web 6.1 SP11 64-bit download

If you need to use 64-bit web 6.1 SP11, you can download it at



https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJWS-6.1-SP11-OTH-G-F@CDS-CDS_SMI


This will allow you to use much more in memory address space.


e.g. for a 32-bit process, the theoretical max. memory per process = 4 GB,


a pmap will show,


vm40:/wlee/bits/tmp-web7.0u5> pmap 16908 | more
16908:  webservd -d /wlee/7.0u4/run/https-vm40.singapore.sun.com/config -r /wl
00010000       8K r-x--  /wlee/7.0u4/run/lib/webservd
00020000       8K rwx--  /wlee/7.0u4/run/lib/webservd
00022000      56K rwx--    [ heap ]
00030000    3904K rwx--    [ heap ]
00400000  167936K rwx--    [ heap ]
DB87A000       8K rwx-R    [ stack tid=285 ]


......(note the above address = 8 \* 4-byte each = 32-bit address)


but if we are running 64-bit, then the pmap will show,


vm40:/wlee> pmap 3799 | more
3799:   webservd -d /wlee/7.0u5-64/https-vm40.singapore.sun.com/config -r /wle
0000000100000000          8K r-x--  /wlee/7.0u5-64/lib/sparcv9/webservd
0000000100100000          8K rwx--  /wlee/7.0u5-64/lib/sparcv9/webservd
0000000100102000         56K rwx--    [ heap ]
0000000100110000       3008K rwx--    [ heap ]
0000000100400000     217088K rwx--    [ heap ]
FFFFFFFF3FCFA000          8K rw--R    [ stack tid=284 ]


......(note the above address = 16 \* 4-byte each = 64-bit address), so the theoretical max. memory per process = 16 TB, but of course limited by other factors, e.g. physical RAM and swap space, etc.


If you need more memory for your web server process (assume you do not have any memory leaks in your application, etc), then one option is to run 64-bit process.





web 6.1 Reverse Proxy Plug-in 1.0.2 is out !

Hi,


I just got the news that 


Reverse Proxy Plug-in 1.0.2 is
released for Sun Java System WebServer 6.1 SP11 is out , please try it at


https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJWS-6.1SP11-RPAddOn1.0.2-G-F@CDS-CDS_SMI

The Release Notes are here: http://docs.sun.com/app/docs/doc/820-7660

Proxy 4.0.10 is out !

This new version of proxy server was out on 5/5/2009. FYI.


It can be publicly downloaded at:
https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJPrxySrv-4.0.10-OTH-G-F@CDS-CDS_SMI

Release Notes:
http://docs.sun.com/app/docs/doc/820-7445

This has fixed different known issues and so good to try it.

Friday May 08, 2009

Web Server 6.1 SP11 is out now !

I just got the internal news that this latest version is released.


Download :


https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJWS-6.1-SP11-OTH-G-F@CDS-CDS_SMI


Release notes :


http://docs.sun.com/app/docs/doc/820-7659


Please try it out.

Tuesday Feb 10, 2009

Proxy Server 3.6 SP12 is out

I just got an email about this new version of Proxy 3.6.


However, please plan for an upgrade to Proxy 4.0 (SP9 is the latest now as of Feb , 2009).


email from our Sustaining manager,


"


Proxy Server 3.6 SP12 has been released:


https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJPrxySrv-3.6SP12-OTH-G-F@CDS-CDS_SMI

This URL is publicly accessible and can be given to customers waiting for it.


Release Notes:: Unix Platform:: http://docs.sun.com/source/820-5882/
Release Notes:: Windows Platform:: http://docs.sun.com/source/820-5883/


"



Walter

Friday Jan 16, 2009

How to disable other methods in web server 6 ?

Sometimes, if you like/need to disable other methods which you do not need in web 6.1SPx, then you can add this into default object inside obj.conf,

in 6.1 web (for 7.0, please see comments below by Meena), you need to add

<Client method=("INDEX"|"OPTIONS"|"DELETE"|"PUT"|"MOVE"|"TRACE"|"MKDIR"|"RMDIR")>
AuthTrans fn="set-variable" remove-headers="transfer-encoding"

set-headers="content-length: -1" error="501"
</Client>

(NOTE - all in ONE single line for <Client method ...> and AuthTrans... above!
You saw wrapping above because of formatting in tools/browsers !)

as below :

apple:/export/home/iws6.1sp10/https-methods/config> cat obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.

<Object name="default">
AuthTrans fn="match-browser" browser="\*MSIE\*" ssl-unclean-shutdown="true"
<Client method=("INDEX"|"OPTIONS"|"DELETE"|"PUT"|"MOVE"|"TRACE"|"INDEX"|"MKDIR"|"RMDIR")>
AuthTrans fn="set-variable" remove-headers="transfer-encoding"

set-headers="content-length: -1" error="501"
</Client>
....

then restart and will work ok.

2. tests:

a. INDEX :

apple:/export/home/iws6.1sp10/https-methods/config> telnet apple 60106
Trying 129.158.175.16...
Connected to apple.
Escape character is '\^]'.
INDEX / HTTP/1.1
Host: apple

HTTP/1.1 501 Not Implemented
Server: Sun-ONE-Web-Server/6.1
Date: Fri, 16 Jan 2009 05:56:34 GMT
Content-length: 148
Content-type: text/html
Connection: close

<HTML><HEAD><TITLE>Not Implemented</TITLE></HEAD>
<BODY><H1>Not Implemented</H1>
This server does not implement the requested method.
</BODY></HTML>Connection closed by foreign host.

b. OPTIONS :

apple:/export/home/iws6.1sp10/https-methods/config> telnet apple 60106
Trying 129.158.175.16...
Connected to apple.
Escape character is '\^]'.
OPTIONS /banner.html HTTP/1.1
Host: apple

HTTP/1.1 501 Not Implemented
Server: Sun-ONE-Web-Server/6.1
Date: Fri, 16 Jan 2009 05:56:58 GMT
Content-length: 148
Content-type: text/html
Connection: close

<HTML><HEAD><TITLE>Not Implemented</TITLE></HEAD>
<BODY><H1>Not Implemented</H1>
This server does not implement the requested method.
</BODY></HTML>Connection closed by foreign host.
apple:/export/home/iws6.1sp10/https-methods/config>

c. TRACE method:

apple:/export/home/iws6.1sp10/https-methods/config> telnet apple 60106
Trying 129.158.175.16...
Connected to apple.
Escape character is '\^]'.
TRACE /index.html HTTP/1.1
Host: apple
X-header: test

HTTP/1.1 501 Not Implemented
Server: Sun-ONE-Web-Server/6.1
Date: Fri, 16 Jan 2009 05:57:32 GMT
Content-length: 148
Content-type: text/html
Connection: close

<HTML><HEAD><TITLE>Not Implemented</TITLE></HEAD>
<BODY><H1>Not Implemented</H1>
This server does not implement the requested method.
</BODY></HTML>Connection closed by foreign host.
apple:/export/home/iws6.1sp10/https-methods/config>

3. Some may like to set up ACL, but there is still a chance for hackers to use above methods

if they discover the ACL uid/password.

So, if the above methods are not needed, then better disable them as above.

4. you can see a list of methods at

http://www.ietf.org/rfc/rfc2616.txt

e.g. section 9 Method Definitions

 


 

Friday Jan 02, 2009

Sun Java System Web Proxy Server 4.0.9 is out !

Hi, 


I just found that we have

Sun Java System Web Proxy Server 4.0.9 available now at:


https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=SJPrxySrv-4.0.9-OTH-G-F@CDS-CDS_SMI


docs can be found at:


http://docs.sun.com/app/docs/coll/1311.9?l=en


For patch versions, it is below:


1. Solaris: 120981-16


Sun Java System Web Proxy Server 4.0.9, Solaris (SVR4 patch): Maintenance Release Patch


2. x86: 120982-16


Sun Java System Web Proxy Server 4.0.9, _x86 (SVR4 patch): Maintenance Release Patch


3. Redhat: 120983-16


Sun Java System Web Proxy Server 4.0.9 RHEL3.0 :Maintenance Release Patch


Thursday Jan 01, 2009

how to bypass RPP and AM agent to get perfdump

Sometimes, you like to get perfdump (/.perf) from web or proxy servers, but the RPP or AM agent may prevent you from doing this. So, you can try below:


 1. follow the steps of perfdump at


http://docs.sun.com/app/docs/doc/820-5719/abyaq?l=en&a=view&q=perfdump


 2. if you got RPP in your web server, then


<Client match="none" uri="/.perf">

NameTrans fn="map" from="/" name="reverse-proxy-/" to="http:/"
</Client> 


then both perf dump and rpp will work ok.

The above will map rpp if uri not equal to /.perf, and will skip rpp
if uri is /.perf


So, both requests to rpp and .perf will work ok.

3. if you got AM agent in your proxy server, then


................ 


NameTrans fn="assign-name" name="stats-xml" from="(/stats-xml|/stats-xml/.\*)"
NameTrans fn="assign-name" name="statistics" from="/.abc/.statistics"
................


PathCheck fn="url-check"
<Client match="none" uri="/.abc(/.\*|)">
PathCheck fn="validate_session_policy"
</Client>

Service fn="deny-service"
AddLog fn="flex-log" name="access"
</Object>


.........


<Object name="stats-xml">
Service fn="stats-xml"
</Object>

<Object name="statistics">
Service fn="service-dump"
</Object>


 then a request to get the statistics will work ok without the AM agent Path Check .





Monday Dec 15, 2008

wevb 7.0 u4 is out now

Hi, 


I just got this from PM, Joe,


"I am delighted to announce that Web Server 7.0 Update 4 has been
released. It can be publicly downloaded at:


http://tinyurl.com/ws70u4

and will be showing up on the various download pages later today.


The Release Notes are here:
http://docs.sun.com/app/docs/doc/820-6373/gdutz?a=view

In addition to bug fixes and stability improvements (>40,
http://docs.sun.com/app/docs/doc/820-6373/ghyks?a=view ), this release
introduces better compatibility with CGI and FastCGI applications by
providing REQUEST_URI and SCRIPT_FILENAME variables, support for
default-sun-web.xml, and certification of OpenSolaris 2008.11 as a
supported platform.


All users of Web Server 7.0 through Web Server 7.0 Update 3 are
encourage to upgrade.


Thank you to the entire product team for another great release!


"


So, please download and try it.


I can see many resolved issues in this latest u4 release, at


http://docs.sun.com/app/docs/doc/820-6373/ghyjt?a=view

Friday Dec 12, 2008

Simple script to download or get perfdump output into a file for later analysis for web 6.1

Today, I found a need to run perfdump periodically in web server 6.1 SPx and download it into a single file with timestamps for later analysis. I can then check further on different number of performance numbers of this web server to see if any area to tune for better.


So, I followed the steps at 6.1 docs to enable perfdump,


http://docs.sun.com/app/docs/doc/820-5719/abyaq?l=en&a=view&q=perfdump


then I came across this great blog,


 http://blogs.sun.com/elving/entry/perfdump_in_7_0


which tells how to do it in web 7 easily.


Inside, I also saw,


" (echo "GET /.perf";sleep 1 ) | telnet www.mysite.com 80  "


by
"Posted by
ttalex

on October 20, 2006 at 02:33 AM PDT" 



So,  I wrote up a simple script to try,


 APPLE:/export/home0/case/7041xxxx-yyy-p1> cat get-perf-2s.ksh
#/usr/bin/ksh
while [ 1 ]
do
# 1st to print date timestamp
echo "=====================next perf dump======================="
date
# 2nd to get .perf
(echo "GET /.perf";sleep 1 ) | telnet apple.asia.sun.com 60103
# 3rd sleep 2s
sleep 2
done


Then, I chmod a+x and then


./get-perf-2s.ksh >> perf.txt


and control-c to stop it after a while,


then  > cat perf.txt
=====================next perf dump=======================
Fri Dec 12 15:06:33 CST 2008
Trying 129.158.175.16...
Connected to apple.
Escape character is '\^]'.
webservd pid: 19065

Sun ONE Web Server 6.1SP10 B09/04/2008 10:03 (SunOS DOMESTIC)

Server started Fri Dec 12 14:39:20 2008
Process 19065 started Fri Dec 12 14:39:20 2008

ConnectionQueue:
-----------------------------------------
Current/Peak/Limit Queue Length            0/1/4096
Total Connections Queued                   95
Average Queue Length (1, 5, 15 minutes)    0.00, 0.00, 0.00
Average Queueing Delay                     0.13 milliseconds

ListenSocket ls1:
------------------------
Address                   http://0.0.0.0:60103
Acceptor Threads          1
Default Virtual Server    https-sess

ListenSocket ls2:
------------------------
Address                   http://129.158.175.16:60104
Acceptor Threads          1
Default Virtual Server    land-vs1

KeepAliveInfo:
--------------------
KeepAliveCount        0/256
KeepAliveHits         7
KeepAliveFlushes      0
KeepAliveRefusals     0
KeepAliveTimeouts     3
KeepAliveTimeout      30 seconds

SessionCreationInfo:
------------------------
Active Sessions           1
Keep-Alive Sessions       0
Total Sessions Created    48/128

CacheInfo:
------------------
enabled             yes
CacheEntries        8/1024
Hit Ratio           108/214 ( 50.47%)
Maximum Age         30

Native pools:
----------------------------
NativePool:
Idle/Peak/Limit               1/1/128
Work Queue Length/Peak/Limit  0/0/0

Server DNS cache disabled

Async DNS disabled

Performance Counters:
------------------------------------------------
                           Average         Total      Percent

Total number of requests:                    101
Request processing time:    0.0019        0.1919

default-bucket (Default bucket)
Number of Requests:                          101    (100.00%)
Number of Invocations:                      1307    (100.00%)
Latency:                    0.0003        0.0272    ( 14.18%)
Function Processing Time:   0.0016        0.1647    ( 85.82%)
Total Response Time:        0.0019        0.1919    (100.00%)

Sessions:
----------------------------
Process  Status     Function

19065    response   service-dump
=====================next perf dump=======================
Fri Dec 12 15:06:36 CST 2008
Trying 129.158.175.16...
Connected to apple.
Escape character is '\^]'.
webservd pid: 19065

Sun ONE Web Server 6.1SP10 B09/04/2008 10:03 (SunOS DOMESTIC)

Server started Fri Dec 12 14:39:20 2008
Process 19065 started Fri Dec 12 14:39:20 2008

ConnectionQueue:
-----------------------------------------
Current/Peak/Limit Queue Length            0/1/4096
Total Connections Queued                   96
Average Queue Length (1, 5, 15 minutes)    0.00, 0.00, 0.00
Average Queueing Delay                     0.13 milliseconds

................. repeated itself................


======================================


 So, hope this simple script can help capture the perfdump in web 6.1 .


However, it is still best to upgrade to web 7 to use the CLI there for perfdump (it will work in web 7 even when the webservd process hung, but not in web 6.1). Another good reason to upgraded to web 7.



Wednesday Dec 10, 2008

Using the new wshang.ksh version 3.1

I just downloaded the new  wshang.ksh version 3.1 and tried it. Go to  the download location.

http://www.sun.com/bigadmin/jsp/descFile.jsp?url=descAll/sun_gdd_wshang_vers

(Note: above url is not valid any more. Please download it from My Oracle Support (MOS) site from note: Doc ID 1325651.1 - Download Location For Wshang Script - Gather Debug Data Script For Troubleshooting Oracle iPlanet Web Server or Oracle iPlanet Web Proxy Server Hangs.)

It is very easy to use.

After I downloaded and gunzipped it, I just ran it,

 APPLE:/export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3> ./wshang.ksh
./wshang.ksh[65]: date+%y%m%d%HH%MM%SS:  not found

 This script collects 3 snapshots of the following information
 at a 15 seconds interval against a web server process:
        pstack
        pfiles
        prstat -L -a (will try 'top' on pre-Solaris 8 systems)
        pflags
        pmap -x
        pldd
        netstat -an
 And collections 30 seconds of:
        truss -feald -vall -wall -rall

Data will be collected to the location /tmp/wshang by default.
Data location should have enough disk space for large core files.
Would you like to specify a different directory for data?
(y/n)


Specify a directory:
/export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data


The following is a list of web server processes:

Solaris 8 or greater
Web Server 7.0/6.1 processes
    364   webservd -r /export/home/iws6.1sp2 -d /export/home/iws6.1sp2/https-ap
    11478 webservd -r /export/home0/case/11330103-admin-gu/61sp10 -d /export/ho
    11640 webservd -d /export/home0/case/11330103-admin-gu/70u3/https-APPLE.low
    12091 webservd -d /export/home/iws7.0u3/admin-server/config -r /export/home
    12742 webservd -r /export/home0/case/11315437-web-session/FVB/run -d /expor
    12814 webservd -r /export/home0/case/11315437-web-session/FVB/run -d /expor
    12860 webservd -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/https-
    12919 webservd -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/https-
    13879 webservd -d /export/home/iws7.0u3/https-java-mon/config -r /export/ho
    13573 webservd -d /export/home/iws7.0u3/https-apple.asia.sun.com/config -r
    15402 webservd -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/https-
    15497 webservd -d /export/home0/case/11330103-admin-gu/70u3-2/admin-server/
Web Server 6.0 processes
Proxy Server 4.0 processes
    14065 proxyd -r /export/home/ips4.0sp8 -d /export/home/ips4.0sp8/proxy-acl/
    15527 proxyd -r /export/home/ips4.0sp7 -d /export/home/ips4.0sp7/proxy-adms
    15867 proxyd -r /export/home/ips4.0sp7 -d /export/home/ips4.0sp7/proxy-rpp/


Enter the PID of the web server process to collect data on
(Note that the correct PID for child webservd/ns-httpd process will not be listed correctly here if you have MaxProcs > 1 in your magnus.conf):
12919

(this is already the needed worker process pid from my ptree outputs,

APPLE:/export/home0> ptree 12919
12893 ./webservd-wdog -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/htt
  12918 webservd -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/https-se
    12919 webservd -r /export/home/iws6.1sp10 -d /export/home/iws6.1sp10/https-

)


   PID TTY      TIME CMD
 12919 ?        1:41 webservd


Gathering data now...

Loop 1 for 15 seconds...

collecting pflags...
collecting pmap -x...
collecting pldd...
collecting prstat -L -a...
collecting pstack...
collecting pfiles...
collecting netstat...

Loop 2 for 15 seconds...

collecting pflags...
collecting pmap -x...
collecting pldd...
collecting prstat -L -a...
collecting pstack...
collecting pfiles...
collecting netstat...

Loop 3 for 15 seconds...

collecting pflags...
collecting pmap -x...
collecting pldd...
collecting prstat -L -a...
collecting pstack...
collecting pfiles...
collecting netstat...

collecting 30 seconds of truss...
done

Collecting gcore...
gcore: /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/gcore.out.12919 dumped
/export/home/iws6.1sp10/bin/https/bin/webservd
\* ----------------------------------------------------------------------------------
\* Sun Microsystems RSD pkgapp 3.0 Solaris                               [12/10/2008]
\* ----------------------------------------------------------------------------------
\* OS release                            [5.8]
\* Platform                              [SUNW,Sun-Blade-1000]
\* Checking [-c] is a core or pid        [using pid 12919]
\* Process Root                          [/export/home/iws6.1sp10/https-sess/config]
\* Databin parameter [-s] checks         [reset to /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3]
\* Creating Databin directories          [/export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/pkgapp_data]
\* Databin used/created is               [/export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/pkgapp_data/pkgapp-121008-01]
\* Creating temp area                    [/tmp/pkgapp.16081/]
\* Pid used, no corefile to check
\* Process binary                        [webservd]
\* Checking usage history                [not recently run]
\* webservd binary bit version           [32]
\* Checking path [-p] to binary name     [failed, path includes binary name]
\* Resetting path [-p] parameter         [/export/home/iws6.1sp10/bin/https/bin]
\* Checking path [-p] is a directory     [success]
\* Locating webservd                     [success]
\* Checking located webservd is 32 bit   [success]
\* Binary located                        [/export/home/iws6.1sp10/bin/https/bin/webservd]
\* Adding binary to pkgapp.pldd          [success]
\* Grabbing pldd                         [success]
\* Grabbing pstack                       [success]
\* Grabbing pmap                         [success]
\* Grabbing pcred                        [success]
\* Grabbing pflags                       [success]
\* Grabbing pargs                        ./pkgapp[103]: /usr/bin/pargs:  not found
[failed]
./pkgapp[110]: /usr/bin/pargs:  not found
\* Not Including the core/gcore
\* Javatools [-j] not set                [skipped]
\* Grabbing /var/adm/messages            [success]
\* Grabbing uname -a                     [success]
\* Grabbing date/time                    [success]
\* Grabbing showrev -p                   [success]
\* Grabbing pkginfo -l                   [success]
\* Grabbing /etc/release                 [success]
\* Grabbing coreadm                      [success]
\* Grabbing ulimit                       [success]
\* Grabbing libs                         [success]
\* Making lib paths app/                 [success]
\* Making lib paths libs/                [success]
\* Linking libraries                     [success]
\* Libraries linked                      [101 ttl]
\*
\* Using hostid for naming .tar.gz       [83450f78]
\* Writing file                          [pkgapp-83450f78-APPLE-081210-145852.tar.gz]
\*
\* Done gathering files
\* Writing dbxrc & opencore.sh files     [success]
\* Writing manifest-081210-145852.log    [success]
\* Writing pkgapp-args-081210-145852     [success]
\* Creating final tarfile                [success]
\* Compressing tarfile                   [success]
\* End of runtime logging
\* Saving history info                   [/var/tmp/pkgapp-history/history-081210-145852.log]
\* Saving runtime log                    [/var/tmp/pkgapp-history/runtime-081210-145852.log]
\* Removing [-r] temp area/files         [left alone]
\*
\* Operations Complete
----------------------------------------------------------------------------------
Upload the following file(s) to your supportfiles.sun.com Cores Directory at Sun

1) File(s) located in directory /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/pkgapp_data/pkgapp-121008-01

                [ pkgapp-83450f78-APPLE-081210-145852.tar.gz ]



                                Thank you.
                                Sun Software Technology Service Center (STSC)


NOTES:
1) You can check for updates to this script here:
        BigAdmin - http://www.sun.com/bigadmin/scripts/indexSjs.html
2) Release Notes and Guides located here:
        Docs - http://docs.sun.com/app/docs/doc/820-0437
3) GDD information located here:
        Docs - http://www.sun.com/service/gdd/index.xml

4) Please send all Bugs and RFE's to the following address:
        Subject "pkgapp bug/rfe" - gdd-issue-tracker@sun.com

5) Please send all other questions etc to:
        Subject "pkgapp feedback" - gdd-feedback@sun.com


Creating a tar file of the results...
a gcore.out.12919 70628K
a gcore_pldd.out 3K
a gcore_pmap.out 14K
a gcore_pstack.out 71K
a netstat.out.1 30K
a netstat.out.2 30K
a netstat.out.3 30K
a pfiles.out.1 4K
a pfiles.out.2 4K
a pfiles.out.3 4K
a pflags.out.1 8K
a pflags.out.2 8K
a pflags.out.3 8K
a pkgapp_data/ 0K
a pkgapp_data/pkgapp-121008-01/ 0K
a pkgapp_data/pkgapp-121008-01/pkgapp-83450f78-APPLE-081210-145852.tar.gz 14849K
a pldd.out.1 3K
a pldd.out.2 3K
a pldd.out.3 3K
a pmap.out.1 20K
a pmap.out.2 20K
a pmap.out.3 20K
a prstat.out.1 2K
a prstat.out.2 2K
a prstat.out.3 2K
a pstack.out.1 71K
a pstack.out.2 71K
a pstack.out.3 71K
a release.out 1K
a showrev.out 70K
a truss.out 37K
a ulimit 1K
a uname.out 1K

The tar file has been created....

Please send the file /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/11111111-gdd-wshang-.tar.gz to
Sun Microsystems at https://supportfiles.sun.com/upload
Choose cores as the destination.


Then, I checked my output dir,

 APPLE:/export/home0> ls -l /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/
total 193098
-rw-rw-rw-   1 root     other    25833674 Dec 10 15:00 11111111-gdd-wshang-.tar.gz
-rw-rw-rw-   1 root     other    72322796 Dec 10 14:58 gcore.out.12919
-rw-rw-rw-   1 root     other       2684 Dec 10 14:58 gcore_pldd.out
-rw-rw-rw-   1 root     other      14161 Dec 10 14:58 gcore_pmap.out
-rw-rw-rw-   1 root     other      72266 Dec 10 14:58 gcore_pstack.out
-rw-rw-rw-   1 root     other      30577 Dec 10 14:57 netstat.out.1
-rw-rw-rw-   1 root     other      30577 Dec 10 14:58 netstat.out.2
-rw-rw-rw-   1 root     other      30421 Dec 10 14:58 netstat.out.3
-rw-rw-rw-   1 root     other       3572 Dec 10 14:57 pfiles.out.1
-rw-rw-rw-   1 root     other       3572 Dec 10 14:58 pfiles.out.2
-rw-rw-rw-   1 root     other       3572 Dec 10 14:58 pfiles.out.3
-rw-rw-rw-   1 root     other       8143 Dec 10 14:57 pflags.out.1
-rw-rw-rw-   1 root     other       8143 Dec 10 14:58 pflags.out.2
-rw-rw-rw-   1 root     other       8143 Dec 10 14:58 pflags.out.3
drwxrwxrwx   3 root     other        512 Dec 10 14:58 pkgapp_data
-rw-rw-rw-   1 root     other       2651 Dec 10 14:57 pldd.out.1
-rw-rw-rw-   1 root     other       2651 Dec 10 14:58 pldd.out.2
-rw-rw-rw-   1 root     other       2651 Dec 10 14:58 pldd.out.3
-rw-rw-rw-   1 root     other      19535 Dec 10 14:57 pmap.out.1
-rw-rw-rw-   1 root     other      19535 Dec 10 14:58 pmap.out.2
-rw-rw-rw-   1 root     other      19535 Dec 10 14:58 pmap.out.3
-rw-rw-rw-   1 root     other       1388 Dec 10 14:57 prstat.out.1
-rw-rw-rw-   1 root     other       1390 Dec 10 14:58 prstat.out.2
-rw-rw-rw-   1 root     other       1392 Dec 10 14:58 prstat.out.3
-rw-rw-rw-   1 root     other      72231 Dec 10 14:57 pstack.out.1
-rw-rw-rw-   1 root     other      72235 Dec 10 14:58 pstack.out.2
-rw-rw-rw-   1 root     other      72233 Dec 10 14:58 pstack.out.3
-rw-rw-rw-   1 root     other        184 Dec 10 15:00 release.out
-rw-rw-rw-   1 root     other      71631 Dec 10 15:00 showrev.out
-rw-rw-rw-   1 root     other      37856 Dec 10 14:58 truss.out
-rw-rw-rw-   1 root     other        206 Dec 10 15:00 ulimit
-rw-rw-rw-   1 root     other         66 Dec 10 15:00 uname.out

Then it is all done and just need to do this ,

"Please send the file /export/home/bits/iws/misc/SUN-GDD-webserver-wshang-solaris-v3/data/11111111-gdd-wshang-.tar.gz to
Sun Microsystems at https://supportfiles.sun.com/upload
Choose cores as the destination.

NOTE : Make sure you rename the above xxx.tar.gz  so that your case SR# is part of the filename,

e.g. 71234567-customer_name-wshang-.tar.gz.

This will ensure the uploaded file will be moved to the right location for your case SR#.

Sun support engineers can then find the uploaded file easily.

About

Wing-Yip Walter Lee

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today