Release
Notes for Sun Java System Web Proxy Server
These release notes contain important information available at the time
of the release of the Sun JavaTM System Web Proxy Server
4.0.6 product, hereafter referred to as Proxy Server 4.0.6 or just proxy server.
Platform summary and known problems are addressed here. Please read this document
and associated documents before you begin using the Sun product.
This document contains the following sections:
Enhancements in Sun Java System Web Proxy Server
Releases
The following enhancements have been made in recent releases of Proxy
Server:
Internet Protocol Version 6 (IPv6) Support
You can connect to an IPv6 enabled website through the Proxy Server
4.0.6. Proxy server also supports ftp extension for ipv6
in default (passive) mode.
NSS 3.11.7 and NSPR 4.6.4 Support
Proxy Server 4.0.6
supports Network Security Services (NSS) 3.11.7 and Netscape Portable Runtime (NSPR)
4.6.4.
Upgrade Support
From Proxy Server 4.0.2 release, the installer supports the upgrade
of an existing Proxy Server 4.0 installation to the later version. For the
Java Enterprise System installations of Proxy Server 4.0.1, you need to install
the patches that correspond to the later release.
Modified FTP Transfer Mode
This version of Proxy introduces the support for Extended Passive (EPSV)
mode instead of Passive Mode only (as per RFC 2428).
Enhanced Hardware Accelerator Encryption Support
Proxy Server 4.0.6
provides hardware accelerator support for SunTM Crypto
Accelerator 6000, a cryptographic
accelerator board that enhances the performance of SSL on the Proxy Server.
Platform Summary
This section provides information about the supported platform components
for Proxy Server 4.0.6
This section includes the following topics:
Platform Requirements
The following table summarizes the Proxy Server 4.0.6 platform requirements.
Table 1 Platform Requirements for Proxy Server 4.0.6
|
Operating System
|
Minimum Memory
|
Recommended Memory
|
Recommended Disk Space*
|
|
Sun SolarisTM 8 for
SPARC®
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Sun Solaris 9 for SPARC
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Sun Solaris 10 for SPARC
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Sun Solaris 9 for x86
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Sun Solaris 10 for AMD OpteronTM
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Red Hat Enterprise Linux Advanced Server 3 Update 4
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Red Hat Enterprise Linux Advanced Server 4 Update 2
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Microsoft Windows 2000 Server Service Pack 4
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Microsoft Windows 2000 Advanced Server
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
Microsoft Windows 2003 Enterprise Edition
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
|
HP-UX 11i (11.11)
|
256 Mbytes
|
512 Mbytes or higher
|
512 Mbytes or higher
|
* Depends on cache capacity setting. The default cache capacity setting
is 2 Gbytes.
Please take needed action to move or migrate your Web Proxy Servers
to a supported operating system.
Supported Browsers
The following table lists the browsers that are supported with Proxy
Server 4.0.6.
Table 2 Supported Browsers for Proxy Server 4.0.6
|
Browser
|
Version
|
|
Microsoft Internet Explorer
|
6.0, 7.0
|
|
NetscapeTM Navigator
|
7.1, 7.2
|
|
MozillaTM
|
1.4.1, 1.7.2
|
Your browser needs to have Java enabled.
Hardware and Software Requirements
In addition to the UNIX operating system memory and disk space requirements
listed in Platform Requirements, your system
must also have adequate swap space:
Required Patches
It is recommended that you update your operating system with the latest
applicable patches. Required patches are listed by platform.
Solaris Patches
The following is the required patch level for Proxy Server 4.0.6 in
Solaris SPARC and x86.
Solaris 8 (SPARC)
Solaris 9 (SPARC)
Solaris 9 (x86)
Solaris 10 (SPARC)
NOT REQUIRED
Solaris 10 (x86)
Linux Patches
The following is the required patch level for Proxy Server 4.0.6 in
Linux.
Red Hat Enterprise Linux Advanced Server 3
Red Hat Enterprise Linux Advanced Server 4
HP-UX Patches
-
HP-UX 11i Operating Environment Component B.11.11.0412
-
Required patch bundle for 11i, June 2003B.11.11.0306.1
-
Gold Base patches for HP-UX 11i, December 2006–B.11.11.0612.459
-
Gold Application patches for HP-UX 11i, December 2006–B.11.11.0612.459
-
Pthread enhancement and fixes-PHCO_29109
-
Pthread.h fix and new enhancement-PHCO_27633
-
libc manpage cumulative patch-PHCO_29328
-
libc cumulative patch-PHCO_29495
-
Java Out-of-Box-JAVAOOB, 1.0.00.02
The Java Out-of-Box tool is used to configure the necessary kernel tunable
parameters. Use of this tool is the recommended method for modifying kernel
values. If necessary, modify the following tunable parameters to reflect a
value equal to or greater than the following:
-
nkthreads— 3635
-
maxfiles–60
-
maxfiles_lim–1024
-
max_thread_proc–512
-
maxswapchunks–2048
-
nfile4–136
-
ncallout–3651
-
nproc–2068

Caution –
Modifying the kernel tunable parameters can have adverse impacts
on your system. Do not modify the parameters unless you fully understand what
you are doing.
Impact of US DST Changes 2007
Daylight Savings Time (DST) starts in USA from the 2nd Sunday of March
and ends on the 1st Sunday of November. This impacts the date and time rules
of the Operating System.
To make sure that the log files contain the correct time in US time
zones, and that the Administration Server is not impacted by this change,
Sun recommends you to do the following:
-
Download and install the appropriate Operating System patches.
You can download the Solaris patches from: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1
For other platforms, download similar DST
compatible patches from the respective Operating System vendor's web sites.
-
For Solaris, Windows, and Linux, run proxy server with JRE
1.4.2_13. For HP-UX, run proxy server with JRE 1.4.2.12.
Accessing the Documentation
The Sun Java System Web Proxy Server 4.0.6 documentation is provided
in a number of ways:
-
Manuals – You can view the Proxy Server 4.0.6 manuals
and release notes in HTML and in printable PDF formats.
-
Online help – Click the Help button in the graphical
interface to launch a context-sensitive help window.
Accessibility Features for People With Disabilities
To obtain accessibility features that have been released since the publishing
of this media, consult Section 508 product assessments available from Sun
upon request to determine which versions are best suited for deploying accessible
solutions. Updated versions of applications can be found at: http://sun.com/software/javaenterprisesystem/get.html.
For information on Sun’s commitment to accessibility, visit http://sun.com/access.
Resolved Issues
This section lists the most important issues fixed in the following
releases:
Issues Resolved in 4.0.6
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.6
Table 3 Issues Resolved in Sun Java System Web
Proxy Server 4.0.6
|
ID
|
Summary
|
|
6224535
|
Timeout
functionality does not work.
|
|
6460215
|
Can
not connect to an IPv6 enabled website when connecting through proxy server.
|
|
6478413
|
Uninstalling
a proxy server instance does not result in the removal of the files corresponding
to the instance from the alias and httpacl directories.
|
|
6494418
|
block-multipart-posts
doesn't block the request when content-type parameter is set.
|
|
6505578
|
sockd daemon can run out of worker threads when processing UDP associated
requests.
|
|
6513846
|
Proxy
Server 4.0.6 documents are updated to remove reference to HTTPS caching.
|
|
6514870
|
Removing
a template through the Remove Template option does not remove all the assignments
for that template.
|
|
6520593
|
A
new section “Precedence of Regular Expressions Over Templates in Set
Cache Configuration” is added to chapter 16 in the Proxy Server 4.0.6 Administration Guide to explain why templates used within Set
Configuration do not work but manually entered regular expressions do.
|
|
6526659
|
Incorrect
server start command is displayed in the installer.
|
|
6529376
|
The
default cache size for proxy server on Windows is 100 MBytes but the help
page states that it is 1.6 GBytes.
|
|
6530476
|
The
path to the libjvm.sl file in the start script is not
set correctly.
|
|
6534717
|
When cache-status is enabled in access log, the access logs repeatedly
show cache file as written and deleted for request headers that have cache-control set to no-cache.
|
|
6537346
|
Log
entries show cache status as written , even when cache file is not created.
|
|
6538613
|
cachegc dumps core if the proxy instance's cache directory has been
modified.
|
|
6541327
|
cachegc sometimes works incorrectly.
|
|
6545753
|
Error
log shows a confusing error message when the proxy server encounters an invalid
request line.
|
|
6546256
|
On
Windows, a regular expression is not registered correctly in obj.conf .
|
|
6546720
|
Cannot
connect to certain sites when DNS cache is enabled.
|
|
6547808
|
On
Windows, the watchdog process crashes when the proxy instance
is stopped through the service manager.
|
|
6559837
|
Proxy
server crashes while handling an ftp request.
|
|
6560432
|
The
Proxy Server 4.0.6 Administration Guide and the online
help are updated to include description for Source Port Number.
|
|
6562122
|
For
a SSL proxy instance an incorrect password entry does not get written to the
errors file.
|
|
6562165
|
Proxy
Server 4.0.6 Administration Guide is updated to remove
references to the file cache functionality.
|
|
6562585
|
Proxy
Server 4.0.6 Release Notes is updated to provide the
correct version number for NSPR.
|
|
6563262
|
During ftp access some error log messages are noticed that convey no information
and can be confusing.
|
|
6564435
|
Details
of the Cache Section Table on the administration interface are not displayed
correctly.
|
|
6565004
|
Proxy
Server 4.0.6 Release Notes is updated to provide correct
link to the Proxy Server documentation page.
|
|
6565021
|
Internal
log rotation rotates the files twice if the system time is changed between
two scheduled rotations.
|
|
6565436
|
The
section "Disabling the Forward Proxying feature in a Reverse Proxy Setup"
under "Setting Up a Reverse Proxy" in Chapter 14 of the Proxy Server 4.0.6 Administration Guide is updated to add information about how to
prevent a security vulnerability in a reverse proxy server configuration.
|
|
6566246
|
Cross
site scripting vulnerability in the View Error Log functionality.
|
|
6566309
|
Cross
site scripting vulnerability in the View URL Database functionality.
|
|
6566352
|
Cannot
connect to an IPv6 ftp server through proxy server.
|
|
6566822
|
HTTP
headers with a very long value can cause memory corruption in proxy server.
|
|
6566836
|
flexanlg dumps core.
|
|
6566889
|
After
setting a value for Processes in the Configure System Preferences page , the
value can not be changed back to null.
|
|
6566924
|
Help
page is updated to provide a clearer explanation for Processes in the Configure
System Preferences page.
|
|
6568534
|
Reference
to Proxy Server 3.6 documentation issue is removed from Proxy Server 4.0.6 Release Notes.
|
|
6569516
|
Proxy
Server accepts and forwards responses whose header names contain spaces.
|
|
6572128
|
Localized
online help is updated to provide the correct context sensitive help page.
|
|
6572138
|
The
access log does not include certain connection related information.
|
|
6574401
|
Proxy
Server supported browsers to be enhanced to include Internet Explorer (IE)
v7
|
|
6576044
|
Proxy
Server 4.0.6 Configuration File Reference is updated
to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT.
|
|
6576050
|
Proxy
Server 4.0.6 Online Help is updated to specify the effect of HTTP client's
retry functionality.
|
|
6576065
|
Proxy
Server 4.0.6 Online Help is updated to make it consistent with Sun's style
guidelines and proxy server's product user interface.
|
|
6577128
|
Proxy
server support to be extended for Sun Crypto Accelerator 6000.
|
|
6578024
|
LDAP
connection failure errors.
|
|
6578560
|
In
the message that proxy server displays after an upgrade to indicate how you
can access the administration server, the server name and port name are indicated
as null (http://null:null).
|
|
6579049
|
Proxy
server creates an incorrect partition which causes errors during startup.
|
|
6579781
|
An
empty host-regex argument in the virt-map directive
results in proxy server crash.
|
|
6581350
|
Proxy
server installation contains debug JDK binaries.
|
|
6584989
|
In
the Version window, the label is not located in the center of the Close button
when the browser is IE 7.
|
|
6594191
|
Localized
Online Help has to be integrated to Proxy Server 4.0.6.
|
Issues resolved in 4.0.5
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.5
Table 4 Issues Resolved in Sun Java System Web
Proxy Server 4.0.5
|
ID
|
Summary
|
|
6240773
|
Deleting listen socket and restarting the server does not clear the
port.
|
|
6390867
|
On Windows, cv.exe fails when you try to view the
information for a cached csv file.
|
|
6391439
|
Clearing the Enable DNS subdomains option in the administration interface
does not remove the line DNS fn="dns-config" local-domain-levels="0" from
the obj.conf file.
|
|
6413536
|
webservd must be used as the default user and not nobody.
|
|
6463455
|
Proxy server 4.0.5 Release Notes is updated to
state the version of Sun Crypto Accelerator that supports the proxy server.
|
|
6466910
|
Proxy Server 4.0.5 Administration Guide is updated
to describe the procedure to set up Sun Crypto Accelerator to work with proxy
server.
|
|
6482102
|
Files cannot be retrieved from certain FTP sites through web browsers
when connecting through the proxy server.
|
|
6500200
|
Expired page is not displayed in the administration interface.
|
|
6500224
|
FTP through SOCKS routing does not work.
|
|
6500232
|
Proxy Server 4.0.5 Online Help is updated to mention Cache in the help
page for the Monitoring Server Status page.
|
|
6500547
|
FTP through SOCKS routing occasionally results in file corruption.
|
|
6506550
|
Proxy server can crash due to null pointer access in caching subsystem.
|
|
6513846
|
Proxy Server 4.0.5 Release Notes is updated to state that proxy server
does not support HTTPS caching.
|
|
6517969
|
Processing of obj.conf and ACL does not work as
expected.
|
|
6520629
|
Configure Virtual Multihosting page in the administration interface
does not allow user port number in host-regex.
|
|
6521610
|
When the Set Cache Specifics page in the administration interface is
used to enable cache, it does not remove "cache-disable" line
in the obj.conf file.
|
|
6523139
|
Proxy server debug build does not log all the information, such as disconnects.
|
|
6524253
|
Proxy server watchdog core dump.
|
|
6524898
|
When the cache structure is created by cbuild.exe,
the .sects file in the cache becomes empty after the
instance starts up.
|
|
6525294
|
The flexanlg utility dumps core if there are any
syntax problems in the log file.
|
|
6526297
|
The Manage Section page in the proxy server administration interface
lists all the sections of all the partitions, and offers a way to move sections
from one partition to another. This feature does not work correctly.
|
|
6526354
|
When a new Partition is added, one section is gets created.
|
|
6526964
|
SOCKS v5 server disconnects sessions unexpectedly.
|
|
6526990
|
The localized versions of Proxy Server 4.0.4 Online Help have a link
that does not work properly.
|
|
6527840
|
Shutting down the SOCKS server using the administration interface results
in a different message compared to the message that is displayed while starting
up.
|
|
6528069
|
Though the maximum cache partitions possible in proxy server is 32,
there is a problem in creating 32 partitions in Proxy Server 4.0.3.
|
|
6529305
|
When using Virtual Multihosting, if you define the host in upper case,
it does not work.
|
|
6534208
|
Version string has to be changed for the 4.0.5 release.
|
|
6537410
|
Proxy server sometimes waits to receive a new http request until the
web server closes the connection.
|
|
6537736
|
Proxy server has a domain buffer overflow vulnerability. The problem
specifically exists in the handling of domain name address types within the sockd daemon.
|
|
6537745
|
Proxy server has a domain buffer overflow vulnerability. The problem
specifically exists in the s5auth_userpass() function within
the sockd daemon.
|
|
6538060
|
The startsvr and stopsvr scripts
of proxy administration server refer to proxy-admserv404 instead
of proxy-admserv405.
|
|
6538173
|
On HP-UX, the administration server displays an error page when you
try to add a listen socket to a proxy instance.
|
|
6539318
|
On Linux, the utility cbuild does not work.
|
|
6539689
|
On Linux, if the group ID 80 already exists, proxy server installation
does not work and the installation failure does not result in proper installation
log.
|
|
6544263
|
Localized versions of the Proxy Server 4.0.5 Online Help must be updated
with the changes made to the English version of the Online Help.
|
|
6545267
|
Proxy Server 4.0.5 Configuration File Reference is
updated with information about log parameters.
|
Issues resolved in 4.0.4
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.4
Table 5 Issues Resolved in Sun Java System Web
Proxy Server 4.0.4
|
ID
|
Summary
|
|
4973509
|
Cache-Control directive for private/no-cache headers
is not supported for multiple values.
|
|
4973523
|
HEAD requests are not cached.
|
|
4973652
|
Proxy server does not support 65536–byte long URIs.
|
|
4999184
|
When proxy server is configured in reverse proxy mode pointing to a
web server, the error message displayed when the web server is down should
not mention that it is a proxy sever.
|
|
5093104
|
Proxy server administration interface allows trailing white space for
a HTTP header in client IP forwarding.
|
|
6208895
|
An FTP request through the proxy server to a Microsoft IIS FTP server
does not work.
|
|
6214329
|
Error in error log for HTTP4352:zlib internal error.
|
|
6233086
|
For client credentials forwarding with multi-byte user name, validation
check needs to be added.
|
|
6243358
|
A deleted user still appears as part of a group.
|
|
6245972
|
User's permission set through the Administer Access Control page does
not get implemented.
|
|
6246562
|
Controlling a set of servers installed on different locales and platforms
through clusters fails when stopping the set of servers.
|
|
6253844
|
There is no support for “zh-cn” for proxy server online
help.
|
|
6255761
|
There is no content at the Installer Help page.
|
|
6255838
|
When a proxy server instance is removed without stopping the SOCKS server
and a new instance is created, you will not be able to start the SOCKS server
on the new instance as the port would be in use.
|
|
6256442
|
The installer displays the error message "Password should be at least
8 characters" only in English.
|
|
6266497
|
Administration interface allows duplicate port numbers in the Add Server
page.
|
|
6268356
|
On Windows, SNMP service does not work if libnspr4.dll is
not present in the system32 directory.
|
|
6274424
|
On Windows, the value for defaultInstallDirectory in the state file
is wrong. The default installation directory in the installer is c:\sun\ProxyServer40, but the state file generated when you use the command setup
--savestate does not have c:\sun\ProxyServer40 as
the default installation directory. The state file displays the UNIX template
value as the default installation directory.
|
|
6304981
|
Proxy server installation fails on Linux if ksh is not installed on
the machine.
|
|
6310283
|
In the proxy server administration interface, sometimes the tabs display
incorrect page content.
|
|
6312087
|
Localized online help is not context sensitive.
|
|
6313904
|
The administration server does not allow you to set a listen socket
with a port number that is used for another IP address.
|
|
6321797
|
Proxy Server 4.0.3 Configuration File Reference is
updated with information for the flex-init parameter no-format-str.access.
|
|
6331035
|
Load balancing feature works only for regular expressions.
|
|
6333355
|
When the ACL caching is enabled, the user/group definition in the ACL
has to exactly match the case of the LDAP entry for the ACL caching to happen.
|
|
6337657
|
Proxy server displaying Internal Server Error message when the configuration
of Distributed Administration is attempted.
|
|
6369549
|
Proxy patch installation on JavaES 5 results in some errors on Linux.
|
|
6371618
|
Can not change Compression Level to NONE. Documentation
should state what to select as the compression level.
|
|
6380736
|
Control does not transfer to Schedule GC page when Explicit GC is selected
in the Set GC Preferences page.
|
|
6382393
|
Proxy server is unable to perform FTP uploads.
|
|
6382692
|
During migration, the format string Req->vars.pauth-user in
the 3.6 obj.conf should be changed to Req->vars.auth-user .
|
|
6383320
|
Cannot remove cache file when contents file name has space or Japanese
characters.
|
|
6383435
|
sockd process uses high memory on Linux .
|
|
6387166
|
View Server Settings page in the proxy server administration interface
does not display MaxProcs value.
|
|
6388818
|
The SOCKS server requires the Directory Service ID to be default.
|
|
6390034
|
libnspr4.dll should be referred first on the directory <install-dir>\bin\proxy\bin instead of the directory system32.
|
|
6390054
|
Copyright year should be changed in the version window of the administration
interface.
|
|
6399395
|
The Select Directory Services page does not reflect the directory service
selection.
|
|
6402589
|
The function http-client-config does not take the
setting from the most specific object.
|
|
6411505
|
The Redirect URLs page in the administration interface does not function
as expected.
|
|
6412129
|
Proxy server 4.0 migration tool must add the line fn=“block-ip” if the setting is not found in the proxy server 3.6 instance.
|
|
6414355
|
Executing the command batchupdate with an invalid bu.conf file results in segmentation fault on Linux.
|
|
6415125
|
Change the compiler from Sun Studio 8 to Sun Studio 10.
|
|
6416272
|
Proxy server fails to start properly after the server user is changed.
|
|
6417755
|
Links like Previous, Main and Next not localized in the proxy server
online help.
|
|
6419925
|
More cache-related statistics required in proxy server.
|
|
6423487
|
Detailed description on how to enable DNS statistics has been added
to the online help.
|
|
6425025
|
The directive host-map does not work unless a url-prefix parameter is explicitly provided.
|
|
6425026
|
Proxy server needs to distinguish cache objects based on Accept-Encoding
headers.
|
|
6425038
|
Proxy server does not consider query-maxlen when
acting as reverse proxy with cache-local value set to 1.
|
|
6425601
|
The automatic garbage collection does not work in certain conditions.
|
|
6425752
|
There are duplicate headers in a 304 response from the cache.
|
|
6426543
|
Cache iterator leaks memory.
|
|
6427137
|
Proxy server transmits micro version number in responses.
|
|
6433285
|
Some of the proxy core error messages are not localized.
|
|
6433776
|
.sects files are not created when the command cbuild is executed.
|
|
6433807
|
On Windows, proxy server and administration server display wrong version
number in the start up message.
|
|
6434137
|
Proxy server displays wrong error message on timeout.
|
|
6435491
|
In the Proxy Server 4.0.4 Configuration File Reference,
in chapter 5, the reference to type parameter is removed
in the section on Service derivative.
|
|
6441601
|
In the Proxy Server 4.0.4 Administration Guide,
in chapter 5, notes have been added to clarify the need to load the root keys
of Certification Authority or the self-signing application.
|
|
6442054
|
In the Proxy Server 4.0.4 Administration Guide,
in chapter 5, the section Using SSL to Communicate with LDAP has been updated
with information about importing LDAP root CA certificates to the proxy server.
|
|
6442071
|
In the Proxy Server 4.0.4 Administration Guide,
in chapter 5, a new section is added to clarify about securing access to administration
server.
|
|
6442090
|
In the Proxy Server 4.0.4 Installation and Migration Guide,
clarification has been added to clarify that:
- Web Proxy Server can be installed as a non-root user
- Web Proxy Server can run as a non-root user
|
|
6442091
|
Cache must correctly compute the value of current_age with
the request delay added to the age.
|
|
6442641
|
Proxy server 4.0 does not work well with CONNECT requests that specify
a content-length.
|
|
6443160
|
On HP-UX, zlib library needs to be packaged with the product for JavaES
5.
|
|
6443720
|
Log Analyzer can have issues when the access log file has no log information.
|
|
6443731
|
On Windows 2000 SP4, the system requires restart after configuration
in JavaES environment.
|
|
6444332
|
On HP-UX, executing batchupdate with invalid bu.conf results in segmentation fault.
|
|
6444363
|
On HP-UX, proxy instance does not get created with non-root user.
|
|
6444942
|
Executing the command cachegc on a nonexistent instance
fails.
|
|
6445440
|
Error messages are incompletely localized.
|
|
6446098
|
On HP-UX, there is an internal error in View URL Database page.
|
|
6446349
|
On HP-UX, stress test results in mmap() failure.
|
|
6446933
|
In the Proxy Server 4.0.4 Configuration File Reference,
references to docs directory are removed.
|
|
6447423
|
Proxy server 4.0 leaks memory because the daemon structures are not
freed properly.
|
|
6447427
|
Proxy server 4.0 leaks memory while acquiring channel in common client.
|
|
6447476
|
The proxy server administration interface always displays the cache
partition size as 0.
|
|
6450886
|
The new maximum value of 360 minutes for the socks5.conf parameter SOCKS5_TIMEOUT has been documented in the Proxy Server 4.0.4 Configuration File Reference.
|
|
6454032
|
Proxy server binds to the same port each time the Address directive
is set.
|
|
6455411
|
On Windows, proxy server needs to support coexistence of JavaES 4 and
JavaES 5.
|
|
6459839
|
Migrating proxy server 3.6 to 4.0.3 with the cache disabled results
in unusable server instance.
|
|
6461889
|
HTML filter corrupts the transformed data.
|
|
6461896
|
HTML tag filter does not update the content length when it transforms
the source document.
|
|
6461991
|
Typographic errors in the English source of proxyResources.properties file.
|
|
6462366
|
On HP-UX, proxy server fails to restart after configuring SOCKS name
server.
|
|
6463404
|
Distributed administration does not work correctly when a user is given
access to all programs.
|
|
6463927
|
The template file WPSProp.properties has entries
for Windows platform.
|
|
6465608
|
On Windows, the shortcut for Stop Admin Server is not created for the
administration server when the proxy server is installed.
|
|
6465984
|
The file proxyResources.properties contains duplicate
keys.
|
|
6466452
|
Proxy server should update the installer registry key from Entsys to
Entsys5.
|
|
6467644
|
On Windows Server 2003 Enterprise platform, running reconfig.bat fails.
|
|
6470294
|
On Windows, running cbuild.exe to decrease the
cache sections does not remove the sections properly.
|
|
6473677
|
On JavaES 4 system, proxy server does not start after applying the patch
120981–08/120982–08.
|
|
6478407
|
In the Proxy Server 4.0.4 Administration Guide,
in chapter 7, the section Starting SSL-Enabled Servers is modified to remove
the suggestion for start script modification.
|
|
6480637
|
Proxy server crashes every hour.
|
|
6484781
|
After enabling distributing administration, even unauthentic users can
log in to administration server.
|
|
6485988
|
In the Proxy Server 4.0.4 Configuration File Reference,
the section on Send-Error in chapter 5 is updated to add a note stating that
send-error does not work for Web Server HTTP response.
|
|
6505480
|
In a standalone installation of proxy server on HP-UX, installation
fails on HP-UX 11.11.
|
|
6519072
|
In the installer for a standalone installation of proxy server 4.0.4,
the JRE version compatible with the US DST changes 2007 needs to be shipped.
The compatible JRE version is 1.4.2_13 on Solaris, Windows, and Linux. On
HP-UX, the compatible JRE version is 1.4.2.12.
|
|
6519113
|
In the Proxy Server 4.0.4 Configuration File Reference,
the section on Error in chapter 5 is updated to remove references to error
response codes 404 and 500.
|
|
6511549
|
In a standalone installation of proxy server on HP-UX, installation
fails in CLI mode.
|
|
6520577
|
In the Proxy Server 4.0.4 Administration Guide,
the section on Virtual Multihosting is updated to add a note to indicate that
the reverse mapping should be specified before the other mappings.
|
Issues resolved in 4.0.3
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.3
Table 6 Issues Resolved in Sun Java System Web
Proxy Server 4.0.3
|
ID
|
Summary
|
|
6191615
|
Certain regular expressions when used as URL filters cause the Proxy
Server to crash while starting.
|
|
6213012
|
ROTATELOGS event on Windows is not triggered at the time specified.
|
|
6213726
|
The Transfer Time Report reports a constant value of “0.00 sec/req”.
|
|
6215659
|
The Transfer Time Distribution Report shows a constant value of “<
1 sec [100.0%]”.
|
|
6239292
|
Log Analyzer error with Extended2 format when access log file has no
log information.
|
|
6242032
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 7, the section “Configuring System Preferences” has
wrong description for Parent Array. The correct description is, “A
parent array is a proxy array that a proxy or proxy array member routes through”.
|
|
6264079
|
The administration interface overwrites default,
which is the default value for Directory Service.
|
|
6275141
|
In proxy server 4.0.2, the File Cache feature is shown in the GUI and
documented for the Server Manager > Caching > Configure File Cache page, but
the feature is not implemented.
|
|
6270693
|
Sometimes the Filter directive is invoked twice per
request.
|
|
6285076
|
SOCKS server cannot handle both LDAP & password file for user authentication,
when both the methods are configured.
|
|
6285183
|
PR_MemUnmap() call results in error in Windows.
|
|
6285791
|
SOCKS server start command line issue for JavaES
4 is resolved in this release, but existing instances created in JavaES 4
installation will have the problem even after upgrading to the latest 4.0.3
patches. The new instances created after upgrade will not have this problem.
This problem is not there in standalone installation of web proxy server.
|
|
6289188
|
When you install proxy server 4.0 as non-root user and administration
server as root user, any changes you make to the cache settings in the administration
user interface result in the permissions for cache file and cache directory
changing from non-root to root.
|
|
6292729
|
The default setting for Client IP Addressing Forwarding should be Blocked.
|
|
6294282
|
The proxy server 4.0 administration interface cannot set the ACL correctly
for any resource which includes a “\” in its pattern.
|
|
6294563
|
Default setting of the access log format to be different from the Web
Server.
|
|
6295286
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 14, the section “Setting up a Reverse Proxy” needs
to note in Step 5 that the “/” mapping is added only if the user
doesn't change the contents of the “Map Source Prefix” text box
provided automatically by the Administration GUI.
|
|
6296870
|
Details of the Cache Section Table on the administration interface are
not displayed correctly.
|
|
6299913
|
The ConnAddress directive is not changed to Address during a migration from Proxy 3.6 to 4.0.
|
|
6300480
|
The setting of Cache tab is not migrated successfully during a migration
from Proxy 3.6 to 4.0.
|
|
6300615
|
The meta tag is missing in localized core messages.
|
|
6301140
|
Migration creates invalid Cache entries when migrating an instance of
proxy that has the cache disabled.
|
|
6303619
|
An ACL with a database that is registered with a name other than default does not work properly.
|
|
6304354
|
"Do Not Log Client Accesses From" option creates an invalid configuration.
|
|
6311548
|
The proxy server 4.0 uses pauth-user instead of auth-user for Access Log.
|
|
6312044
|
In the proxy server 4.0 administration interface, the Monitor Current
Activity page under the Server Status tab is not updated for DNS, Keep-Alive,
and Cache Statistics.
|
|
6313910
|
On Windows, the Rewrite Headername feature fails and displays the message
"Internal server error occurred".
|
|
6313959
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 12, the section “To configure the file cache” provides
wrong description for step 1. The correct description is, “From the
Server Manager, click the Caching tab”.
|
|
6313960
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 12, the section “To create a batch update” includes
step 10 that refers to a “Timing section”. This step is an error.
The Set Cache Batch Updates page does not have a Timing section.
|
|
6316289
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 12, the section “Building the Cache Directory Structure”
includes an example that refers to figure 12-1 instead of 12-2.
|
|
6325537
|
Not able to change RqThrottle value through the administration
interface.
|
|
6325616
|
Scheduled (explicit) Garbage Collection does not clear cache.
|
|
6328678
|
Cannot set ICPtimeout value to less than 400 milliseconds
through the administration interface.
|
|
6331044
|
In the Proxy Server 4.0.2 Administration Guide,
in the preface, the section “Using the Documentation” specifies
the location of the Proxy Server 4 documentation.
http://docs.sun.com/app/docs/prod/s1.webproxys#hic
The section should point to Proxy Server 4.0.2 documentation at: http://docs.sun.com/app/docs/coll/1311.2
|
|
6334854
|
Inconsistency between documentation for Web Proxy Server and sun-web-proxy-server_4_0.dtd .
|
|
6337102
|
Web Proxy Server crashes with DNS fn = “dns-config”
local-domain-levels = “8”
|
|
6338719
|
Patch upgrade of proxy server on Linux AS 3.0 installs in a different
location.
|
|
6338875
|
Proxy 4.0.1 FTP Client fails to process symbolic links correctly.
|
|
6350957
|
In the Proxy Server 4.0.2 Administration Guide,
in Chapter 5, the section “Enabling Security for Listen Sockets”
does not mention that security can only be enabled in reverse proxy mode and
not in forward proxy mode.
Also, in Chapter 8, the section “Specifying Users and Groups”
does not mention that security can only be enabled in reverse proxy mode and
not in forward proxy mode.
|
|
6365433
|
Unable to create proxy server instance when Automatic Start option is
selected in proxy server administration interface.
|
|
6367375
|
Mapping with CONNECT doesn't work when there is a parent proxy.
|
|
6369095
|
Memory leak in proxy server 4.0 .
|
|
6371084
|
Requesting SSL site doesn't work in chained proxy environment when using
IP address of the web server.
|
|
6371618
|
Can not change Compression Level to NONE.
|
|
6371731
|
No “connect://.*:563” in the default
resource.
|
|
6371793
|
pkginfo displays $distro for SUNWproxy-l10n.
|
|
6373101
|
Administration server creates invalid parameter for ssl-client-config.
|
|
6373622
|
cache-disable SAF is not documented.
|
|
6374279
|
Response to webdav OPTIONS method not according to
RFC2518.
|
|
6376065
|
max-uncheck function does not work as expected.
|
|
6376153
|
Proxy server 4.0.2 does not update cache for ftp/gopher protocols.
|
|
6381373
|
Proxy server crashes during run after restart if the cache is already
warmed.
|
|
6381419
|
The value in Cache-last-checked header is invalid.
|
|
6381424
|
Warning header should contain the host:port value of the agent adding
this header.
|
|
6382729
|
Proxy server does not accept utf-8 encoded parameters.
|
|
6383301
|
Proxy server 4.0 has a problem in channel pooling.
|
|
6383456
|
Proxy server 4.0.2 uses high CPU in Linux.
|
|
6384616
|
Proxy Server 4.0.3 online help has typographic errors.
|
|
6385902
|
The format in Set Access Log Preferences does not match with default
format.
|
|
6387772
|
Changes in OLH, due to bugs (6325537, 6303619) fixed, need to be localized.
|
|
6387901
|
In the Proxy Server 4.0.2 Administration Guide,
in chapter 11, the section “Chaining Proxy Servers” is not clear.
|
|
6388156
|
The headers of cached files can get corrupted.
|
|
6390237
|
Proxy passes incorrect content-length if the response contains double
content-length headers.
|
|
6392875
|
regexp-map does not work for connect.
|
|
6393573
|
Proxy 4.0.2 crashes when DNS fn=“dns-config” local-domain-levels=“1”
|
|
6394287
|
SOCKS process polls too often which leads to sockd process
taking up as much as 50% of CPU.
|
|
6395473
|
High CPU utilization problem in proxy server 4.0 while handling “slow”
clients.
|
|
6395889
|
Windows Server Update Service (WSUS) does not work using proxy server
4.0.2.
|
|
6400981
|
SOCKS5_TIMEOUT value set in socks5.conf is
ignored.
|
|
6402698
|
High CPU utilization in FTP client.
|
|
6418214
|
Issues with proxy server 4.0 garbage collection feature.
|
|
6424527
|
Proxy server crashes while processing a request containing an empty
cache-control header.
|
Issues resolved in 4.0.2
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.2
Table 7 Issues Resolved in Sun Java System Web Proxy Server
4.0.2
|
ID
|
Summary
|
|
5097664
|
ssl-tunnel-timeout parameter does not work on Windows.
|
|
6225025
|
ftp-listing-width parameter does not work correctly.
|
|
6251805
|
Changes to archive logs results in a crash.
|
|
6262277
|
Changing the minimum timeout value for ICP from 400
to 50.
|
|
6292690
|
In Proxy Server 4, while using IE 6.0 to access the administration interface,
can not select the original partition using Manage Sections>Partition .
|
|
6292786
|
Proxy Server does not write transfer time (and other times) to access
log.
|
|
6308714
|
Proxy Server fails to start if umask is not set to 022.
|
|
6310909
|
In Proxy Server 4.0.1 point product, version string of the product name
was over translated for French locale from 2005Q3 to 2005T3.
|
|
6310910
|
In Proxy Server 4.0.1 point product, many missing apostrophes in installer
messages on French locale.
|
|
6310944
|
In Proxy Server 4.0.1 point product, CLI installer fails to display
the license.
|
|
6310961
|
In Proxy Server 4.0.1 point product, the “Yes” in the license
installer screen on Spanish locale not localized.
|
|
6312723
|
Cannot access SSL sites with IP address while using Proxy Server 4.0.
|
|
6313981
|
In Proxy Server 4, not able to change the value of Rewrite Content Location
and Rewrite Headername after creating a new Reverse Mapping using the administration
interface.
|
|
6315817
|
Multiple simultaneous CONNECT (SSL Tunneling) requests cause thread
starvation.
|
|
6330348
|
High Memory usage by proxy process in Solaris 10 during stress run.
|
|
6333995
|
Memory leak while running stress tests for CONNECT.
|
|
6335919
|
Proxy Server's FTP client does not close a connection when the FTP Server
has closed.
|
|
6335922
|
Proxy Server FTP client does not send USER request to FTP Server.
|
|
6336550
|
Error when trying to install Proxy Server 4.0.1 into a directory that
contains a Proxy Server 4.0 install.
|
Issues resolved in 4.0.1
The following table lists the issues resolved in Sun Java System Web
Proxy Server 4.0.1.
Table 8 Issues Resolved in Sun Java System Web Proxy Server
4.0.1
|
ID
|
Summary
|
|
2126143
|
The same regular expression does not work in URL Filters, but works
in Access Control and Routing.
|
|
2126380
|
Memory leak in the ICP process of the proxy server.
|
|
6231283
|
The administration server on Linux Red Hat Advanced Server 3.0, fails
to startup.
|
|
6237346
|
The flexanlg utility dumps core while generating
a log analysis report using the Extended2 log file format.
|
|
6240767
|
The add/edit listen sockets for the administration server and the proxy
server instance do not verify for used ports.
|
|
6242627
|
Localized core messages are not getting displayed.
|
|
6243369
|
Entry of multi-byte characters in the pages related to SOCKS need to
be prevented.
|
|
6244103
|
Internal server error is displayed when the Set Connectivity Mode page
of the proxy server instances is accessed on a Linux Advanced Server 3.0,
Korean locale.
|
|
6245408
|
An internal error is displayed when a newly added partition is accessed
if the administration user and the proxy instance user are different.
|
|
6249166
|
Inconsistency in the display of the Control Cluster, Modify Server,
and Remove Server pages in the Cluster tab when the host name in the URL is
replaced with localhost while accessing the proxy server.
|
|
6253014
|
Crash occurs in the init-proxy SAF when there are
more than 9 NameTrans directives in the obj.conf file on
Linux Red Hat Advanced Server 3.0.
|
|
6254508
|
The batch update command exits with segmentation fault.
|
|
6255214
|
Cannot edit or remove an entry in the content URL rewriting page consisting
of multibyte characters.
|
|
6255216
|
Some LDAP entries in the socks5.conf lead to socksd crash.
|
|
6259314
|
Some of the localized online help pages are not synchronized with the
English online help pages.
|
|
6261440
|
Duplicate English online help exists in the installation directory.
|
|
6263694
|
Online Help unavailable for the Add and Replace Compromised Key List
and Certificate Revocation List pages.
|
|
6263721
|
The wrong help page is displayed for the Add/Replace Cert pages in the
Server Manager.
|
|
6274186
|
Unable to delete a server instance.
|
|
6276398
|
Remove the localized online help from the base workspace.
|
|
6285078
|
Entry for authentication failure of SOCKS request missing from log files.
|
|
6285779
|
Unable to start the proxy server instance if the serverID has a white
space.
|
|
6285788
|
SOCKS server crashes when authentication is used.
|
|
6289242
|
HTTP smuggling in Proxy Server 4.
|
|
6293449
|
Proxy Server 4 does not close the connection immediately with the CONNECT
method.
|
|
6295622
|
The function ConnAddress is not realized or documented
in Proxy Server 4.0.
|
|
6296169
|
The header Cache-last-checked is broken in Proxy
Server 4 installed on other locales.
|
|
6296225
|
The Proxy Server instance may intermittently crash when DNS caching
is enabled.
|
|
6301786
|
Localized Core Message not getting displayed on Solaris 9 x86, Linux
AS 3.0.
|
|
6311463
|
On the proxy process, the number of open file descriptors keeps increasing
with time, resulting in the proxy running out of file descriptors and dropping
connections.
|
Known Issues
This section lists the more important known issues and limitations at
the time of the Sun Java System Web Proxy Server 4.0.6 release. The issues
are listed by category:
Administration
The following table lists the known issues related to the administration
user interface.
Table 9 Known Issues in Administration
|
ID
|
Summary
|
|
6212701
|
Conflicting error message is displayed when server instance fails to
start.
The chances of occurrence of this conflicting error message is minimal
as the chances of the administration interface writing wrong information in
the configuration file is minimal. It can only occur if the user manually
writes wrong information into the configuration file.
|
|
6231297
|
The Restart Required link disappears if changes are made to the SOCKS
configuration and the Proxy Server is restarted instead of the SOCKS Server.
|
|
6484502
|
Proxy Server administration interface is not localized.
|
|
6509535
|
Daylight Savings Time (DST) will start in USA from the 2nd Sunday of
March and end on the 1st Sunday of November. This will impact the date and
time rules of the operating system and JRE.
In the standalone version of proxy server, JRE version compatible with
2007 DST changes is bundled with the installer. However, you need to address
the impact on the date and time rules of the operating system by installing
the appropriate Operating System patches as explained in step 1 of the Workaround.
For the JavaES 5 installation of proxy server, you need to install the
Operating System patches and also the compatible version of JRE . Follow steps
1 and 2 of the Workaround.
Workaround
-
Download and use the appropriate operating system patches.
You can download the Solaris patches from http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1.
For other platforms, download similar DST
compatible patches from the Operating System vendor's web site.
-
For Solaris, Windows, and Linux, run proxy server with JRE
1.4.2_13. For HP-UX, run proxy server with JRE 1.4.2.12.
|
|
6558027
|
On Windows, server identifier with multibyte characters
causes server-side createInstance.exe error.
|
Caching
The following table lists the known issues related to caching.
Table 10 Known Issues in Caching
|
ID
|
Summary
|
|
6229823
|
When a new partition is added a default section s0.0 is also created
irrespective of the partition size. Warning messages are logged in the errors
file.
Workaround
Use the cbuild utility to add the new partition or
delete the s0.0 folder under the new cache partition, and
restart the proxy server.
The error messages can be ignored.
|
Installation
The following table lists the known issues related to installation.
Table 11 Known Issues in Installation
|
ID
|
Summary
|
|
6205683
|
Windows console installation fails.
|
|
6255325
|
The installer throws an exception and the installation fails on Linux
if the user installs the Proxy Server as a non-root user and the /var/opt/sun/install directory does not exist.
|
|
6353576
|
Silent upgrade installation does not work.
|
|
6587776
|
Proxy Server from Java ES 5 on Windows XP displays
system error 1067.
|
|
6607551
|
On Windows, uninstalling the patch does not change the Proxy Server
version to the previous version number.
Reverting the patch through Uninstaller script does
not change the service description name to the previous Proxy Server version
due to RenameService.exe utility limitations. Therefore,
even after uninstalling the patch, the service description shows the latest
Proxy version instead of the previous version number.
|
Internationalization
The following table lists the known issues related to internationalization.
Table 12 Known Issues in Internationalization
|
ID
|
Summary
|
|
6233080
|
The Disable Proxying option does not work for the URL with multibyte
data (URL encoded) when routing is set through another proxy server.
|
|
6233090
|
A URL with multibyte data (URL encoded) cannot be mapped.
|
|
6253844
|
Proxy server online help does not support the language zh-cn.
|
|
6297168
|
Starting the server in a different system encoding causes any errors
returned by the system in that particular system encoding to be logged in
the error log. When viewed through the Administration server, the error log
might have characters in system encoding that do not display properly.
Workaround
Change the browser encoding to match the OS locale so that the error
log can be properly viewed through the administration interface. But this
will be needed every time you move to other pages and then return to View
Error Log again.
|
|
6300080
|
Proxy server's content rewriting function is inconsistent.
|
|
6526476 and 6526488
|
In a standalone installation of proxy server on HP-UX, the installation
in GUI mode results in the display of corrupted Japanese characters (ID no.
6526476). If the installation is continued, it results in error while creating
an instance (ID no. 6526488).
Workaround
You can use either of the following workarounds:
-
Use the CLI mode of installation for Japanese locale on HP-UX.
-
Continue the installation even with the corrupted display
of characters. When the installer fails to create an instance, log in to the
administration interface and create an instance.
|
|
6550995
|
The following error message is not localized for all the locales:
HTTP7774: received extraneous data following response
|
|
6600594
|
|
SOCKS
The following table lists the known issues related to SOCKS.
Table 13 Known Issues in SOCKS
|
ID
|
Summary
|
|
6245453
|
The Quench Updates feature is shown in the GUI and documented for the
Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented.
|
|
6263389
|
No error is reported when two instances of SOCKS are started using the
same port on Windows.
|
|
6285791
|
SOCKS server start command line issue for JavaES
4 is resolved in this release, but existing instances created in JavaES 4
installation will have the problem even after upgrading to the latest 4.0.3
patches. The new instances created after upgrade will not have this problem.
This problem is not there in stand-alone installation of web proxy server.
|
How to Report Problems and Provide Feedback
If you have problems with Sun Java System Web Proxy Server 4.0.6, contact
Sun customer support using one of the following mechanisms:
So that we can best assist you in resolving problems, please have the
following information available when you contact support:
-
Description of the problem, including the situation where
the problem occurs and its impact on your operation
-
Machine type, operating system version, and product version,
including any patches and other software that might be affecting the problem
-
Detailed steps on the methods you have used to reproduce the
problem
-
Any error logs or core dumps
Sun Welcomes Your Comments
Sun is interested in improving its documentation and welcomes your comments
and suggestions. You can submit your comments by going to: http://docs.sun.com/app/docs/form/comments
Additional Sun Resources
Useful Sun Java Systems information can be found at the following locations:
Searching Sun Product Documentation
Besides searching Sun product documentation from the docs.sun.comSM web site, you can use a search engine
of your choice by typing the following syntax in the search field:
<search-term> site:docs.sun.com
For example, to search for “Web Proxy Server”, type the
following:
Web Proxy Server site:docs.sun.com
To include other Sun web sites in your search (for example, java.sun.com, www.sun.com, developers.sun.com),
use sun.com in place of docs.sun.comin
the search field.