Sun Java System Web Proxy Server 4.0.6 Release Notes
검색에만이 책은
이 책의 내용보기:

Release Notes for Sun Java System Web Proxy Server

These release notes contain important information available at the time of the release of the Sun JavaTM System Web Proxy Server 4.0.6 product, hereafter referred to as Proxy Server 4.0.6 or just proxy server. Platform summary and known problems are addressed here. Please read this document and associated documents before you begin using the Sun product.

This document contains the following sections:

Enhancements in Sun Java System Web Proxy Server Releases

The following enhancements have been made in recent releases of Proxy Server:

Internet Protocol Version 6 (IPv6) Support

You can connect to an IPv6 enabled website through the Proxy Server 4.0.6. Proxy server also supports ftp extension for ipv6 in default (passive) mode.

NSS 3.11.7 and NSPR 4.6.4 Support

Proxy Server 4.0.6 supports Network Security Services (NSS) 3.11.7 and Netscape Portable Runtime (NSPR) 4.6.4.

Upgrade Support

From Proxy Server 4.0.2 release, the installer supports the upgrade of an existing Proxy Server 4.0 installation to the later version. For the Java Enterprise System installations of Proxy Server 4.0.1, you need to install the patches that correspond to the later release.

Modified FTP Transfer Mode

This version of Proxy introduces the support for Extended Passive (EPSV) mode instead of Passive Mode only (as per RFC 2428).

Enhanced Hardware Accelerator Encryption Support

Proxy Server 4.0.6 provides hardware accelerator support for SunTM Crypto Accelerator 6000, a cryptographic accelerator board that enhances the performance of SSL on the Proxy Server.

Platform Summary

This section provides information about the supported platform components for Proxy Server 4.0.6

This section includes the following topics:

Platform Requirements

The following table summarizes the Proxy Server 4.0.6 platform requirements.

Table 1 Platform Requirements for Proxy Server 4.0.6

Operating System

Minimum Memory

Recommended Memory

Recommended Disk Space*

Sun SolarisTM 8 for SPARC®

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Sun Solaris 9 for SPARC

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Sun Solaris 10 for SPARC

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Sun Solaris 9 for x86

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Sun Solaris 10 for AMD OpteronTM

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Red Hat Enterprise Linux Advanced Server 3 Update 4

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Red Hat Enterprise Linux Advanced Server 4 Update 2

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Microsoft Windows 2000 Server Service Pack 4

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Microsoft Windows 2000 Advanced Server

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

Microsoft Windows 2003 Enterprise Edition

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

HP-UX 11i (11.11)

256 Mbytes

512 Mbytes or higher

512 Mbytes or higher

* Depends on cache capacity setting. The default cache capacity setting is 2 Gbytes.

Please take needed action to move or migrate your Web Proxy Servers to a supported operating system.

Supported Browsers

The following table lists the browsers that are supported with Proxy Server 4.0.6.

Table 2 Supported Browsers for Proxy Server 4.0.6

Browser

Version

Microsoft Internet Explorer

6.0, 7.0

NetscapeTM Navigator

7.1, 7.2

MozillaTM

1.4.1, 1.7.2

Your browser needs to have Java enabled.

Hardware and Software Requirements

In addition to the UNIX operating system memory and disk space requirements listed in Platform Requirements, your system must also have adequate swap space:

  • Solaris requires swap space at least as large as the amount of RAM on your system (twice the amount of RAM is recommended)

  • Linux requires 256 Mbytes swap space

Required Patches

It is recommended that you update your operating system with the latest applicable patches. Required patches are listed by platform.

Solaris Patches

The following is the required patch level for Proxy Server 4.0.6 in Solaris SPARC and x86.

Solaris 8 (SPARC)

  • 108434–18 (shared library patch for C++)

Solaris 9 (SPARC)

  • 111711–12 (shared library patch for C++)

Solaris 9 (x86)

  • 111713–12 (shared library patch for C++)

Solaris 10 (SPARC)

NOT REQUIRED

Solaris 10 (x86)

  • 119964–03 (shared library patch for C++)

  • 108434–18 (shared library patch for C++)

Linux Patches

The following is the required patch level for Proxy Server 4.0.6 in Linux.

Red Hat Enterprise Linux Advanced Server 3

  • compat-libstdc++-7.3-2.96.128.rpm

Red Hat Enterprise Linux Advanced Server 4

  • compat-libstdc++-33-3.2.3-47.3.rpm compat-libstdc++-296-2.96-132.7.2.rpm

HP-UX Patches

  • HP-UX 11i Operating Environment Component B.11.11.0412

  • Required patch bundle for 11i, June 2003B.11.11.0306.1

  • Gold Base patches for HP-UX 11i, December 2006–B.11.11.0612.459

  • Gold Application patches for HP-UX 11i, December 2006–B.11.11.0612.459

  • Pthread enhancement and fixes-PHCO_29109

  • Pthread.h fix and new enhancement-PHCO_27633

  • libc manpage cumulative patch-PHCO_29328

  • libc cumulative patch-PHCO_29495

  • Java Out-of-Box-JAVAOOB, 1.0.00.02

The Java Out-of-Box tool is used to configure the necessary kernel tunable parameters. Use of this tool is the recommended method for modifying kernel values. If necessary, modify the following tunable parameters to reflect a value equal to or greater than the following:

  • nkthreads— 3635

  • maxfiles–60

  • maxfiles_lim–1024

  • max_thread_proc–512

  • maxswapchunks–2048

  • nfile4–136

  • ncallout–3651

  • nproc–2068


Caution – Caution –

Modifying the kernel tunable parameters can have adverse impacts on your system. Do not modify the parameters unless you fully understand what you are doing.


Impact of US DST Changes 2007

Daylight Savings Time (DST) starts in USA from the 2nd Sunday of March and ends on the 1st Sunday of November. This impacts the date and time rules of the Operating System.

To make sure that the log files contain the correct time in US time zones, and that the Administration Server is not impacted by this change, Sun recommends you to do the following:

  • Download and install the appropriate Operating System patches. You can download the Solaris patches from: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1

    For other platforms, download similar DST compatible patches from the respective Operating System vendor's web sites.

  • For Solaris, Windows, and Linux, run proxy server with JRE 1.4.2_13. For HP-UX, run proxy server with JRE 1.4.2.12.

Accessing the Documentation

The Sun Java System Web Proxy Server 4.0.6 documentation is provided in a number of ways:

  • Manuals – You can view the Proxy Server 4.0.6 manuals and release notes in HTML and in printable PDF formats.

  • Online help – Click the Help button in the graphical interface to launch a context-sensitive help window.

Accessibility Features for People With Disabilities

To obtain accessibility features that have been released since the publishing of this media, consult Section 508 product assessments available from Sun upon request to determine which versions are best suited for deploying accessible solutions. Updated versions of applications can be found at: http://sun.com/software/javaenterprisesystem/get.html.

For information on Sun’s commitment to accessibility, visit http://sun.com/access.

Resolved Issues

This section lists the most important issues fixed in the following releases:

Issues Resolved in 4.0.6

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.6

Table 3 Issues Resolved in Sun Java System Web Proxy Server 4.0.6

ID

Summary

6224535

Timeout functionality does not work.

6460215

Can not connect to an IPv6 enabled website when connecting through proxy server.

6478413

Uninstalling a proxy server instance does not result in the removal of the files corresponding to the instance from the alias and httpacl directories.

6494418

block-multipart-posts doesn't block the request when content-type parameter is set.

6505578

sockd daemon can run out of worker threads when processing UDP associated requests.

6513846

Proxy Server 4.0.6 documents are updated to remove reference to HTTPS caching.

6514870

Removing a template through the Remove Template option does not remove all the assignments for that template.

6520593

A new section “Precedence of Regular Expressions Over Templates in Set Cache Configuration” is added to chapter 16 in the Proxy Server 4.0.6 Administration Guide to explain why templates used within Set Configuration do not work but manually entered regular expressions do.

6526659

Incorrect server start command is displayed in the installer.

6529376

The default cache size for proxy server on Windows is 100 MBytes but the help page states that it is 1.6 GBytes.

6530476

The path to the libjvm.sl file in the start script is not set correctly.

6534717

When cache-status is enabled in access log, the access logs repeatedly show cache file as written and deleted for request headers that have cache-control set to no-cache.

6537346

Log entries show cache status as written , even when cache file is not created.

6538613

cachegc dumps core if the proxy instance's cache directory has been modified.

6541327

cachegc sometimes works incorrectly.

6545753

Error log shows a confusing error message when the proxy server encounters an invalid request line.

6546256

On Windows, a regular expression is not registered correctly in obj.conf .

6546720

Cannot connect to certain sites when DNS cache is enabled.

6547808

On Windows, the watchdog process crashes when the proxy instance is stopped through the service manager.

6559837

Proxy server crashes while handling an ftp request.

6560432

The Proxy Server 4.0.6 Administration Guide and the online help are updated to include description for Source Port Number.

6562122

For a SSL proxy instance an incorrect password entry does not get written to the errors file.

6562165

Proxy Server 4.0.6 Administration Guide is updated to remove references to the file cache functionality.

6562585

Proxy Server 4.0.6 Release Notes is updated to provide the correct version number for NSPR.

6563262

During ftp access some error log messages are noticed that convey no information and can be confusing.

6564435

Details of the Cache Section Table on the administration interface are not displayed correctly.

6565004

Proxy Server 4.0.6 Release Notes is updated to provide correct link to the Proxy Server documentation page.

6565021

Internal log rotation rotates the files twice if the system time is changed between two scheduled rotations.

6565436

The section "Disabling the Forward Proxying feature in a Reverse Proxy Setup" under "Setting Up a Reverse Proxy" in Chapter 14 of the Proxy Server 4.0.6 Administration Guide is updated to add information about how to prevent a security vulnerability in a reverse proxy server configuration.

6566246

Cross site scripting vulnerability in the View Error Log functionality.

6566309

Cross site scripting vulnerability in the View URL Database functionality.

6566352

Cannot connect to an IPv6 ftp server through proxy server.

6566822

HTTP headers with a very long value can cause memory corruption in proxy server.

6566836

flexanlg dumps core.

6566889

After setting a value for Processes in the Configure System Preferences page , the value can not be changed back to null.

6566924

Help page is updated to provide a clearer explanation for Processes in the Configure System Preferences page.

6568534

Reference to Proxy Server 3.6 documentation issue is removed from Proxy Server 4.0.6 Release Notes.

6569516

Proxy Server accepts and forwards responses whose header names contain spaces.

6572128

Localized online help is updated to provide the correct context sensitive help page.

6572138

The access log does not include certain connection related information.

6574401

Proxy Server supported browsers to be enhanced to include Internet Explorer (IE) v7

6576044

Proxy Server 4.0.6 Configuration File Reference is updated to document the newly added SOCKS configuration parameter SOCKS5_UDPASSOC_TIMEOUT.

6576050

Proxy Server 4.0.6 Online Help is updated to specify the effect of HTTP client's retry functionality.

6576065

Proxy Server 4.0.6 Online Help is updated to make it consistent with Sun's style guidelines and proxy server's product user interface.

6577128

Proxy server support to be extended for Sun Crypto Accelerator 6000.

6578024

LDAP connection failure errors.

6578560

In the message that proxy server displays after an upgrade to indicate how you can access the administration server, the server name and port name are indicated as null (http://null:null).

6579049

Proxy server creates an incorrect partition which causes errors during startup.

6579781

An empty host-regex argument in the virt-map directive results in proxy server crash.

6581350

Proxy server installation contains debug JDK binaries.

6584989

In the Version window, the label is not located in the center of the Close button when the browser is IE 7.

6594191

Localized Online Help has to be integrated to Proxy Server 4.0.6.

Issues resolved in 4.0.5

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.5

Table 4 Issues Resolved in Sun Java System Web Proxy Server 4.0.5

ID

Summary

6240773

Deleting listen socket and restarting the server does not clear the port.

6390867

On Windows, cv.exe fails when you try to view the information for a cached csv file.

6391439

Clearing the Enable DNS subdomains option in the administration interface does not remove the line DNS fn="dns-config" local-domain-levels="0" from the obj.conf file.

6413536

webservd must be used as the default user and not nobody.

6463455

Proxy server 4.0.5 Release Notes is updated to state the version of Sun Crypto Accelerator that supports the proxy server.

6466910

Proxy Server 4.0.5 Administration Guide is updated to describe the procedure to set up Sun Crypto Accelerator to work with proxy server.

6482102

Files cannot be retrieved from certain FTP sites through web browsers when connecting through the proxy server.

6500200

Expired page is not displayed in the administration interface.

6500224

FTP through SOCKS routing does not work.

6500232

Proxy Server 4.0.5 Online Help is updated to mention Cache in the help page for the Monitoring Server Status page.

6500547

FTP through SOCKS routing occasionally results in file corruption.

6506550

Proxy server can crash due to null pointer access in caching subsystem.

6513846

Proxy Server 4.0.5 Release Notes is updated to state that proxy server does not support HTTPS caching.

6517969

Processing of obj.conf and ACL does not work as expected.

6520629

Configure Virtual Multihosting page in the administration interface does not allow user port number in host-regex.

6521610

When the Set Cache Specifics page in the administration interface is used to enable cache, it does not remove "cache-disable" line in the obj.conf file.

6523139

Proxy server debug build does not log all the information, such as disconnects.

6524253

Proxy server watchdog core dump.

6524898

When the cache structure is created by cbuild.exe, the .sects file in the cache becomes empty after the instance starts up.

6525294

The flexanlg utility dumps core if there are any syntax problems in the log file.

6526297

The Manage Section page in the proxy server administration interface lists all the sections of all the partitions, and offers a way to move sections from one partition to another. This feature does not work correctly.

6526354

When a new Partition is added, one section is gets created.

6526964

SOCKS v5 server disconnects sessions unexpectedly.

6526990

The localized versions of Proxy Server 4.0.4 Online Help have a link that does not work properly.

6527840

Shutting down the SOCKS server using the administration interface results in a different message compared to the message that is displayed while starting up.

6528069

Though the maximum cache partitions possible in proxy server is 32, there is a problem in creating 32 partitions in Proxy Server 4.0.3.

6529305

When using Virtual Multihosting, if you define the host in upper case, it does not work.

6534208

Version string has to be changed for the 4.0.5 release.

6537410

Proxy server sometimes waits to receive a new http request until the web server closes the connection.

6537736

Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the handling of domain name address types within the sockd daemon.

6537745

Proxy server has a domain buffer overflow vulnerability. The problem specifically exists in the s5auth_userpass() function within the sockd daemon.

6538060

The startsvr and stopsvr scripts of proxy administration server refer to proxy-admserv404 instead of proxy-admserv405.

6538173

On HP-UX, the administration server displays an error page when you try to add a listen socket to a proxy instance.

6539318

On Linux, the utility cbuild does not work.

6539689

On Linux, if the group ID 80 already exists, proxy server installation does not work and the installation failure does not result in proper installation log.

6544263

Localized versions of the Proxy Server 4.0.5 Online Help must be updated with the changes made to the English version of the Online Help.

6545267

Proxy Server 4.0.5 Configuration File Reference is updated with information about log parameters.

Issues resolved in 4.0.4

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.4

Table 5 Issues Resolved in Sun Java System Web Proxy Server 4.0.4

ID

Summary

4973509

Cache-Control directive for private/no-cache headers is not supported for multiple values.

4973523

HEAD requests are not cached.

4973652

Proxy server does not support 65536–byte long URIs.

4999184

When proxy server is configured in reverse proxy mode pointing to a web server, the error message displayed when the web server is down should not mention that it is a proxy sever.

5093104

Proxy server administration interface allows trailing white space for a HTTP header in client IP forwarding.

6208895

An FTP request through the proxy server to a Microsoft IIS FTP server does not work.

6214329

Error in error log for HTTP4352:zlib internal error.

6233086

For client credentials forwarding with multi-byte user name, validation check needs to be added.

6243358

A deleted user still appears as part of a group.

6245972

User's permission set through the Administer Access Control page does not get implemented.

6246562

Controlling a set of servers installed on different locales and platforms through clusters fails when stopping the set of servers.

6253844

There is no support for “zh-cn” for proxy server online help.

6255761

There is no content at the Installer Help page.

6255838

When a proxy server instance is removed without stopping the SOCKS server and a new instance is created, you will not be able to start the SOCKS server on the new instance as the port would be in use.

6256442

The installer displays the error message "Password should be at least 8 characters" only in English.

6266497

Administration interface allows duplicate port numbers in the Add Server page.

6268356

On Windows, SNMP service does not work if libnspr4.dll is not present in the system32 directory.

6274424

On Windows, the value for defaultInstallDirectory in the state file is wrong. The default installation directory in the installer is c:\sun\ProxyServer40, but the state file generated when you use the command setup --savestate does not have c:\sun\ProxyServer40 as the default installation directory. The state file displays the UNIX template value as the default installation directory.

6304981

Proxy server installation fails on Linux if ksh is not installed on the machine.

6310283

In the proxy server administration interface, sometimes the tabs display incorrect page content.

6312087

Localized online help is not context sensitive.

6313904

The administration server does not allow you to set a listen socket with a port number that is used for another IP address.

6321797

Proxy Server 4.0.3 Configuration File Reference is updated with information for the flex-init parameter no-format-str.access.

6331035

Load balancing feature works only for regular expressions.

6333355

When the ACL caching is enabled, the user/group definition in the ACL has to exactly match the case of the LDAP entry for the ACL caching to happen.

6337657

Proxy server displaying Internal Server Error message when the configuration of Distributed Administration is attempted.

6369549

Proxy patch installation on JavaES 5 results in some errors on Linux.

6371618

Can not change Compression Level to NONE. Documentation should state what to select as the compression level.

6380736

Control does not transfer to Schedule GC page when Explicit GC is selected in the Set GC Preferences page.

6382393

Proxy server is unable to perform FTP uploads.

6382692

During migration, the format string Req->vars.pauth-user in the 3.6 obj.conf should be changed to Req->vars.auth-user .

6383320

Cannot remove cache file when contents file name has space or Japanese characters.

6383435

sockd process uses high memory on Linux .

6387166

View Server Settings page in the proxy server administration interface does not display MaxProcs value.

6388818

The SOCKS server requires the Directory Service ID to be default.

6390034

libnspr4.dll should be referred first on the directory <install-dir>\bin\proxy\bin instead of the directory system32.

6390054

Copyright year should be changed in the version window of the administration interface.

6399395

The Select Directory Services page does not reflect the directory service selection.

6402589

The function http-client-config does not take the setting from the most specific object.

6411505

The Redirect URLs page in the administration interface does not function as expected.

6412129

Proxy server 4.0 migration tool must add the line fn=“block-ip” if the setting is not found in the proxy server 3.6 instance.

6414355

Executing the command batchupdate with an invalid bu.conf file results in segmentation fault on Linux.

6415125

Change the compiler from Sun Studio 8 to Sun Studio 10.

6416272

Proxy server fails to start properly after the server user is changed.

6417755

Links like Previous, Main and Next not localized in the proxy server online help.

6419925

More cache-related statistics required in proxy server.

6423487

Detailed description on how to enable DNS statistics has been added to the online help.

6425025

The directive host-map does not work unless a url-prefix parameter is explicitly provided.

6425026

Proxy server needs to distinguish cache objects based on Accept-Encoding headers.

6425038

Proxy server does not consider query-maxlen when acting as reverse proxy with cache-local value set to 1.

6425601

The automatic garbage collection does not work in certain conditions.

6425752

There are duplicate headers in a 304 response from the cache.

6426543

Cache iterator leaks memory.

6427137

Proxy server transmits micro version number in responses.

6433285

Some of the proxy core error messages are not localized.

6433776

.sects files are not created when the command cbuild is executed.

6433807

On Windows, proxy server and administration server display wrong version number in the start up message.

6434137

Proxy server displays wrong error message on timeout.

6435491

In the Proxy Server 4.0.4 Configuration File Reference, in chapter 5, the reference to type parameter is removed in the section on Service derivative.

6441601

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, notes have been added to clarify the need to load the root keys of Certification Authority or the self-signing application.

6442054

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, the section Using SSL to Communicate with LDAP has been updated with information about importing LDAP root CA certificates to the proxy server.

6442071

In the Proxy Server 4.0.4 Administration Guide, in chapter 5, a new section is added to clarify about securing access to administration server.

6442090

In the Proxy Server 4.0.4 Installation and Migration Guide, clarification has been added to clarify that:

- Web Proxy Server can be installed as a non-root user

- Web Proxy Server can run as a non-root user

6442091

Cache must correctly compute the value of current_age with the request delay added to the age.

6442641

Proxy server 4.0 does not work well with CONNECT requests that specify a content-length.

6443160

On HP-UX, zlib library needs to be packaged with the product for JavaES 5.

6443720

Log Analyzer can have issues when the access log file has no log information.

6443731

On Windows 2000 SP4, the system requires restart after configuration in JavaES environment.

6444332

On HP-UX, executing batchupdate with invalid bu.conf results in segmentation fault.

6444363

On HP-UX, proxy instance does not get created with non-root user.

6444942

Executing the command cachegc on a nonexistent instance fails.

6445440

Error messages are incompletely localized.

6446098

On HP-UX, there is an internal error in View URL Database page.

6446349

On HP-UX, stress test results in mmap() failure.

6446933

In the Proxy Server 4.0.4 Configuration File Reference, references to docs directory are removed.

6447423

Proxy server 4.0 leaks memory because the daemon structures are not freed properly.

6447427

Proxy server 4.0 leaks memory while acquiring channel in common client.

6447476

The proxy server administration interface always displays the cache partition size as 0.

6450886

The new maximum value of 360 minutes for the socks5.conf parameter SOCKS5_TIMEOUT has been documented in the Proxy Server 4.0.4 Configuration File Reference.

6454032

Proxy server binds to the same port each time the Address directive is set.

6455411

On Windows, proxy server needs to support coexistence of JavaES 4 and JavaES 5.

6459839

Migrating proxy server 3.6 to 4.0.3 with the cache disabled results in unusable server instance.

6461889

HTML filter corrupts the transformed data.

6461896

HTML tag filter does not update the content length when it transforms the source document.

6461991

Typographic errors in the English source of proxyResources.properties file.

6462366

On HP-UX, proxy server fails to restart after configuring SOCKS name server.

6463404

Distributed administration does not work correctly when a user is given access to all programs.

6463927

The template file WPSProp.properties has entries for Windows platform.

6465608

On Windows, the shortcut for Stop Admin Server is not created for the administration server when the proxy server is installed.

6465984

The file proxyResources.properties contains duplicate keys.

6466452

Proxy server should update the installer registry key from Entsys to Entsys5.

6467644

On Windows Server 2003 Enterprise platform, running reconfig.bat fails.

6470294

On Windows, running cbuild.exe to decrease the cache sections does not remove the sections properly.

6473677

On JavaES 4 system, proxy server does not start after applying the patch 120981–08/120982–08.

6478407

In the Proxy Server 4.0.4 Administration Guide, in chapter 7, the section Starting SSL-Enabled Servers is modified to remove the suggestion for start script modification.

6480637

Proxy server crashes every hour.

6484781

After enabling distributing administration, even unauthentic users can log in to administration server.

6485988

In the Proxy Server 4.0.4 Configuration File Reference, the section on Send-Error in chapter 5 is updated to add a note stating that send-error does not work for Web Server HTTP response.

6505480

In a standalone installation of proxy server on HP-UX, installation fails on HP-UX 11.11.

6519072

In the installer for a standalone installation of proxy server 4.0.4, the JRE version compatible with the US DST changes 2007 needs to be shipped. The compatible JRE version is 1.4.2_13 on Solaris, Windows, and Linux. On HP-UX, the compatible JRE version is 1.4.2.12.

6519113

In the Proxy Server 4.0.4 Configuration File Reference, the section on Error in chapter 5 is updated to remove references to error response codes 404 and 500.

6511549

In a standalone installation of proxy server on HP-UX, installation fails in CLI mode.

6520577

In the Proxy Server 4.0.4 Administration Guide, the section on Virtual Multihosting is updated to add a note to indicate that the reverse mapping should be specified before the other mappings.

Issues resolved in 4.0.3

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.3

Table 6 Issues Resolved in Sun Java System Web Proxy Server 4.0.3

ID

Summary

6191615

Certain regular expressions when used as URL filters cause the Proxy Server to crash while starting.

6213012

ROTATELOGS event on Windows is not triggered at the time specified.

6213726

The Transfer Time Report reports a constant value of “0.00 sec/req”.

6215659

The Transfer Time Distribution Report shows a constant value of “< 1 sec [100.0%]”.

6239292

Log Analyzer error with Extended2 format when access log file has no log information.

6242032

In the Proxy Server 4.0.2 Administration Guide, in Chapter 7, the section “Configuring System Preferences” has wrong description for Parent Array. The correct description is, “A parent array is a proxy array that a proxy or proxy array member routes through”.

6264079

The administration interface overwrites default, which is the default value for Directory Service.

6275141

In proxy server 4.0.2, the File Cache feature is shown in the GUI and documented for the Server Manager > Caching > Configure File Cache page, but the feature is not implemented.

6270693

Sometimes the Filter directive is invoked twice per request.

6285076

SOCKS server cannot handle both LDAP & password file for user authentication, when both the methods are configured.

6285183

PR_MemUnmap() call results in error in Windows.

6285791

SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in standalone installation of web proxy server.

6289188

When you install proxy server 4.0 as non-root user and administration server as root user, any changes you make to the cache settings in the administration user interface result in the permissions for cache file and cache directory changing from non-root to root.

6292729

The default setting for Client IP Addressing Forwarding should be Blocked.

6294282

The proxy server 4.0 administration interface cannot set the ACL correctly for any resource which includes a “\” in its pattern.

6294563

Default setting of the access log format to be different from the Web Server.

6295286

In the Proxy Server 4.0.2 Administration Guide, in Chapter 14, the section “Setting up a Reverse Proxy” needs to note in Step 5 that the “/” mapping is added only if the user doesn't change the contents of the “Map Source Prefix” text box provided automatically by the Administration GUI.

6296870

Details of the Cache Section Table on the administration interface are not displayed correctly.

6299913

The ConnAddress directive is not changed to Address during a migration from Proxy 3.6 to 4.0.

6300480

The setting of Cache tab is not migrated successfully during a migration from Proxy 3.6 to 4.0.

6300615

The meta tag is missing in localized core messages.

6301140

Migration creates invalid Cache entries when migrating an instance of proxy that has the cache disabled.

6303619

An ACL with a database that is registered with a name other than default does not work properly.

6304354

"Do Not Log Client Accesses From" option creates an invalid configuration.

6311548

The proxy server 4.0 uses pauth-user instead of auth-user for Access Log.

6312044

In the proxy server 4.0 administration interface, the Monitor Current Activity page under the Server Status tab is not updated for DNS, Keep-Alive, and Cache Statistics.

6313910

On Windows, the Rewrite Headername feature fails and displays the message "Internal server error occurred".

6313959

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To configure the file cache” provides wrong description for step 1. The correct description is, “From the Server Manager, click the Caching tab”.

6313960

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “To create a batch update” includes step 10 that refers to a “Timing section”. This step is an error. The Set Cache Batch Updates page does not have a Timing section.

6316289

In the Proxy Server 4.0.2 Administration Guide, in Chapter 12, the section “Building the Cache Directory Structure” includes an example that refers to figure 12-1 instead of 12-2.

6325537

Not able to change RqThrottle value through the administration interface.

6325616

Scheduled (explicit) Garbage Collection does not clear cache.

6328678

Cannot set ICPtimeout value to less than 400 milliseconds through the administration interface.

6331044

In the Proxy Server 4.0.2 Administration Guide, in the preface, the section “Using the Documentation” specifies the location of the Proxy Server 4 documentation.

http://docs.sun.com/app/docs/prod/s1.webproxys#hic

The section should point to Proxy Server 4.0.2 documentation at: http://docs.sun.com/app/docs/coll/1311.2

6334854

Inconsistency between documentation for Web Proxy Server and sun-web-proxy-server_4_0.dtd .

6337102

Web Proxy Server crashes with DNS fn = “dns-config” local-domain-levels = “8”

6338719

Patch upgrade of proxy server on Linux AS 3.0 installs in a different location.

6338875

Proxy 4.0.1 FTP Client fails to process symbolic links correctly.

6350957

In the Proxy Server 4.0.2 Administration Guide, in Chapter 5, the section “Enabling Security for Listen Sockets” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode.

Also, in Chapter 8, the section “Specifying Users and Groups” does not mention that security can only be enabled in reverse proxy mode and not in forward proxy mode.

6365433

Unable to create proxy server instance when Automatic Start option is selected in proxy server administration interface.

6367375

Mapping with CONNECT doesn't work when there is a parent proxy.

6369095

Memory leak in proxy server 4.0 .

6371084

Requesting SSL site doesn't work in chained proxy environment when using IP address of the web server.

6371618

Can not change Compression Level to NONE.

6371731

No “connect://.*:563” in the default resource.

6371793

pkginfo displays $distro for SUNWproxy-l10n.

6373101

Administration server creates invalid parameter for ssl-client-config.

6373622

cache-disable SAF is not documented.

6374279

Response to webdav OPTIONS method not according to RFC2518.

6376065

max-uncheck function does not work as expected.

6376153

Proxy server 4.0.2 does not update cache for ftp/gopher protocols.

6381373

Proxy server crashes during run after restart if the cache is already warmed.

6381419

The value in Cache-last-checked header is invalid.

6381424

Warning header should contain the host:port value of the agent adding this header.

6382729

Proxy server does not accept utf-8 encoded parameters.

6383301

Proxy server 4.0 has a problem in channel pooling.

6383456

Proxy server 4.0.2 uses high CPU in Linux.

6384616

Proxy Server 4.0.3 online help has typographic errors.

6385902

The format in Set Access Log Preferences does not match with default format.

6387772

Changes in OLH, due to bugs (6325537, 6303619) fixed, need to be localized.

6387901

In the Proxy Server 4.0.2 Administration Guide, in chapter 11, the section “Chaining Proxy Servers” is not clear.

6388156

The headers of cached files can get corrupted.

6390237

Proxy passes incorrect content-length if the response contains double content-length headers.

6392875

regexp-map does not work for connect.

6393573

Proxy 4.0.2 crashes when DNS fn=“dns-config” local-domain-levels=“1”

6394287

SOCKS process polls too often which leads to sockd process taking up as much as 50% of CPU.

6395473

High CPU utilization problem in proxy server 4.0 while handling “slow” clients.

6395889

Windows Server Update Service (WSUS) does not work using proxy server 4.0.2.

6400981

SOCKS5_TIMEOUT value set in socks5.conf is ignored.

6402698

High CPU utilization in FTP client.

6418214

Issues with proxy server 4.0 garbage collection feature.

6424527

Proxy server crashes while processing a request containing an empty cache-control header.

Issues resolved in 4.0.2

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.2

Table 7 Issues Resolved in Sun Java System Web Proxy Server 4.0.2

ID

Summary

5097664

ssl-tunnel-timeout parameter does not work on Windows.

6225025

ftp-listing-width parameter does not work correctly.

6251805

Changes to archive logs results in a crash.

6262277

Changing the minimum timeout value for ICP from 400 to 50.

6292690

In Proxy Server 4, while using IE 6.0 to access the administration interface, can not select the original partition using Manage Sections>Partition .

6292786

Proxy Server does not write transfer time (and other times) to access log.

6308714

Proxy Server fails to start if umask is not set to 022.

6310909

In Proxy Server 4.0.1 point product, version string of the product name was over translated for French locale from 2005Q3 to 2005T3.

6310910

In Proxy Server 4.0.1 point product, many missing apostrophes in installer messages on French locale.

6310944

In Proxy Server 4.0.1 point product, CLI installer fails to display the license.

6310961

In Proxy Server 4.0.1 point product, the “Yes” in the license installer screen on Spanish locale not localized.

6312723

Cannot access SSL sites with IP address while using Proxy Server 4.0.

6313981

In Proxy Server 4, not able to change the value of Rewrite Content Location and Rewrite Headername after creating a new Reverse Mapping using the administration interface.

6315817

Multiple simultaneous CONNECT (SSL Tunneling) requests cause thread starvation.

6330348

High Memory usage by proxy process in Solaris 10 during stress run.

6333995

Memory leak while running stress tests for CONNECT.

6335919

Proxy Server's FTP client does not close a connection when the FTP Server has closed.

6335922

Proxy Server FTP client does not send USER request to FTP Server.

6336550

Error when trying to install Proxy Server 4.0.1 into a directory that contains a Proxy Server 4.0 install.

Issues resolved in 4.0.1

The following table lists the issues resolved in Sun Java System Web Proxy Server 4.0.1.

Table 8 Issues Resolved in Sun Java System Web Proxy Server 4.0.1

ID

Summary

2126143

The same regular expression does not work in URL Filters, but works in Access Control and Routing.

2126380

Memory leak in the ICP process of the proxy server.

6231283

The administration server on Linux Red Hat Advanced Server 3.0, fails to startup.

6237346

The flexanlg utility dumps core while generating a log analysis report using the Extended2 log file format.

6240767

The add/edit listen sockets for the administration server and the proxy server instance do not verify for used ports.

6242627

Localized core messages are not getting displayed.

6243369

Entry of multi-byte characters in the pages related to SOCKS need to be prevented.

6244103

Internal server error is displayed when the Set Connectivity Mode page of the proxy server instances is accessed on a Linux Advanced Server 3.0, Korean locale.

6245408

An internal error is displayed when a newly added partition is accessed if the administration user and the proxy instance user are different.

6249166

Inconsistency in the display of the Control Cluster, Modify Server, and Remove Server pages in the Cluster tab when the host name in the URL is replaced with localhost while accessing the proxy server.

6253014

Crash occurs in the init-proxy SAF when there are more than 9 NameTrans directives in the obj.conf file on Linux Red Hat Advanced Server 3.0.

6254508

The batch update command exits with segmentation fault.

6255214

Cannot edit or remove an entry in the content URL rewriting page consisting of multibyte characters.

6255216

Some LDAP entries in the socks5.conf lead to socksd crash.

6259314

Some of the localized online help pages are not synchronized with the English online help pages.

6261440

Duplicate English online help exists in the installation directory.

6263694

Online Help unavailable for the Add and Replace Compromised Key List and Certificate Revocation List pages.

6263721

The wrong help page is displayed for the Add/Replace Cert pages in the Server Manager.

6274186

Unable to delete a server instance.

6276398

Remove the localized online help from the base workspace.

6285078

Entry for authentication failure of SOCKS request missing from log files.

6285779

Unable to start the proxy server instance if the serverID has a white space.

6285788

SOCKS server crashes when authentication is used.

6289242

HTTP smuggling in Proxy Server 4.

6293449

Proxy Server 4 does not close the connection immediately with the CONNECT method.

6295622

The function ConnAddress is not realized or documented in Proxy Server 4.0.

6296169

The header Cache-last-checked is broken in Proxy Server 4 installed on other locales.

6296225

The Proxy Server instance may intermittently crash when DNS caching is enabled.

6301786

Localized Core Message not getting displayed on Solaris 9 x86, Linux AS 3.0.

6311463

On the proxy process, the number of open file descriptors keeps increasing with time, resulting in the proxy running out of file descriptors and dropping connections.

Known Issues

This section lists the more important known issues and limitations at the time of the Sun Java System Web Proxy Server 4.0.6 release. The issues are listed by category:

Administration

The following table lists the known issues related to the administration user interface.

Table 9 Known Issues in Administration

ID

Summary

6212701

Conflicting error message is displayed when server instance fails to start.

The chances of occurrence of this conflicting error message is minimal as the chances of the administration interface writing wrong information in the configuration file is minimal. It can only occur if the user manually writes wrong information into the configuration file.

6231297

The Restart Required link disappears if changes are made to the SOCKS configuration and the Proxy Server is restarted instead of the SOCKS Server.

6484502

Proxy Server administration interface is not localized.

6509535

Daylight Savings Time (DST) will start in USA from the 2nd Sunday of March and end on the 1st Sunday of November. This will impact the date and time rules of the operating system and JRE.

In the standalone version of proxy server, JRE version compatible with 2007 DST changes is bundled with the installer. However, you need to address the impact on the date and time rules of the operating system by installing the appropriate Operating System patches as explained in step 1 of the Workaround.

For the JavaES 5 installation of proxy server, you need to install the Operating System patches and also the compatible version of JRE . Follow steps 1 and 2 of the Workaround.

Workaround

  1. Download and use the appropriate operating system patches. You can download the Solaris patches from http://sunsolve.sun.com/search/document.do?assetkey=1-26-102775-1.

    For other platforms, download similar DST compatible patches from the Operating System vendor's web site.

  2. For Solaris, Windows, and Linux, run proxy server with JRE 1.4.2_13. For HP-UX, run proxy server with JRE 1.4.2.12.

6558027

On Windows, server identifier with multibyte characters causes server-side createInstance.exe error.

Caching

The following table lists the known issues related to caching.

Table 10 Known Issues in Caching

ID

Summary

6229823

When a new partition is added a default section s0.0 is also created irrespective of the partition size. Warning messages are logged in the errors file.

Workaround

Use the cbuild utility to add the new partition or delete the s0.0 folder under the new cache partition, and restart the proxy server.

The error messages can be ignored.

Installation

The following table lists the known issues related to installation.

Table 11 Known Issues in Installation

ID

Summary

6205683

Windows console installation fails.

6255325

The installer throws an exception and the installation fails on Linux if the user installs the Proxy Server as a non-root user and the /var/opt/sun/install directory does not exist.

6353576

Silent upgrade installation does not work.

6587776

Proxy Server from Java ES 5 on Windows XP displays system error 1067.

6607551

On Windows, uninstalling the patch does not change the Proxy Server version to the previous version number.

Reverting the patch through Uninstaller script does not change the service description name to the previous Proxy Server version due to RenameService.exe utility limitations. Therefore, even after uninstalling the patch, the service description shows the latest Proxy version instead of the previous version number.

Internationalization

The following table lists the known issues related to internationalization.

Table 12 Known Issues in Internationalization

ID

Summary

6233080

The Disable Proxying option does not work for the URL with multibyte data (URL encoded) when routing is set through another proxy server.

6233090

A URL with multibyte data (URL encoded) cannot be mapped.

6253844

Proxy server online help does not support the language zh-cn.

6297168

Starting the server in a different system encoding causes any errors returned by the system in that particular system encoding to be logged in the error log. When viewed through the Administration server, the error log might have characters in system encoding that do not display properly.

Workaround

Change the browser encoding to match the OS locale so that the error log can be properly viewed through the administration interface. But this will be needed every time you move to other pages and then return to View Error Log again.

6300080

Proxy server's content rewriting function is inconsistent.

6526476 and 6526488

In a standalone installation of proxy server on HP-UX, the installation in GUI mode results in the display of corrupted Japanese characters (ID no. 6526476). If the installation is continued, it results in error while creating an instance (ID no. 6526488).

Workaround

You can use either of the following workarounds:

  • Use the CLI mode of installation for Japanese locale on HP-UX.

  • Continue the installation even with the corrupted display of characters. When the installer fails to create an instance, log in to the administration interface and create an instance.

6550995

The following error message is not localized for all the locales:

HTTP7774: received extraneous data following response

6600594

SOCKS

The following table lists the known issues related to SOCKS.

Table 13 Known Issues in SOCKS

ID

Summary

6245453

The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented.

6263389

No error is reported when two instances of SOCKS are started using the same port on Windows.

6285791

SOCKS server start command line issue for JavaES 4 is resolved in this release, but existing instances created in JavaES 4 installation will have the problem even after upgrading to the latest 4.0.3 patches. The new instances created after upgrade will not have this problem. This problem is not there in stand-alone installation of web proxy server.

How to Report Problems and Provide Feedback

If you have problems with Sun Java System Web Proxy Server 4.0.6, contact Sun customer support using one of the following mechanisms:

So that we can best assist you in resolving problems, please have the following information available when you contact support:

  • Description of the problem, including the situation where the problem occurs and its impact on your operation

  • Machine type, operating system version, and product version, including any patches and other software that might be affecting the problem

  • Detailed steps on the methods you have used to reproduce the problem

  • Any error logs or core dumps

Sun Welcomes Your Comments

Sun is interested in improving its documentation and welcomes your comments and suggestions. You can submit your comments by going to: http://docs.sun.com/app/docs/form/comments

Additional Sun Resources

Useful Sun Java Systems information can be found at the following locations:

Searching Sun Product Documentation

Besides searching Sun product documentation from the docs.sun.comSM web site, you can use a search engine of your choice by typing the following syntax in the search field:

<search-term> site:docs.sun.com

For example, to search for “Web Proxy Server”, type the following:

Web Proxy Server site:docs.sun.com

To include other Sun web sites in your search (for example, java.sun.com, www.sun.com, developers.sun.com), use sun.com in place of docs.sun.comin the search field.