Contents

Getting Started with Your Internet POWERsolutions Server
How to Configure TCP/IP on Your Server
Using a Web Browser for System Administration
Certificate Services
Server Security
Creating Web Services

Thanks for choosing our products! We look forward to serving your needs in the future.

Getting Started with Your Internet POWERsolutions Server

In this POWERsolution, IBM has:

To get your web server up and running, you must:

1. Follow the directions for configuring TCP/IP on your server. These directions are on the following pages.
2. Examine the on-line documentation included with the server and decide how you want to configure your server. You can access this on-line documentation by pressing the Help button which appears on most of the Enterprise administration server's forms.
3. Configure the Netscape Enterprise server using a web browser. The steps required to do this are describe in Using a Web Browser for System Administration.

How to Configure the TCP/IP on your Server

Using a Character-Only tty Console

Using a Graphics Console

If you are using a graphics terminal as the console to use and access your web server, follow these instructions:

1. Power-up your machine.
2. In the lower portion of the Help Viewer screen on the Installation Assistant Task List, click on the airplane icon next to the Configure Network Communications option. This will launch the System Management Interface Tool (SMIT).
3. In SMIT, click on the option for TCP/IP Startup.
4. Select your primary interface, usually en0 (for Ethernet) or tr0 (for Token-Ring).
5. Input your network settings for the following attributes and hit Enter (consult your LAN administrator if you don't know which network settings will be used by your server).

     HOSTNAME...........................................<localhost>
     Internet ADDRESS (dotted decimal)..................<>
     Network MASK (dotted decimal)......................<>
     Network INTERFACE..................................en0
     NAMESERVER
              Internet ADDRESS (dotted decimal).........<>
              DOMAIN Name...............................<>
     Default GATEWAY Address............................<>
     (dotted decimal or symbolic name)
     Your CABLE Type....................................N/A
     START Now..........................................yes
   
   

   Note: Your system was configured with a HOSTNAME of localhost; change the hostname to your desired name. Be sure to enter your fully qualified hostname here (e.g., serverName.domainName).

   Note: Internet ADDRESS and HOSTNAME must be defined for the server to properly connect into your network. The other parameters are optional and must only be entered if they are needed by your site. Some parameters specific to the communications adapter may also be required.

   If you see a TCP/IP error message like: Bind error to port 80 - already in use. ignore it. Your web server has been pre-configured to use this port.

6. Exit SMIT by pressing the F12 key.
7. At this point, you may choose to perform any of the other installation assistant tasks on the menu.
8. When complete, click on the airplane icon next to the Task Completed option.
9. The AIX Welcome screen will appear. Press the Options button and select Command Line Login.
10. Login as root.
11. Run the script /usr/ns-ent-home/ns-update to update your Enterprise server with your new TCP/IP configuration.
12. Type exit. The AIX Welcome screen will appear.
13. Type root in the user name field and press the OK button.

At this point your machine is running AIX, the Common Desktop Environment, TCP/IP, and Enterprise's administration and web servers.

Using a Web Browser for System Administration

One of the first things you'll want to do is change your server's administration id, administration password, and the hosts that are allowed to administer your server. To do this:

1. Access the administration server by typing the following into the Navigator's Location field:

   http://<servername>.<your_domain>:<port_number>/

   For example, http://rs6000.ibm.com:9999/

   The port number for your administration server is 9999.

   If your Netscape Navigator is not running, open a DT Terminal and type:

   netscape http://<servername>.<your_domain>:<port_number>/ &

   If for some reason your administration server is not running, the Netscape Navigator will display an error message complaining that the network connection was refused by the server. If you see this error, restart the administration server by entering the command /usr/ns-ent-home/start-admin and try again.

   If you see the message: Error: Can't open display, then your DISPLAY environment variable is not set to the correct value.

2. The administration server will first prompt you for a username and password. Your userid is admin and your password is admin. The Netscape Server Selector appears. For more information on this screen and configuring Enterprise in general, please refer to the on-line Enterprise Server Administrator's Guide.
3. Select Configure Administration from the Server Selector. The Administration Configuration screen appears.
4. Select Access Control. The Administration Server Access Control form appears. Type in your changes. If you need help with any of the fields on this form, select the Help button at the bottom of the screen.

The first time you select the link to the right of the Server Selector's on/off switch, you may see the following message: "Warning manual edits not loaded. Some configuration files have been edited by hand. Use the Apply button on the upper-right side of the screen to load the latest configuration files." If you see this message click the Apply button and load the configuration files (the files were changed by ns-update). Note that you might have to increase the width of the Netscape Navigator window to see the Apply button.

Certificate Services

For more information about installing the certificate, select the Install Certificate link from the administration server's encryption forms. A detailed description of the certification process is available on the World Wide Web at the following URL: http://www.verisign.com/netscape/.

Current Certification Authorities

Verisign, Inc.
2593 Coast Avenue
Mountain View, CA 94043 USA
Phone: 1-415-961-7500
Fax: 1-415-961-7300
Email Certificate Requests: netscape-cert@verisign.com
Information and Pricing: http://www.verisign.com/netscape/.

Server Security

The Netscape Enterprise server allows Netscape Navigator (or any other SSL-compatible browser) to authenticate the server and subsequently encrypt communications between the client and the server. This allows secure communications across the network.

As a server owner, you are responsible for maintaining the integrity of your RS/6000 and the operating environment that your products are using. There are many sources of information to help you understand the issues involved with securing your system from unwanted intruders

The resources listed below introduce many concepts related to computer system and network security. You can access these documents on the Internet, using the Netscape Navigator browser.

• Site Security Handbook, (URL: gopher://ds1.internic.net:70/0/fyi/fyi8.txt).
• Securing Internet Information Servers, Computer Security Technology Center at Lawrence Livermore National Laboratory (URL: ftp://ciac.llnl.gov/pub/ciac/ciacdocs/ciac2308.txt).

Creating Web Services

Netscape Communications has compiled a directory of information about creating web services, including HTML tutorials, CGI programming, and image processing. To access this information, select How to Create Web Services from the Help menu at the top of the Netscape Navigator browser window, or connect to: http://home.netscape.com/home/how-to-create-web-services.html.