ISA Configuration Guide for Microsoft Windows 2000 and NT 4.0
- Introduction
- Microsoft Internet Information Server 5.0 for Windows 2000
- Microsoft Internet Information Server 4.0 for Windows NT Server 4.0
- Apache HTTP Server
- Troubleshooting
Introduction
This document describes the procedures to configure the Microsoft
Internet Information Server to run ISA on Windows 2000 and NT 4.0.
It also describes how to configure Apache by hand.
These instructions can be adapted for other HTTP servers.
NOTE: |
The Server Setup module has not been tested on IIS and
configuration instructions are not provided.
|
This procedure assumes that ISA has been installed with the
following directory structure:
Directory | Description |
isadir\ |
ISA root |
isadir\bin |
ISA perl scripts |
isadir\etc |
server config file |
isadir\html |
url root |
isadir\images |
bitmap files |
* isadir is the directory where you installed ISA.
IMPORTANT: |
ISA must be installed on the same machine as the Informix instance(s)
to be managed. At least one Informix instance must be installed before
installing ISA. The HTTP server you choose to use with ISA must run by
a member of the Informix-Admin group, which will be created when you
install an Informix server. It might be easier to complete the
installation and configuration of ISA if you are logged in as a member
of the Informix-Admin group.
|
IMPORTANT: |
You must use the Perl that is bundled with this
version of ISA. If you are upgrading from an
earlier version of ISA, you may need to change
your HTTP server configuration to
use the new Perl.
|
If you are manually configuring your HTTP server using the
instructions below, and the path to ISA contains a space character,
make sure to specify the ISA path using the alternative ("short")
name. For example, instead of specifying:
C:\Program Files\Informix\ISA
Use this:
C:\Progra~1\Informix\ISA/
You can determine the short name using the dir /x command in the
Command Prompt window.
IMPORTANT: |
To have full DBA access to ISA, you must log in as user informix
to the machine running ISA. Logging in with any other
username results in "read-only" access.
|
Microsoft Internet Information Server 5.0 for Windows 2000
- To put ISA in its default web site,
complete the steps in the section "Default Web Site".
NOTE: |
For Windows 2000 Professional, you must install in the Default Web Site.
|
- To put ISA into a web site other than the default web
site (Windows 2000 Server only),
complete the steps in the section
"Non-Default Web Site".
Default Web Site
To put ISA into the default web site:
-
Select Start -> Settings ->
Control Panel -> Administrative Tools ->
Internet Services Manager.
- Expand the folder Internet Information
Services -> <host> -> Default Web Site.
- Open the Default Web Site Properties dialog box by selecting
Action -> Properties
from the context menu of Default Web Site.
- On the Web Site page, change the
TCP Port to the port number you want
(or retain the default value "80").
-
On the Home Directory page:
- Change the Local Path to
<isadir>\html.
- Select only Read permission.
- Make sure None is selected in
the Execute Permissions listbox.
- On the Documents page, select
Enable Default Document, and add
index.html to the default documents list.
- On the Directory Security page:
- Select the Edit button of
Anonymous access and authentication control.
- Under Authenticated access,
select only Basic authentication (password is sent in clear text).
- Make sure that Anonymous Access checkbox is
not selected.
- Click OK.
- Click OK to close the
Default Web Site Properties dialog box.
- From the context menu of
Default Web Site,
select
Action -> New ->
Virtual Directory.
- Type Next on the first screen of the
Virtual Directory Creation Wizard.
- Type "ISA" into the Alias text box of the second
screen and click Next.
- On the third page, type
"<isadir>\html" into the text box and click Next.
- In the Allow the following Access Permissions screen, deselect all
check boxes and click Next.
- Click Finish.
- From the context menu of the "ISA" virtual directory under the
Default Web Site, select Action -> New ->
Virtual Directory.
- On the second screen, type "bin"
into the Alias text box and
click Next.
- On the third page, type "<isadir>\bin" into the text box
and click Next.
- On the Access Permissions screen, select only
Execute (such as ISAPI applications or CGI) and click Next.
- Click Finish.
(This and following virtual directories are sub-directories of ISA
virtual directory created above).
- Repeat step 10 for <isadir>\etc.
Use the alias "etc", and select only Read Access Permission.
- Repeat step 10 for <isadir>\images.
Use the alias "images", and select only Read Access Permission.
The tree structure should now appear as so:
"Default Web Site"-->
ISA->
bin
etc
images
help (help directory is automatically configured)
- Start the web server if necessary using the
Default Web Site context menu
(Action -> Start).
-
Access the ISA site in a web browser with "http://<host>:<port>>/".
-
Log in as a user of the local Informix-Admin group.
- Close the IIS console window.
Non-Default Web Site
To put ISA into a non-default web site:
NOTE: |
This option is available only for Windows 2000 Server, not Windows 2000
Professional.
|
- From Internet Information Services console, expand the
Internet Information Services
-> <host> folder.
- From the context menu of <host>, select
Action -> New -> Web Site.
This launches the Web Site Creation Wizard.
- Click Next on Welcome screen.
- On following screen, enter a name (such as "ISA") in
Description text box, and select Next.
- On the following screen, enter a
TCP port number that is not currently in use (or retain the default
value "80").
- On the next screen, enter "<isadir>\html" as
path to your home directory and
deselect Allow anonymous access to this web site checkbox.
- On the next screen, select only Read Access
Permission and click Next.
- Click Finish.
-
Complete steps 5
through 12 of the
"Default Web Site"
section.
IMPORTANT: |
When adding virtual directories to the "ISA" web site,
perform the operations
specified for the "Default Web Site" on the new "ISA"
web site instead.
|
NOTE: |
In step 10d, the "ISA" web site contains an "ISA" virtual directory, which will in
turn contain the "bin", "etc", and "images" virtual directories created
in the steps below:
ISA-->
ISA-->
bin
etc
images
|
-
Start the web server if necessary using the "ISA" context
menu (Action -> Start).
- Open the ISA Properties dialog box by selecting
Action -> Properties
from the context menu of the "ISA" web site.
- Select the Home Directory tab.
- Bring up the Application Configuration dialog by clicking the Configuration
pushbutton in the Application Settings section.
- Click the Add pushbutton.
- In the Add/Edit Application Extension Mapping dialog,
enter ".pl" in the
Extension textbox.
- Enter "<drive>:<path\perl.exe> %s %s" in the Executable textbox.
- Click OK.
- Click OK to close the ISA Properties dialog box.
- Start the web server if necessary using the "ISA" web site
context menu.
-
Access the ISA site in a web browser with "http://<host>:<port>/".
-
Log in as a user of the local Informix-Admin group.
Microsoft Internet Information Server 4.0 for Windows NT Server 4.0
To set up the Microsoft Internet Information Server for Windows NT, follow these steps:
- To put ISA in its default web site,
complete the steps in the section "Default Web Site".
- To put ISA into a web site other than the default web
site, complete the steps in the section
"Non-Default Web Site".
Default Web Site
To put ISA into a default web site:
-
Start Internet Service Manager from Start ->
Programs -> Windows NT 4.0 Option Pack
-> Microsoft Internet Information Server.
-
Expand the folder Console Root -> Internet Information Server ->
<host> -> Default Web Site.
-
Open the Default Web Site Properties dialog box by selecting
Properties from the context menu of Default Web Site.
-
On the Web Site page, change the TCP Port to the port number
you want (or retain the default value "80").
-
On the Home Directory page:
- Change the Local Path to "<isadir>\html".
- Select only "Read" under Access Permissions.
- Deselect all items under Content Control (both columns).
- Change Application Settings Permissions to "None".
-
On the Documents page, select Enable Default Document, and add
"index.html" to the default documents list.
-
In the Directory Security page:
- Select the Edit button of Anonymous Access and Authentication Control.
- In the Authentication Methods dialog box, select only Basic Authentication.
- Click OK.
- Click OK on any Inheritance Override dialogs that occur.
-
Click OK to close the Default Web Site Properties dialog box.
-
From the context menu of Default Web Site, select New ->
Virtual Directory:
- In the first page, type "ISA"
into the text box and click Next.
- In the second page, type "<isadir>\html" into the
text box and click Next.
- In the last page, deselect all checkboxes.
- Click Finish.
-
From the context menu of the "ISA" virtual directory under the
Default Web Site,
select New -> Virtual Directory.
- In the first page, type "bin" into the text box and click Next.
- In the second page, type "<isadir>\bin" into the text box and click Next.
- In the last page, select only Allow Execute Access.
- Click Finish.
(This and following virtual directories are sub-directories of ISA
virtual directory created above).
-
Repeat step 10 for "<isadir>\etc".
Use the alias "etc", and select only Allow Read Access in the last page.
-
Repeat step 10 for "<isadir>\images".
Use the alias "images", and select only Allow Read Access in the last page.
-
Start the web server if necessary using the Default Web Site
context menu.
-
Access the ISA site in a web browser with the URL
"http://<host>:<port>/".
-
Log in as a user of the local Informix-Admin group.
-
Close the console window.
Click Yes on the Save
Settings dialog.
Non-Default Web Site
To put ISA into its own web site other than the
default web site:
-
Expand the folder Console Root ->
Internet Information Server -> <host>.
-
From the context menu of <host>, select
New -> Web Site:
- In the Welcome page, enter a name (such as "ISA").
- In the second page, enter a TCP port number that is not currently in use.
- In the third page, enter "<isadir>\html" as the home directory and
deselect Allow anonymous access.
- In the last page, select only Allow Read Access.
- Click Finish.
- Then, complete steps 5 through 14 of the
"Default Web Site"
section.
IMPORTANT: |
When adding virtual directories to the "ISA" web site,
perform the operations
specified for the "Default Web Site" on the new "ISA"
web site instead.
|
-
Open the ISA Properties dialog box by selecting Properties
from the context menu of the "ISA" web site.
-
Select the Home Directory tab.
- Bring up the Application Configuration
dialog by clicking the Configuration pushbutton in the Application Settings
section.
- Click the Add pushbutton.
- In the Add/Edit Application Mapping
dialog, enter ".pl" in the Extension textbox.
- Enter
"<drive>:<path>\Perl.exe> %s %s" in the Executable textbox.
- Enter "PUT,DELETE" in the Method Exclusions textbox.
- Click OK.
- Click OK to close the ISA Properties dialog box.
-
Start the web server if necessary using the "ISA" web site
context menu.
-
Access the ISA site with "http://<host>:<port>/".
-
Log in as a user of the local Informix-Admin group.
Apache HTTP Server
-
Locate the httpd.conf file currently used by your Apache
installation and open it in an editor such as Notepad. These
instructions assume that the configuration is valid.
-
In the following examples, replace "/isadir" with the actual
path to your installation.
-
Decide whether ISA should be the default item available on this
HTTP server.
-
If so, modify the DocumentRoot setting in the http.conf
file:
DocumentRoot "/isadir/html"
-
Otherwise, add this alias to the httpd.conf file:
Alias /isa/ "/isadir/html/"
-
Add all these to the httpd.conf file:
<Directory "/isadir/html">
Options Indexes MultiViews
AllowOverride AuthConfig
Order allow,deny
Allow from all
</Directory>
Alias /isa/images/ "/isadir/images/"
<Directory "/isadir/images">
Options Indexes MultiViews
AllowOverride AuthConfig
Order allow,deny
Allow from all
</Directory>
Alias /isa/etc/ "/isadir/etc/"
<Directory "/isadir/etc">
Options Indexes MultiViews
AllowOverride AuthConfig
Order allow,deny
Allow from all
</Directory>
ScriptAlias /isa/bin/ "/isadir/bin/"
<Directory "/isadir/bin">
AllowOverride AuthConfig
Options None
Order allow,deny
Allow from all
</Directory>
-
Enable security for these directories:
/isadir/bin
/isadir/html
/isadir/images
One way to do this is by placing a file named .htaccess in each of
these directories with the following contents:
AuthType Basic
AuthName "Informix Server Administrator"
AuthUserFile /path/to/passwd/file
require valid-user
-
Use the htpasswd program, included with Apache, to create the
passwd file.
-
Make sure that Apache runs as a member of Informix-Admin
group.
Troubleshooting
Port already in use
The port number you choose for your web server must not be in use by
another program. If you cannot access the ISA server after starting
it, check the HTTP server's error logs for a message like
port already in use
.
To fix this, change your HTTP server's configuration
to refer to a different port number and restart the HTTP server.
403 error
HTTP Error 403
403.2 Forbidden: Read Access Forbidden
This error can be caused if there is no default page available and directory
browsing has not been enabled for the directory, or if you are trying to
display an HTML page that resides in a directory marked for Execute or
Script permissions only.
If you have followed the configuration procedure correctly, but still
get HTTP Error 403
, you might need to configure PERL script mapping
manually.
- Start Regedt32.exe
- Open HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\ScriptMap.
- Add a new value as shown below:
Value Name: .pl
Data Type: REG_SZ
String value: <path>\perl.exe %s %s
- Restart the WWW service (Control Panel -> Services
-> IIS Admin Service and World Wide Web Publishing Service).