ISA Configuration Guide for Microsoft Windows 2000 and NT 4.0

  1. Introduction
  2. Microsoft Internet Information Server 5.0 for Windows 2000
  3. Microsoft Internet Information Server 4.0 for Windows NT Server 4.0
  4. Apache HTTP Server
  5. Troubleshooting

Introduction

This document describes the procedures to configure the Microsoft Internet Information Server to run ISA on Windows 2000 and NT 4.0. It also describes how to configure Apache by hand. These instructions can be adapted for other HTTP servers.

NOTE: The Server Setup module has not been tested on IIS and configuration instructions are not provided.

This procedure assumes that ISA has been installed with the following directory structure:

Directory Description
isadir\ ISA root
isadir\bin ISA perl scripts
isadir\etc server config file
isadir\html url root
isadir\images bitmap files

* isadir is the directory where you installed ISA.

IMPORTANT: ISA must be installed on the same machine as the Informix instance(s) to be managed. At least one Informix instance must be installed before installing ISA. The HTTP server you choose to use with ISA must run by a member of the Informix-Admin group, which will be created when you install an Informix server. It might be easier to complete the installation and configuration of ISA if you are logged in as a member of the Informix-Admin group.

IMPORTANT: You must use the Perl that is bundled with this version of ISA. If you are upgrading from an earlier version of ISA, you may need to change your HTTP server configuration to use the new Perl.

If you are manually configuring your HTTP server using the instructions below, and the path to ISA contains a space character, make sure to specify the ISA path using the alternative ("short") name. For example, instead of specifying:

C:\Program Files\Informix\ISA
Use this:
C:\Progra~1\Informix\ISA/

You can determine the short name using the dir /x command in the Command Prompt window.

IMPORTANT: To have full DBA access to ISA, you must log in as user informix to the machine running ISA. Logging in with any other username results in "read-only" access.

Microsoft Internet Information Server 5.0 for Windows 2000

Default Web Site

To put ISA into the default web site:
  1. Select Start -> Settings ->  Control Panel -> Administrative Tools ->  Internet Services Manager.

  2. Expand the folder Internet Information Services -> <host> -> Default Web Site.

  3. Open the Default Web Site Properties dialog box by selecting Action -> Properties from the context menu of Default Web Site.

  4. On the Web Site page, change the TCP Port to the port number you want (or retain the default value "80").

  5. On the Home Directory page:
    1. Change the Local Path to <isadir>\html.
    2. Select only Read permission.
    3. Make sure None is selected in the Execute Permissions listbox.

  6. On the Documents page, select Enable Default Document, and add index.html to the default documents list.

  7. On the Directory Security page:
    1. Select the Edit button of Anonymous access and authentication control.
    2. Under Authenticated access, select only Basic authentication (password is sent in clear text).
    3. Make sure that Anonymous Access checkbox is not selected.
    4. Click OK.

  8. Click OK to close the Default Web Site Properties dialog box.

  9. From the context menu of Default Web Site, select Action -> New ->  Virtual Directory.

    1. Type Next on the first screen of the Virtual Directory Creation Wizard.
    2. Type "ISA" into the Alias text box of the second screen and click Next.
    3. On the third page, type "<isadir>\html" into the text box and click Next.
    4. In the Allow the following Access Permissions screen, deselect all check boxes and click Next.
    5. Click Finish.

  10. From the context menu of the "ISA" virtual directory under the Default Web Site, select Action -> New ->  Virtual Directory.
    1. On the second screen, type "bin" into the Alias text box and click Next.
    2. On the third page, type "<isadir>\bin" into the text box and click Next.
    3. On the Access Permissions screen, select only Execute (such as ISAPI applications or CGI) and click Next.
    4. Click Finish.
    (This and following virtual directories are sub-directories of ISA virtual directory created above).

  11. Repeat step 10 for <isadir>\etc. Use the alias "etc", and select only Read Access Permission.

  12. Repeat step 10 for <isadir>\images. Use the alias "images", and select only Read Access Permission.

    The tree structure should now appear as so:
    "Default Web Site"-->
       		ISA->
         		  bin
         		  etc
         		  images
                      help (help directory is automatically configured)
    

  13. Start the web server if necessary using the Default Web Site context menu (Action -> Start).

  14. Access the ISA site in a web browser with "http://<host>:<port>>/".

  15. Log in as a user of the local Informix-Admin group.

    NOTE: See the "Troubleshooting" section if you encounter an error.

  16. Close the IIS console window.

Non-Default Web Site

To put ISA into a non-default web site:

NOTE: This option is available only for Windows 2000 Server, not Windows 2000 Professional.

  1. From Internet Information Services console, expand the Internet Information Services  -> <host> folder.

  2. From the context menu of <host>, select Action -> New -> Web Site.

    This launches the Web Site Creation Wizard.
    1. Click Next on Welcome screen.
    2. On following screen, enter a name (such as "ISA") in Description text box, and select Next.
    3. On the following screen, enter a TCP port number that is not currently in use (or retain the default value "80").
    4. On the next screen, enter "<isadir>\html" as path to your home directory and deselect Allow anonymous access to this web site checkbox.
    5. On the next screen, select only Read Access Permission and click Next.
    6. Click Finish.
    7. Complete steps 5 through 12 of the "Default Web Site" section.

      IMPORTANT: When adding virtual directories to the "ISA" web site, perform the operations specified for the "Default Web Site" on the new "ISA" web site instead.

      NOTE: In step 10d, the "ISA" web site contains an "ISA" virtual directory, which will in turn contain the "bin", "etc", and "images" virtual directories created in the steps below:
      ISA-->
        ISA-->
          bin
          etc
          images
    8. Start the web server if necessary using the "ISA" context menu (Action -> Start).

  3. Open the ISA Properties dialog box by selecting Action -> Properties from the context menu of the "ISA" web site.
    1. Select the Home Directory tab.
    2. Bring up the Application Configuration dialog by clicking the Configuration pushbutton in the Application Settings section.
    3. Click the Add pushbutton.
    4. In the Add/Edit Application Extension Mapping dialog, enter ".pl" in the Extension textbox.
    5. Enter "<drive>:<path\perl.exe> %s %s" in the Executable textbox.
    6. Click OK.
    7. Click OK to close the ISA Properties dialog box.

  4. Start the web server if necessary using the "ISA" web site context menu.

  5. Access the ISA site in a web browser with "http://<host>:<port>/".

  6. Log in as a user of the local Informix-Admin group.

Microsoft Internet Information Server 4.0 for Windows NT Server 4.0

To set up the Microsoft Internet Information Server for Windows NT, follow these steps:

Default Web Site

To put ISA into a default web site:

  1. Start Internet Service Manager from Start ->  Programs -> Windows NT 4.0 Option Pack  -> Microsoft Internet Information Server.

  2. Expand the folder Console Root -> Internet Information Server ->  <host> -> Default Web Site.

  3. Open the Default Web Site Properties dialog box by selecting Properties from the context menu of Default Web Site.

  4. On the Web Site page, change the TCP Port to the port number you want (or retain the default value "80").

  5. On the Home Directory page:
    1. Change the Local Path to "<isadir>\html".
    2. Select only "Read" under Access Permissions.
    3. Deselect all items under Content Control (both columns).
    4. Change Application Settings Permissions to "None".

  6. On the Documents page, select Enable Default Document, and add "index.html" to the default documents list.

  7. In the Directory Security page:
    1. Select the Edit button of Anonymous Access and Authentication Control.
    2. In the Authentication Methods dialog box, select only Basic Authentication.
    3. Click OK.
    4. Click OK on any Inheritance Override dialogs that occur.

  8. Click OK to close the Default Web Site Properties dialog box.

  9. From the context menu of Default Web Site, select New ->  Virtual Directory:
    1. In the first page, type "ISA" into the text box and click Next.
    2. In the second page, type "<isadir>\html" into the text box and click Next.
    3. In the last page, deselect all checkboxes.
    4. Click Finish.

  10. From the context menu of the "ISA" virtual directory under the Default Web Site, select New -> Virtual Directory.
    1. In the first page, type "bin" into the text box and click Next.
    2. In the second page, type "<isadir>\bin" into the text box and click Next.
    3. In the last page, select only Allow Execute Access.
    4. Click Finish.

    (This and following virtual directories are sub-directories of ISA virtual directory created above).

  11. Repeat step 10 for "<isadir>\etc". Use the alias "etc", and select only Allow Read Access in the last page.

  12. Repeat step 10 for "<isadir>\images". Use the alias "images", and select only Allow Read Access in the last page.

  13. Start the web server if necessary using the Default Web Site context menu.

  14. Access the ISA site in a web browser with the URL "http://<host>:<port>/".

  15. Log in as a user of the local Informix-Admin group.

    NOTE: See 403 error in the "Troubleshooting" section if you encounter an error.

  16. Close the console window. Click Yes on the Save Settings dialog.

Non-Default Web Site

To put ISA into its own web site other than the default web site:
  1. Expand the folder Console Root ->  Internet Information Server -> <host>.

  2. From the context menu of <host>, select New -> Web Site:
    1. In the Welcome page, enter a name (such as "ISA").
    2. In the second page, enter a TCP port number that is not currently in use.
    3. In the third page, enter "<isadir>\html" as the home directory and deselect Allow anonymous access.
    4. In the last page, select only Allow Read Access.
    5. Click Finish.
    6. Then, complete steps 5 through 14 of the "Default Web Site" section.

      IMPORTANT: When adding virtual directories to the "ISA" web site, perform the operations specified for the "Default Web Site" on the new "ISA" web site instead.

  3. Open the ISA Properties dialog box by selecting Properties from the context menu of the "ISA" web site.
    1. Select the Home Directory tab.
    2. Bring up the Application Configuration dialog by clicking the Configuration pushbutton in the Application Settings section.
    3. Click the Add pushbutton.
    4. In the Add/Edit Application Mapping dialog, enter ".pl" in the Extension textbox.
    5. Enter "<drive>:<path>\Perl.exe> %s %s" in the Executable textbox.
    6. Enter "PUT,DELETE" in the Method Exclusions textbox.
    7. Click OK.
    8. Click OK to close the ISA Properties dialog box.

  4. Start the web server if necessary using the "ISA" web site context menu.

  5. Access the ISA site with "http://<host>:<port>/".

  6. Log in as a user of the local Informix-Admin group.

Apache HTTP Server

  1. Locate the httpd.conf file currently used by your Apache installation and open it in an editor such as Notepad. These instructions assume that the configuration is valid.

  2. In the following examples, replace "/isadir" with the actual path to your installation.

  3. Decide whether ISA should be the default item available on this HTTP server.

  4. Add all these to the httpd.conf file:
            <Directory "/isadir/html">
                Options Indexes MultiViews
                AllowOverride AuthConfig
                Order allow,deny
                Allow from all
           </Directory>
    
            Alias /isa/images/ "/isadir/images/"
    
           <Directory "/isadir/images">
                Options Indexes MultiViews
                AllowOverride AuthConfig
                Order allow,deny
                Allow from all
            </Directory>
    
            Alias /isa/etc/ "/isadir/etc/"
    
            <Directory "/isadir/etc">
                Options Indexes MultiViews
                AllowOverride AuthConfig
                Order allow,deny
                Allow from all
            </Directory>
    
            ScriptAlias /isa/bin/ "/isadir/bin/"
    
           <Directory "/isadir/bin">
                AllowOverride AuthConfig
                Options None
                Order allow,deny
                Allow from all
            </Directory>
    
  5. Enable security for these directories:

      /isadir/bin
      /isadir/html
      /isadir/images
    

    One way to do this is by placing a file named .htaccess in each of these directories with the following contents:
            AuthType Basic
            AuthName "Informix Server Administrator"
            AuthUserFile /path/to/passwd/file
            require valid-user
    

  6. Use the htpasswd program, included with Apache, to create the passwd file.

  7. Make sure that Apache runs as a member of Informix-Admin group.

Troubleshooting

Port already in use

The port number you choose for your web server must not be in use by another program. If you cannot access the ISA server after starting it, check the HTTP server's error logs for a message like port already in use. To fix this, change your HTTP server's configuration to refer to a different port number and restart the HTTP server.

403 error

HTTP Error 403
403.2 Forbidden: Read Access Forbidden

This error can be caused if there is no default page available and directory browsing has not been enabled for the directory, or if you are trying to display an HTML page that resides in a directory marked for Execute or Script permissions only.

If you have followed the configuration procedure correctly, but still get HTTP Error 403, you might need to configure PERL script mapping manually.
  1. Start Regedt32.exe

  2. Open HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters\ScriptMap.

  3. Add a new value as shown below:
              
              Value Name: .pl
              Data Type: REG_SZ
              String value: <path>\perl.exe %s %s
  4. Restart the WWW service (Control Panel -> Services  -> IIS Admin Service and World Wide Web Publishing Service).