You are on page 1of 40

Contents

Page

Preface

vii

Related publications

.

.

.

.

.

Ordering Cray Research publications
Conventions

.

.

Reader comments

.

.

.

.

.

.

.

.

.

.

.

.

.

.

vii

.

.

.

.

.

.

.

.

.

.

.

.

.

.

vii

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

viii

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

viii

Product Overview [1]

1

How does DynaWeb work?

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

2

DynaWeb directory structure

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

3

Executable files

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

5

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

7

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

7

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

8

Hardware and software platforms supported

.

.

.

.

.

.

.

.

.

.

.

.

8

Home page

.

Access and error logs
CGI scripts

.

.

.

Administering a DynaWeb Server [2]
Running DynaWeb

.

.

.

.

.

Running DynaWeb as a server

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

11

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

11

.

.

.

.

.

.

.

.

.

.

.

.

.

.

12

.

.

.

.

.

.

.

.

12

.

.

.

.

.

.

.

.

13

Running DynaWeb as a CGI script
Procedure 1:

Setting up DynaWeb as a CGI script

Upgrading the document base

SG–6104 1.2

11

.

.

.

.

.

.

Cray Research, Inc.

.

.

iii

Contents

Online Software Publications Administrator’s
Guide
Page

Procedure 2:
Example 1:

Upgrade steps
Upgrade example

Converting CrayDoc files
Procedure 3:
Example 2:

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

14

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

14

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

16

.

.

.

.

.

.

.

.

.

.

.

.

17

CrayDoc conversion steps
CrayDoc conversion

Managing access logs

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

18

.

.

.

.

.

.

.

.

.

.

.

.

.

.

19

Security and HTTP Authentication [3]
Authentication configuration parameters
Syntax of DWEB_HOST_ACL
Example 3:

.

.

.

.

.

.

.

.

.

.

.

.

.

.

22

.

.

.

.

.

.

.

.

.

.

.

.

.

23

.

.

.

.

.

.

.

.

.

.

24

.

.

.

.

.

.

.

.

.

.

.

.

24

.

.

.

.

.

.

.

.

.

24

.

.

.

DWEB_HOST_ACL and list parsing

Enabling HTTP Authentication
Procedure 4:

.

.

DWEB_HOST_ACL and wildcards

Parsing of DWEB_HOST_ACL
Example 4:

.

.

.

.

.

Enabling authentication

Maintaining access lists

.

.

Procedure 5:

Adding users

Procedure 6:

Verifying users

Procedure 7:

Deleting users

Authentication troubleshooting

.

.

.

.

.

.

.

.

.

.

.

.

25

.

.

.

.

.

.

.

.

.

.

.

.

25

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

26

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

26

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

27

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

27

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

.

28

Index

iv

21

29

Cray Research, Inc.

SG–6104 1.2

Online Software Publications Administrator’s
Guide

Contents

Page

Figures
Figure 1.

DynaWeb directory structure

.

.

.

.

.

.

.

.

.

.

.

.

.

4

.

.

8

Tables
Table 1.

SG–6104 1.2

Supported platforms and corresponding DynaWeb software files

Cray Research, Inc.

v

Cray Research employees may send electronic mail to orderdsk (UNIX system users). available from the URL http://dynaweb. release 1. vii .2. Inc. (EBT). To order a document. Related publications The following documents contain additional information that may be helpful: • Online Software Publications Installation Guide. The Cray DynaWeb server provides online access to Cray Research documentation by using the DynaWeb server from Electronic Book Technologies. SG–6104 1.com/ebtdoc/client Ordering Cray Research publications The User Publications Catalog.ebt.2 Cray Research. Minnesota. an EBT publication. or send a facsimile of your request to fax number +1–612–452–0141. either call the Distribution Center in Mendota Heights.Preface This document describes administration of the Cray Research Online Software Publications server (Cray DynaWeb server). Customers who subscribe to the CRInform program can order software release packages electronically by using the Order Cray Software option. Customers outside of the United States and Canada should contact their local service organization for ordering and documentation information. at +1–612–683–5907. Cray Research customers who subscribe to the Cray Inform (CRInform) program can access this information on the CRInform system. publication SG–6105 • DynaWeb Client User Guide. publication CP–0099. Inc. describes the availability and content of all Cray Research hardware and software documents that are available to customers.

files. Inc.com • Contact your Cray Research representative and ask that a Software Problem Report (SPR) be filed. Minnesota. please tell us. Output is shown in nonbold. and NO-LICENSE for the release name. messages. signals. through the Customer Service Call Center. path names. routines. using the following Internet address: publications@timbuk. Reader comments If you have comments about the technical accuracy.cray. and programming language structures. • Call our Software Publications Group in Eagan.Preface Online Software Publications Administrator’s Guide Conventions The following conventions are used throughout this document: Convention Meaning command This fixed-space font denotes literal items such as commands. content. Use PUBLICATIONS for the group name. fixed-space font denotes literal items that the user enters in interactive sessions. variable Italic typeface denotes variable entries and words or concepts being defined. user input This bold. using either of the following numbers: 1–800–950–2729 (toll free from the United States and Canada) +1–612–683–5600 viii Cray Research. SG–6104 1.2 . You can contact us in any of the following ways: • Send us electronic mail from any system connected to the Internet. fixed-space font. PUBS for the command. or organization of this document.

SG–6104 1.2 Cray Research. We value your comments and will respond to them promptly. ix . Minnesota. at fax number +1–612–683–5599.Online Software Publications Administrator’s Guide Preface • Send a facsimile of your comments to the attention of “Software Publications Group” in Eagan. Inc.

.

the server automatically separates large documents into smaller units and generates a table of contents (TOC) for the documents. (EBT). If you choose to run the server within your network.2 Cray Research. you can add new Cray Research documents and updates to documents as needed. delivering documents to your Web browser. 1 . Inc.Product Overview [1] The Cray Research Online Software Publications server (Cray DynaWeb server) makes Cray Research documents available to World Wide Web (WWW) browsers. which provides access to the documents in the DynaWeb directories. Users can navigate through the TOC hierarchy. SG–6104 1.cray.com) or from a local installation on your network • Accommodates searching across document groupings • Integrates with other WWW servers The DynaWeb server transforms the SGML source files to hypertext mark-up language (HTML). selecting information managed by the Web browser. The Cray DynaWeb server provides the following benefits to Cray users: • Serves Cray Research electronic documents to Web browsers such as Netscape Navigator • Provides access to documents from the Cray Research WWW home page (http://www. The Cray DynaWeb server is based on DynaWeb software produced by Electronic Book Technologies. To enable browsing of large manuals. The Cray DynaWeb server provides a user interface called the Online Library. Inc. DynaWeb is a commercial-grade Web server that serves documents marked up in a standard generalized mark-up language (SGML) implementation to Web browsers for rapid navigation and searching.

if you have an Internet connection. a section of text. The server can handle up to 256 simultaneous requests. ports over 1024 are accessible to users external to your site. Online Library documents (mostly manuals) are binary files that contain SGML-tagged text and graphics. which does not require super user (root) privileges. by default) so that root privileges are not required to run the DynaWeb daemon. references are made to the DynaWeb directory structure.2 . However. lasting only long enough for the server to process the requested Cray Research. DynaWeb uses a port number greater than 1024 (8080. This manual uses the path name /path/servroot to define the path to the DynaWeb server root directory. If a large block of text is requested. This is a security risk for your site. Consequently. Inc.Product Overview [1] Online Software Publications Administrator’s Guide Note: Throughout this chapter. a DynaWeb server listens for hypertext transfer protocol (HTTP) requests from browsers. The directories above the DynaWeb server root directory (servroot) can be whatever you want. SG–6104 1. you must disable external access to port 8080 on the DynaWeb server or employ other access control measures for port 8080 on that machine. or an image. Like any Web server. By default. Each request contains a uniform resource locator (URL) that identifies the server and a particular block of data such as a home page. The connections are short-lived. The SGML-to-HTML converter transforms each request for all or part of an online document into an HTML-tagged text stream. 1. and a violation of copyright and licensing restrictions under which Cray Research and its customers must operate. the converter dynamically builds a table of contents for the text. the Cray DynaWeb server listens for incoming requests on port 8080. ! 2 Caution: As noted above.1 How does DynaWeb work? Documents in DynaWeb are stored in SGML and converted to HTML when a Web browser requests the document.

see Section 2. page 12. the server terminates its connection.02. another HTTP server can serve Online Library documents. however. As an alternative to running DynaWeb as a server. the HTTP server runs the DynaWeb SGML-to-HTML converter as a common gateway interface (CGI) script. 1.1 Note: The Cray DynaWeb server has been tested using Netscape Navigator 2.Online Software Publications Administrator’s Guide Product Overview [1] data and send it to the browser. Inc. In this case. For information on running DynaWeb as a CGI script. tables are not fully supported.2 Cray Research. Other browsers may work but are not explicitly supported by the server.2. 3 . After sending the requested information.2 DynaWeb directory structure The following shows the DynaWeb directory structure: 1 Deferred implementation. The server is also accessible using the Mosaic and Lynx browsers. SG–6104 1.1.

data/config Configuration files for DynaWeb. DynaWeb directory structure Directories below path are created by the installation process. The DynaWeb directories and their contents are as follows: 4 Directory Description bin Executable files. data/security Licensing file. Inc.2 . cgi-bin Sample CGI scripts.Product Overview [1] Online Software Publications Administrator’s Guide path binplatform cgi-bin data logs config servroot styles security C docs icons images library alt help summary a10528 Figure 1. SG–6104 1. Cray Research.

Icon files for the control buttons used by DynaWeb. servroot/library Online Library subdirectories. servroot/docs HTML files that provide the interface for the Online Library. servroot/C Error message pages and HTTP error codes. which contain the Online Library documents. 5 .3 Executable files The DynaWeb installation procedure places executable files (programs) in the DynaWeb /path/binplatform directory.Online Software Publications Administrator’s Guide Product Overview [1] data/styles Style sheet templates for SGML-to-HTML conversion.2 Cray Research. This directory has one subdirectory: alt Alternative icons for some DynaWeb buttons. This directory has two subdirectories: servroot/icons help HTML files that provide help for the Online Library interface. You will not use these files unless you want to implement additional security measures as described in Chapter 3. SG–6104 1. logs Log files produced by DynaWeb. including the home page. 1. servroot The DynaWeb root directory. All information below this directory is publicly accessible. Inc. summary HTML files that provide summary pages for documents in the Online Library. servroot/images Image (graphics) files used by DynaWeb and the Online Library. page 21.

For more information. SG–6104 1. the dwpasswd program is used to add users and their passwords to a password file that it creates.2 . Inc. It also verifies users.sh script is provided to include in normal startup procedures called in the event of a system shutdown.dynaweb. page 11.stop.Product Overview [1] Online Software Publications Administrator’s Guide The installation also places the start.sh scripts in the /path directory. page 21. The system.startup.stop.dynaweb. see Chapter 3.1. Cray Research.1.startup.sh script to start the server manually. You can use the start.sh and system.dynaweb. Using the dynaweb program is described in Section 2. dwpasswd If the DynaWeb server is using HTTP authentication to limit access to the server.dynaweb. The programs in the binplatform directory are as follows: 6 Program Description dynaweb The dynaweb program is the DynaWeb server.

This program is used internally by the DynaWeb server.4 Home page The Online Library home page is /path/servroot/docs/homepage. If you prefer.org/hypertext/WWW/Tools/Overview. and the type of information requested. the number of requests. By default. 1. For more information and some sample filtering tools.5 Access and error logs DynaWeb supports an access log file and an error log file.html The log files can grow large and should be cleaned up as part of your regular maintenance procedures. page 12.w3.2 Cray Research.1. Inc.2. you may deactivate logging of accesses by changing the value of DWEB_ACCESSLOG to OFF in the DynaWeb 2 Deferred implementation. it is not recommended. The Online Library accesses documents by using symbolic links that should not be altered. 7 . as described in Section 2. All links to Online Library documents are provided through this home page and the pages that are linked to it. such as the total number of accesses. the server logs information to both files.2 1.html. which allows you to use any of the available filtering tools for NCSA or CERN servers. You can use scripts to extract useful statistics. The program can also be run as a CGI script.Online Software Publications Administrator’s Guide dwsgml2html Product Overview [1] The dwsgml2html program converts SGML to HTML for transmission over the Internet and interpretation by Web browsers. see the following URL: http://www. ! Caution: While it is possible to add links to or change references on the home page. SG–6104 1. The log files are fully compatible with the HTTPD protocol.

Supported platforms and corresponding DynaWeb software files 3 8 Vendor Hardware OS and levels Software file DEC Alpha series OSF/1 3.tar IBM RS 6000 AIX 3. page 19. SG–6104 1.7 Hardware and software platforms supported Hardware platform support for the Cray DynaWeb server is dictated by EBT’s support for DynaWeb. Cray Research.x) dynaweb10_ibm. You can use an HTML form as an interface to an external CGI script that replaces parameters with the value a user specifies in the form. see the following URL: http://hoohoo.2+ (not 4.cfg configuration file.ncsa.2 .3 CGI defines an interface that lets your server run scripts.tar Hewlett-Packard HP 9000 series HP-UX 9.4.6 CGI scripts DynaWeb supports CGI scripts.edu/cgi/ 1.x dynaweb10_hp. Table 1. including a complete description of CGI. The following lists the hardware and software supported.tar Deferred implementation.Product Overview [1] Online Software Publications Administrator’s Guide /path/data/config/dynaweb. 1.uiuc. Inc. Sample CGI scripts can be found in the path/cgi-bin directory.x dynaweb10_decosf. see Section 2. For information on making these changes. For additional information.

2 Cray Research.tar Sun Microsystems SPARC series Solaris 2.x dynaweb10_sgi5.Online Software Publications Administrator’s Guide Product Overview [1] Vendor Hardware OS and levels Software file Silicon Graphics — IRIX 5.x dynaweb10_sun5.tar SG–6104 1. Inc. 9 .

.

Because the DynaWeb server currently supports only non-secure basic HTTP authentication. 2. It usually is not started from the command line. references are made to the DynaWeb directory structure.startup.1 Running DynaWeb DynaWeb can run either as a server or as a CGI script.Administering a DynaWeb Server [2] This chapter describes procedures for performing DynaWeb server administration tasks. SG–6104 1. it is started automatically from the installation script or when the system boots. a security-conscious administrator may wish to run DynaWeb as a CGI script piggybacked on another server. This manual uses the path name /path/servroot to define the path to the DynaWeb server root directory. This section describes the default method of running DynaWeb as a server and explains how to piggyback DynaWeb on another Web server. using the SGML-to-HTML conversion and the organizational capabilities of the product while retaining the extra security provided by the front-end server.1 Running DynaWeb as a server The dynaweb program starts the DynaWeb server as a process. 11 .sh script in your system startup procedures.2 Cray Research. if you have included the system. the DynaWeb server uses port number 8080. The directories above the DynaWeb server root directory (servroot) can be whatever you want. Inc. By default. Note: Throughout this chapter.1. 2. which does not require super user (root) privileges. Instead.dynaweb.

Inc.Administering a DynaWeb Server [2] Online Software Publications Administrator’s Guide You may need to restart the DynaWeb server manually. Start the DynaWeb server by issuing the following commands: # cd /path # . SG–6104 1.dynaweb. Procedure 1: Setting up DynaWeb as a CGI script Perform the following steps as super user: 1. the /start. 1 12 Deferred implementation.1 It assumes that dynaweb is not already running as a process.stop. Normally it is /var/www/ cgi-bin.dynaweb.dynaweb.sh script will stop it. 2. Cray Research./start.stop. Create a link named nph-dynaweb to the dwsgml2html program: # cd cgibindir # ln -s /path/bin/dwsgml2html nph-dynaweb cgibindir is the cgi-bin directory of the server that receives requests. enter the following commands: # cd /path # .stop.2 Running DynaWeb as a CGI script The procedure for running DynaWeb as a CGI script under another server (for example. If it is not running.2 . the Mindshare Out Box Web Server from Silicon Graphics or the Netscape Communications Server) is described in this section. If you do.sh Starting the DynaWeb server links Online Library collections to the DynaWeb root directory. not the DynaWeb cgi-bin directory. 2.sh If the DynaWeb server is already running./start.1. it will be started.

cfg .r /path/servroot/icons/* icons # cp /path/servroot/images/* images 7./.Online Software Publications Administrator’s Guide Administering a DynaWeb Server [2] 3. For each directory that does not exist. you upgrade your existing server by running the installation script as you do for an initial installation. Ensure that you specify the directory in which the existing DynaWeb server resides. it does not exist. Create a link to the /path/data/config/dynaweb..2 Cray Research. 2. as follows: # cd . For each directory that already exists. as follows: # cd . 6. as follows: # cp . 5. # ls -d icons images If you get an error message for either directory. 13 . The alternative server can now serve Online Library documents. as follows: # cd data/config # ln -s /path/data/config/dynaweb. # mkdir data data/config 4. Inc. copy the contents of the corresponding DynaWeb directory.cfg configuration file. Check to see whether the icons and images directories already exist. # ln -s /path/servroot/images .2 Upgrading the document base When you receive a new DynaWeb CD-ROM.. The installation procedure will detect the existing server and ask SG–6104 1. create links to the /path/ servroot/icons and /path/servroot/images directories: # ln -s /path/servroot/icons .. Create data and data/config directories.

specify the full path name to the DynaWeb server. SG–6104 1. Place the CD-ROM in the caddy and insert it into the drive. the software is automatically mounted to /cdrom.Administering a DynaWeb Server [2] Online Software Publications Administrator’s Guide you whether you want to upgrade the server or destroy the existing server and replace it with the software and documents from the new CD-ROM. This is the /path directory under which the DynaWeb servroot directory exists. Mount the CD-ROM by using the mount(1 or 1M) command. Inc./install 6. 4. on Solaris systems you do not specify a mount point. If possible. the following are true: • The server resides in the directory /var/tmp/dynaweb. For example. perform the following steps: 1.tar file. • The documentation that is being added is from the SWS-ION release 2.2 . Ensure that the login you are using has full read and write permissions to all the DynaWeb files and directories. 14 Cray Research. Procedure 2: Upgrade steps To upgrade the document database. In this example. Check your local man pages for the syntax you need. it should be the same login used to initially install DynaWeb. Example 1: Upgrade example The following is an example of upgrading an existing server. Specific mount commands vary by software platforms. When you are prompted. 3. On other systems you must specify a mount point. as follows: # cd mount_point 5.0 and resides in the sws_200. 2. Execute the install script. as follows: . Change directories to your mount point.dwebdocs.

replacing it all with the software and documents from this CD? U = Upgrade (the default) D = Destroy u Proceeding with upgrade Install dynaweb_11 documents (1MB)? (y/n) [y] n Install sws_200 documents (4 Mb)? (y/n) [y] y First remove old ’sws 110’ documents? (y/n) [y] Unpackaging tar file.. SG–6104 1. (*everything* under "/var/tmp/dynaweb").. done Updating and indexing DynaWeb collections. done Updating local script paths.... y 15 . or destroy that existing DynaWeb server and documentation. Inc./install Checking for system utilities the installation scripts need: cat cp cut fgrep grep ls mkdir mv rm sed sh sort tar uname uncompress Type the full path of the base DynaWeb directory (RETURN quits): /var/tmp/dynaweb It appears that DynaWeb is already installed in /var/tmp/dynaweb/ Do you want to upgrade that server’s document base with the documents from this CD.2 Cray Research.Online Software Publications Administrator’s Guide Administering a DynaWeb Server [2] % ..

.Administering a DynaWeb Server [2] Online Software Publications Administrator’s Guide ’CRAY T3E systems’ ’System administrator/operator’ ’SWS-ION’ ’UNICOS/mk’ ’Complete list’ Updating alphabetical titles list. and DynaWeb accommodates only gif files. you can run the craydoc2dynaweb. The CrayDoc files must be local to the DynaWeb server machine or on an NFS cross-mounted file system.3 Converting CrayDoc files If you have used the CrayDoc online documentation utility at your site. A known bug also exists with CrayDoc books that causes the appearance of a spurious button between the Collapse TOC button and the Clear Search button when they are visible. you must have write permission to the following directories and files: • Each CrayDoc collection directory • Each CrayDoc book directory (. as some of these files are in formats other than gif.. you can convert the documents to run under the Cray DynaWeb server as part of the installation procedure. To convert the documents. although it will cause no damage if you use it. If that is not possible. SG–6104 1.2 .. You can ignore the button. On color monitors. done Updating configuration files.pl program as a separate procedure. Inc. Note: Not all CrayDoc graphics will display in DynaWeb. It is highly recommended that you convert these documents as part of the installation procedure. on grayscale monitors./collection/books/book_number) 16 Cray Research. done % exit 2... it is gray.. it is blue.

and that you know the location of necessary files and directories.pl...2 base_dweb_dir Cray Research.pl SG–6104 1.pl program has two required arguments: • base_dweb_dir (the /path directory into which the DynaWeb software is installed) • dweb_hardware_bin_dir (the name of the directory containing the DynaWeb software files specific to your hardware platform. Change directories to the /path directory: # cd /path 3.pl program: # ./craydoc2dynaweb.txt) • The DynaWeb all index (/path/servroot/library/all/libidx) • The DynaWeb Topics page (/path/servroot/docs/topics. Ensure that you have the correct permissions.html) The craydoc2dynaweb. 2. that the CrayDoc files are accessible.ebtrc file. perform the following steps: 1. Execute the craydoc2dynaweb. as in binsun5) The program will prompt you for the full path of the CrayDoc master . Procedure 3: CrayDoc conversion steps To convert your CrayDoc files by using craydoc2dynaweb. Inc. dweb_hardware_bin_dir 17 ./collection/books/ book_number/styles) • The DynaWeb library directory (/path/servroot/library) • The DynaWeb all collection (/path/servroot/library/all/books) • The DynaWeb all book list (/path/servroot/library/all/ booklist.Online Software Publications Administrator’s Guide Administering a DynaWeb Server [2] • Each CrayDoc book’s style directory (.

../servroot/library) * The DynaWeb ’all’ collection (. Inc. that you have these permissions./servroot/library/all/books) * The DynaWeb ’all’ book list (.0. before starting./servroot/library/all/booklist..... the DynaWeb software directory is binsun5. 18 Cray Research.pl program. Consequently.pl /opt/dynaweb binsun5 Do you have CrayDoc installed at your site? [n] y Do you want your CrayDoc files available under DynaWeb? [n] y The Craydoc files must be on a file system that is either mounted on the machine running DynaWeb or cross-mounted so as to be accessible to it.ebtrc Processing "UNICOS Features 9./craydoc2dynaweb. Do you? [n] y Enter the full path name to the Craydoc installation’s master ..2" .../{collection}/books/{book_number}) * Each Craydoc book’s ’style’ directory ( ^--> /styles) * The DynaWeb library directory (...Administering a DynaWeb Server [2] Online Software Publications Administrator’s Guide Example 2: CrayDoc conversion The following is a sample run of the craydoc2dynaweb. The base DynaWeb directory is /opt/dynaweb..0./servroot/library/all/libidx) * The DynaWeb topics page (. Is this the case? [n] y You will need write permission to: * Each Craydoc collection directory * Each Craydoc book directory (. it’s best to be sure.ebtrc file is /var/tmp/cdoc/ . and the path to the master ./servroot/docs/topics.ebtrc file: /var/tmp/cdoc/.2" .. SG–6104 1. but if you don’t have them it must quit in mid-conversion. Processing "Basic Admin & Operations 9. # cd /opt/dynaweb #...txt) * The DynaWeb ’all’ index (..html) This script checks for these permissions.2 .ebtrc.

4 Managing access logs The access and error logs that the DynaWeb server keeps can get very large very quickly.0.0. If this behavior is more detailed than you need... depending on how much usage your server has.. You will probably want to clean them out every week or month. 19 . the server logs every access (that is.2" .2" .Online Software Publications Administrator’s Guide Administering a DynaWeb Server [2] Processing "UNICOS Programming Support 9. Cray Research DynaWeb installation complete 2. Processing "UNICOS Introductory Information 9.cfg.. /path/data/config/dynaweb. Inc. The files are as follows: • /path/logs/access_log • /path/logs/error_log By default. every mouse click) in the access log file. Re-indexing DynaWeb’s master document search file .2 Cray Research... you may deactivate the server’s logging of accesses by changing the setting of the DWEB_ACCESSLOG parameter to OFF in the DynaWeb configuration file. SG–6104 1. Updating topics list and titles list ...

.

2 Cray Research. this will be corrected in a future EBT DynaWeb release. The user name and password are checked against a master list of approved users. This chapter describes the authentication configuration parameters and administrative procedures for authentication. Note: DynaWeb uses a port number greater than 1024 (8080. which includes the user name and password in the request for information. SG–6104 1. Inc. Authentication is achieved through the HTTP protocol. and a violation of copyright and licensing restrictions under which Cray Research and its customers must operate. if you have an Internet connection. by default) so that root privileges are not required to run the DynaWeb daemon. However.Security and HTTP Authentication [3] The DynaWeb server provides the ability to authenticate any requests it receives from a client against a password file. Throughout this chapter. references are made to the DynaWeb directory structure. Consequently. ports over 1024 are accessible to users external to your site. DynaWeb 1. This is a security risk for your site.0 does not send the WWW-Authenticate headers that Lynx and Mosaic require in order to designate a security realm. This manual uses the path name / path/servroot to define the path to the DynaWeb server root directory. ! Caution: Use the procedures described in this chapter only if Netscape is the browser that will be used at your site. The directories above the DynaWeb server root directory (servroot) can be whatever you want. 21 . you must disable external access to port 8080 on the DynaWeb server or employ other access control measures for port 8080 on that machine.

The location and name of the password file can be anything you desire. If either the name of the client cannot be found in the list or the name is found. These two parameters are DWEB_PASSWD_FILE and DWEB_HOST_ACL. but marked for non-access. the server checks to see that the host name of the requestor matches one of the values in DWEB_HOST_ACL. as in the following example: DWEB_PASSWORD_FILE = \ /path/passwdfile Note: Ensure that you place your password file above the servroot directory in the DynaWeb directory structure. these parameters are commented out in the configuration file. browsers will be able to access it. list in the configuration file the hosts that are allowed or denied access to the information served by the DynaWeb server.cfg.Security and HTTP Authentication [3] Online Software Publications Administrator’s Guide 3. Inc. DWEB_HOST_ACL 22 Acts as an access control list for the DynaWeb server.1 Authentication configuration parameters The HTTP authentication process used by DynaWeb is controlled through the use of two parameters located in the configuration file /path/data/ config/dynaweb. as long as you specify an absolute path name to the password file. Whenever the server receives a request for information and DWEB_HOST_ACL is present. When the DynaWeb server is first installed. If it is below the servroot directory. To change the default. which allows everyone access. SG–6104 1. If the name is Cray Research. the request is denied. A description of the parameters follows: Parameter Function DWEB_PASSWD_FILE Points to the location of the password file that the DynaWeb server checks when it receives a request for authentication. It has the value *.2 .

! Host names with the exclamation point (!) in front of them are not allowed to access the server. If you add the ! to the example above. 3.com).cfg configuration file is a list of individual host names and regular expressions that make up a complete list of the clients that are able to access the server. no one from company.2 Cray Research. Each value is separated from the next by a blank space and can contain both regular expressions and the boolean "not" expression. The following example shows the effect of various uses of the parameter: SG–6104 1. remove the * and replace it with the names of the hosts you want. ? Matches any single character. You can also use the exclamation point (!) to name a specific host or group of hosts you do not want to access the server. because you have no way to determine ahead of time who will request access. Because the wildcard * (asterisk) is equal to all host names.com can browse the server. To deny access to all hosts but the ones you specify.company. the line DWEB_HOST_ACL = *. The next two sections provide more information about DWEB_HOST_ACL.Online Software Publications Administrator’s Guide Security and HTTP Authentication [3] found as a value of DWEB_HOST_ACL. For example.com allows any user from company. The following modifiers are used in DWEB_HOST_ACL: Modifier Meaning * Matches any character or set of characters until a space is encountered.1 Syntax of DWEB_HOST_ACL The value of DWEB_HOST_ACL in the /path/data/config/dynaweb. signified by the exclamation point (!). using it means that all hosts are allowed access. (DWEB_HOST_AUTH = !*. 23 . Inc.1.company. Wildcards can be combined with partial host names to allow or disallow groups of clients. the server fulfills the request.com to access your server. This is necessary if you wish to allow full access to your server from the Internet.

second. the configuration file reads DWEB_HOST_ACL = *. When listing values.com or second. 3.com To allow everyone but the hosts at first. Example 4: DWEB_HOST_ACL and list parsing If you currently allow everyone to access your server.com 24 Cray Research. work from the most specific to the most general.first. Suppose you wish to deny a competitor access to your server. so you add the competitor’s domain to the control list and use the exclamation point to deny access. This means that. Inc.1.Security and HTTP Authentication [3] Online Software Publications Administrator’s Guide Example 3: DWEB_HOST_ACL and wildcards To allow anyone to access the server.2 .first.2 Parsing of DWEB_HOST_ACL When DynaWeb checks the DWEB_HOST_ACL list for authentication.com * Ensure that you list exclusions first. page 24.com *. if you deny a group access and later decide to grant access to one member of that group. The following example demonstrates how DynaWeb parses DWEB_HOST_ACL. as described in Example 4. use the following syntax: DWEB_HOST_ACL = !*. as follows: DWEB_HOST_ACL = * !*. It then stops checking and grants or denies access.competitor. it starts at the front and parses the list until it finds a match.com to access the server. use the following syntax: DWEB_HOST_ACL = * To allow access only by clients from first. use the following syntax: DWEB_HOST_ACL = *. you need to specify that this user has access before you deny access to the group. SG–6104 1.com.

com. use the following syntax: DWEB_HOST_ACL = !*competitor. Use any text editor to open the /path/data/config/dynaweb.cfg configuration file. which matches any host name by definition. 25 . The following procedure enables HTTP authentication. SG–6104 1. create it above the servroot directory.com * 3. Because the parser has found an entry that it can match to the host requesting access. it stops looking and accepts the request.2 Enabling HTTP Authentication When the DynaWeb server is installed.2 Cray Research. Uncomment the line that starts DWEB_PASSWD_FILE = by removing the pound sign (#) from the beginning of the line. 2. Add the absolute path name of the file as the value of DWEB_PASSWD_FILE. authentication is inactive. this syntax does not deny the competitor access. Note: To prevent other browsers from accessing the password file. Procedure 4: Enabling authentication To enable user name and password checking. which would have denied access to this particular requestor. Inc. A good rule of thumb when dealing with the DWEB_HOST_ACL parameter is to start with the specific and end with the general. The parser never encounters the qualifying statement !*. perform the following steps as super user: 1. Because the parser checks the list from left to right.Online Software Publications Administrator’s Guide Security and HTTP Authentication [3] Unfortunately.competitor. Determine the path name of the file that will contain the password information. 3. To deny the competitor access. the first thing it encounters is the asterisk.

0 software. 5. Issue the following command: # cd /path/binplatform # . you will need to add users after the first by using a text editor to manually edit the access list. as follows: # cd /path # .stop. page 26. currently dwpasswd will add only one user. Procedure 5: Adding users To add a user to the access list by using the dwpasswd program. 2.3. The password file is an NCSA-style password file. Fields in each entry are separated by colons (:)./dwpasswd passwdfile -a [user [passwd [’real name’]]] passwdfile is the name of the password file you specified in Step 3 of Procedure 4. When entering the real 26 Cray Research. only the user and password fields (the first two fields) are required: usera:foobar:::John Doe:: 1.3 Maintaining access lists The following procedures describe how to maintain access lists for HTTP authentication.2 .sh 3. Alternatively. you can omit the information after the -a option.Security and HTTP Authentication [3] Online Software Publications Administrator’s Guide 4./start. Restart the DynaWeb server. if you attempt to use this utility to add more users.dynaweb. Consequently. page 25. Edit the password file as described in Section 3. ! Caution: Due to a known bug in the DynaWeb 1. Inc. SG–6104 1. The format of access list entries is as shown in the following example. it causes a segmentation fault. perform the following steps as super user. The dwpasswd program prompts you to enter it.

Procedure 6: Verifying users To verify that a user has access to the DynaWeb server. 2. Procedure 7: Deleting users To delete a user from the password file. 4./dwpasswd passwdfile -v [user [passwd]] passwdfile is the name of the password file you specified in Step 3 of Procedure 4. Open the password file for editing. press ENTER without typing a user name. To exit the program. page 25. Remove the line containing the user’s information. After you have entered all of the information. This repetition ensures accuracy of the information. You do need quotation marks if you use the -a option. perform the following steps as super user: 1. The dwpasswd program prompts you to enter it. After you have entered the password. perform the following steps as super user: 1.2 Cray Research. press ENTER without typing a user name. Alternatively. The location of the password file is specified by the DWEB_PASSWD_FILE parameter in the /path/data/ config/dynaweb.Online Software Publications Administrator’s Guide Security and HTTP Authentication [3] name of the user at the prompt. you can omit the information after the -v option. 3. 4. the dwpasswd program prompts you to enter the password again. 27 . The program then reports that the name and password are valid. you do not need to enter quotation marks. 2. the dwpasswd program prompts you to repeat the process.cfg configuration file. 3. Inc. SG–6104 1. To exit the program. Issue the following command: # cd /path/binplatform # .

4 Authentication troubleshooting It might be true that. Inc. Ensure that all URLs match the DWEB_HOST parameter. they are again prompted for their information when they switch from one page to another.2 . mycomputer:8080 does not match mycomputer. That user no longer has access to the server. The server authenticates users for each URL that contains a different host name. after users supply an ID and password and they have been validated by the server.Security and HTTP Authentication [3] Online Software Publications Administrator’s Guide 3. 3.com:8080. SG–6104 1. For example.mycompany. 28 Cray Research. Write the file and exit the editor.

. . . . . data directory config subdirectory . 26 . . Access logs . . deleting users in access lists enabling . . . . . Directory contents DynaWeb server . . . . . . . . 18 16 18 16 . . . . . . . . . CrayDoc file conversion . verifying users in access lists . 26 27 . . . . . running . . . . . . . . . . . . . . . . . . . . . 12 . . . 5 . . . . . 8 . . . 18 . maintaining . config subdirectory contents . . maintaining access lists for . CrayDoc graphics . . . . 8 . . . . . . 5 . . . . . . . .2 CD-ROM mounting . . . Cray Research. . . . . . . . . . . 3 SG–6104 1. . . . Authentication HTTP adding users to access lists . . . . . craydoc2dynaweb. . . running DynaWeb as . . . .Index C A Access lists adding users to . . . . . . . 4 . . . . . 18 D bin directory contents . . . . . . . . . . . . . . . . 8 19 13 . . . . Inc. . . .pl program example . . . . . . . . . deleting users from . . . . . . . . . . security subdirectory . . CGI . . . 14 . . Adding documents to server . . . . . . . 4 . . . . . . . . . troubleshooting . . . . alt subdirectory contents . . 5 Browsers supported . . . . . . . . . . . . . . . . . . . . . 5 . . 27 . . running DynaWeb as . 12 . . CGI scripts . . . . . . . . . 4 3. . . . . verifying users in . . example . . styles subdirectory . . . Common gateway interface (CGI) scripts . . . 4 29 . 26 27 25 26 28 27 B . . . . 12 3. . . . . . . maintaining for HTTP authentication . . . cgi-bin directory contents . . . . Converting CrayDoc files example . . . . 4 Book Summary pages location in directory structure .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Hypertext mark-up language (HTML) 1 I icons subdirectory contents . 24 syntax . 5 Home page changing/adding links caution against . 6 H Hardware platforms supported . . . . . . . . . . . . . . . . . . 26 troubleshooting . . . . . . . . . . . . 13 DWEB_ACCESSLOG parameter dynaweb. . . . . . . . . . . . . . . . . 8 dynaweb. . . . . . . 4 Document base upgrading . . . . . . . . . . . . 7 HTTP authentication adding users to access lists . 26 deleting users from access lists . Executable files . 25 maintaining access lists for . . . . Inc. . 6 starting . . . . . . . 6 dwsgml2html program . . . . . 22 enabling HTTP authentication 25 dwpasswd program . . . . . . maintaining . . . . . . . . . .cfg file . . . . 5 creating links to to run DynaWeb as CGI script 13 install script Cray Research. . . . . . . . 5 images subdirectory contents . . . . . . . . . . . 22 parsing . . . . . . . . 8 help subdirectory contents . . . . . SG–6104 1. . 11 DynaWeb software files for supported hardware . . . . . . 21 30 E Error codes servroot/C directory Error logs . 5 . . .cfg file description . . . 7 Online Library . . 24 DWEB_PASSWD_FILE parameter dynaweb. . . . . . 22 parsing . . . . . . . .cfg file creating links to to run DynaWeb as CGI script 13 DWEB_HOST_ACL parameter description . . . . . 25 enabling HTTP authentication in 25 setting DWEB_ACCESSLOG parameter . . . . . . . . . . . .2 . . . . . . . . . . 8 19 . . . . . . . . 21 DWEB_HOST_ACL parameter dynaweb. . . . . . . . . . . 23 using wildcards . . . . . . . . . . . . . . . . . 24 syntax . 27 enabling . . . . . . . . 28 verifying users in access lists .Index Online Software Publications Administrator’s Guide Directory structure DynaWeb server . 7 dynaweb program . . 23 using wildcards . . . 24 DWEB_PASSWD_FILE parameter 22.cfg file . . . . .

. . . 5 13 . overview . . . . . . . . . . . . . . . . . summary subdirectory . . . . . . 8 19 . features . . . . . . . . . 3 Mounting the CD-ROM . . Operating system levels supported Overview of server . . . . . . . . . . . . . . .Online Software Publications Administrator’s Guide running for upgrades Index . . . . . . . . .cfg file to run DynaWeb as CGI script creating to images subdirectory to run DynaWeb as CGI script Logs access and error . . . . . . . . Server connections . . . . . . . . . . . Inc. logs directory contents . images subdirectory . . . . . . .2 O Port number server . 5 5 5 5 5 5 5 5 5 31 . . . . . . 3 . . . . . 2 S security subdirectory contents . 5 . . . . . . . . . . . . . . . . 7 2 5 8 1 . . . . . . creating to dynaweb. . . . . . . . 1 . . . . . . . . . . . location in directory structure . . . interface . . icons subdirectory . . . . . . . . 14 L library subdirectory contents . . . . . 3 SG–6104 1. . Cray Research. contents . . . . . . . . maintaining . . . . . . . library subdirectory . . . . . . . . . . . . . . . . . . alt subdirectory . . docs subdirectory . . . . . . . . . . . . . . . . 1 . . . . . . . . 3 M Mosaic support . root directory . . upgrading document base servroot directory C subdirectory . . . . . . . . . . . . Links changing/adding on home page caution against . . . . . help subdirectory . . . Lynx support . 14 N Netscape Navigator support . . 5 Online Library home page . . . . . . . . . . . 2 . . . . . . . port number . 3 Network connections establishing on server . . . . . . 5 . . . . . . . . . 7 P 13 13 . . .

. . . . 12 . SG–6104 1. . 5 . . . . . . . 1 . . . . . 2 U .sh script enabling HTTP authentication location . . . .dynaweb. . . . SGML-to-HTML conversion . . . . . 11 Uniform resource locator (URL) definition . . 1 1. summary subdirectory contents . . . styles subdirectory contents . . . . . . 3 Cray Research. . . .dynaweb. . . . . start. . . . . . . . 13 W Web browsers supported . . 6 . . . . . . . 26 .sh script 32 Online Software Publications Administrator’s Guide location . . . . . . . .stop. . . . . . Standard generalized mark-up language (SGML) . . 6 . . 2 Upgrading document base . . . .startup. . .2 . . Inc. running . . . . . 5 . . system. . . . . . .Index SGML definition . .