OraLogRotationParams Oracle Diagnostic Logging Directives

7-10 Oracle Fusion Middleware Administrators Guide for Oracle HTTP Server

7.3.2.3 LogFormat

The LogFormat directive specifies the format of the access log file. By default, Oracle HTTP Server comes with the following four access log formats defined: LogFormat h l u t \r\ s b common LogFormat h l u t \r\ s b \{Referer}i\ \{User-Agent}i\ combined LogFormat {Referer}i - U referer LogFormat {User-agent}i agent

7.3.2.4 CustomLog

The CustomLog directive is used to log requests to the server. A log format is specified and the logging can optionally be made conditional on request characteristics using environment variables. By default, the access log file is configured to use the common log format.

7.4 Viewing Oracle HTTP Server Logs

You can search, view, and list Oracle HTTP Server log files using Fusion Middleware Control, or you can download a log file to your local client and view the log files using another tool. You can also use the text editor of your choice to view Oracle HTTP Server log files directly from the ORACLE_INSTANCE directory. By default, Oracle HTTP Server log files for are located in the ORACLE_INSTANCEdiagnosticslogsOHSohs_ name directory. As discussed in Section 7.1, Introducing Server Logs , there are mainly two types of log files for Oracle HTTP Server: error logs and access logs. The error log file is an important source of information for maintaining a well-performing server. The error log records all of the information about problem situations so that the system administrator can easily diagnose and fix the problems. The access log file contains basic information about every HTTP transaction that the server handles. This information can be used to generate statistical reports about the servers usage patterns. See Also: Refer to the Apache documentation for information about the LogLevel directive. See Also: Refer to the Apache documentation for information about the LogFormat directive. See Also: Refer to the Apache documentation for information about the CustomLog directive. See Also: For information about searching and viewing log files, see Oracle Fusion Middleware Administrators Guide 8 Managing Application Security 8-1 8 Managing Application Security This chapter contains an overview of Oracle HTTP Server security features, and provides configuration information for setting up a secure Web site. This chapter includes the following sections: ■ Section 8.1, About Oracle HTTP Server Security ■ Section 8.2, Classes of Users and Their Privileges ■ Section 8.3, Resources Protected ■ Section 8.4, Authentication, Authorization and Access Control

8.1 About Oracle HTTP Server Security

Security can be organized into the three categories of authentication, authorization, and confidentiality. Oracle HTTP Server provides support for all three of these categories. It is based on the Apache Web server, and its security infrastructure is primarily provided by the Apache modules, mod_auth_basic, mod_authn_file, mod_ auth_user, and mod_authz_groupfile, and the Oracle modules, mod_ossl and mod_ osso. The mod_auth_basic, mod_authn_file, mod_auth_user, and mod_authz_ groupfile modules provide authentication based on user name and password pairs, while mod_authz_host controls access to the server based on the characteristics of a request, such as hostname or IP address, mod_ossl provides confidentiality and authentication with X.509 client certificates over SSL, and mod_osso enables single sign-on authentication for Web applications. Based on the Apache model, Oracle HTTP Server provides access control, authentication, and authorization methods that can be configured with access control directives in the httpd.conf file. When URL requests arrive at Oracle HTTP Server, they are processed in a sequence of steps determined by server defaults and Note: The information in this document is applicable when Oracle HTTP Server is installed with Oracle WebLogic Server and Oracle Fusion Middleware Control. It is assumed that readers are familiar with the key concepts of Oracle Fusion Middleware, as described in the Oracle Fusion Middleware Concepts Guide and the Oracle Fusion Middleware Administrators Guide. For information about installing Oracle HTTP Server in standalone mode, see “Installing Oracle Web Tier Without Oracle WebLogic Server” in the Oracle Fusion Middleware Installation Guide for Oracle Web Tier.