Windows Linux Copying the UIO Apache Proxy and Supported Files to Apache

Oracle Adaptive Access Manager Proxy 6-13 information. The following description is to identify when you must use memcached to hold the UIO Apache Proxy session information. Apache httpd ships with a selection of Multi-Processing Modules MPMs which are responsible for binding to network ports on the machine, accepting requests, and dispatching children to handle the requests. On Linux: httpd can run with two different MPMs: httpd with prefork MPM single-threaded or with worker MPM multi-threaded. The MPM is built into the httpd and is not a run-time option. With prefork MPM, httpd maintains a pool of single-threaded processes, where each request is handled by a single process. In this case, you must configure UIO Apache Proxy to use memcached. With worker MPM, httpd maintains a pool of multithreaded processes, where every process could be handling multiple requests at a time. In this case, you can configure Apache httpd to launch a single process and avoid using memcached. However, the default configuration launches multiple processes and if you want to keep that unchanged, then you must configure UIO Apache Proxy to use memcached. Here is an example of httpd.conf example that can be used to configure a worker MPM to launch a single process. Following forces worker MPM to run 1 process make sure mod_cgid is not loaded, otherwise it starts one more httpd process. Basically ThreadLimit=MinSpareThreads=MaxSpareThreads=MaxClients=ThreadsPerChild and StartServers=1. Setting MaxRequestsPerChild to 0 ensures that the process is not bounced. IfModule mpm_worker_module ThreadLimit 150 StartServers 1 MinSpareThreads 150 MaxSpareThreads 150 MaxClients 150 ThreadsPerChild 150 MaxRequestsPerChild 0 IfModule On Windows, httpd MPM is always in multi-threading mode with a single process. On Linux, in the case where the httpd runs multiple process irrespective of single or multithreaded, the UIO Apache Proxy session data must be maintained in a common store database or cache so that multiple processes can access the session data. The UIO Proxy uses memcache a memory based very fast cache to store the session data. At startup, the UIO Proxy autodetects whether httpd is running with a single process or multiple processes. If httpd is running with multiple processes which is the case with prefork or worker mpm on Linux, it tries to connect to the memcache daemon using default connection parameters that are defined in Section 6.3.6.1, UIO_ Settings.xml . On Windows, by default, the UIO Proxy uses local sessions. It does not connect to the memcache daemon; however it can also be configured to maintain session data in the memcache daemon explained in Section 6.3.6.1, UIO_ Settings.xml . For the scenarios where the UIO Apache Proxy is connecting to memcache daemon, you must install memcache on your system using the instructions from the memcache Web site and run the memcache daemons before running the Apache httpd. Install memcache using instructions at: 6-14 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager http:www.danga.commemcached You may already have a binary installation available from your Linux distribution. The UIO Apache Proxy has been tested with version 1.2.5 of memcache.

6.3.5 Configuring httpd.conf

This section provides information on how to edit the httpd.conf file to activate the UIO Apache Proxy. The httpd.conf file is the main configuration file used by the Apache HTTP Server.

6.3.5.1 Basic Configuration without SSL

In the sample installation, the Apache httpd has been installed in c:\ProgramFiles\Apache2.2 or usrlocalapache2. To ensure that http.conf is correctly set up in your environment, follow these steps: 1. Ensure that the following lines are uncommented to enable mod_proxy. LoadModule proxy_module modulesmod_proxy.so LoadModule proxy_http_module modulesmod_proxy_http.so 2. Add the following line to the end of the LoadModule group of lines to activate the UIO Apache Proxy. LoadModule uio_module modulesmod_uio.so 3. Add a line to point to the UIO_Settings.xml file that has the settings for the UIO Apache Proxy. On Windows all paths should be with forward slashes, UioProxySettingsFile c:OAAMUIOUIO_Settings.xml On Linux, UioProxySettingsFile homeoaamuiouioUIO_Settings.xml 4. Disable mod_proxys forward-proxying capability since it is not needed. ProxyRequests Off Proxy Order deny,allow Allow from all Proxy 5. Enable the mod_proxy configuration to reverse-proxy to oaam_server and the target application is being protected by OAAM. ProxyPass oaam_server http:FQDN_oaam_server:oaam_server_portoaam_server ProxyPassReverse oaam_server http:FQDN_oaam_server:oaam_server_ portoaam_server ProxyPass target_app http:FQDN_target_app:target_app_porttarget_ appl ProxyPassReverse target_app http:FQDN_target_app:target_app_ Note: This should be an absolute path to the UIO_Settings.xml file.