Apache Server & CGI

[jpcarr@xxxxxxxxxxxx]

Hi all,

This was a part of a news update I got from John Quarantello's mailing
list.    I was interested in # 4 and #6.
Has anyone started using the Apache server yet?    What version of OS/400
is required?

How exactly does it help with "Secure Single signons"  for CGI programs?
and what does it do to help Persistent CGI sessions?

What other neat things (or more exactly)  what are the Pro's and Con's for
the Apache vs the native HTTP server


TIA

John
----------------------
 IBM HTTP Server (Powered By Apache) For iSeries Has Lot's of 1st's!!!!!
The IBM HTTP Server for iSeries has been enhanced to include the popular
Apache HTTP server.
This initial release is based on Apache version 2.0.  Listed below are a
number of technical 1st
achieved with this product.  Congratulations to the Rochester lab.

(1) The first generally available server with Apache V2.0.  This includes a
highly scalable
multi-threaded runtime as well as Apache Portable Runtime (APR) which
allows Apache
modules to be written platform independently - meaning that proper
user-written modules
will only require a recompile to run on OS/400!

(2) The only Apache-based server with a complete, task-oriented,
browser-based User Interface,
fully NLS-enabled and translatable utilizing a built-in, industry standard
Java servlet engine.

(3) The most serviceable Apache-based server with robust, configurable,
trace points and
on-the-fly tracing capability.

(4) The only Apache-based server capable of passing user credentials to CGI
programs
allowing true, secure, single sign-on for web applications.

(5) The only Apache-based server with an idle backup server process,
providing seamless
failover within one server instance while reducing path length and
contentions to improve server
throughput and scalability.

(6) The only Apache-based server to provide Persistent CGI and Net.Data -
the ability to maintain
true process state across multiple browser requests acting as one complete
transaction with
complete commit and rollback capabilities.

(7) The only Apache-based server with support for Validation Lists -
completely secure user lists
with no inherent system authority.

(8) The only Apache-based server with support for optional or required user
sign-on using SSL
Client Certificates (not userid/password) associated with either an OS/400
user profile or users
in validation lists.

(9) The only Apache-based server with pre-started and re-used CGI jobs,
significantly improving
CGI performance and throughput as well as server capacity.

(10) The only Apache-based server "secure by default".

(11) The only Apache-based server with the ability for administrators to
fully configure and support
non-standard or emerging HTTP methods beyond those generally used allowing
for the highest
level of flexibility.

(12) Once Apache V2.0 GA is available, we are poised to be the most
Internationlization-friendly
Apache-based server available.

(13) The only Apache-based server to provide pre-cached static files at a
directory level as
well as dynamic caching of the most-accessed static files.

(14) The only Apache-based server to use Asynchronous I/O - decoupling
browser requests
from server threads, providing true support for high volume HTTP persistent
connections
(using one TCP/IP connection across multiple browser requests).

(15) The only Apache-based server to use LDAP as a way of storing
configuration information.
This allows configuration information to be easily shared across multiple
physical systems such
as in a highly available environment.

(16) The only Apache-based server to provide configurable dynamic
protection against denial
of service attacks that try to tie up server TCP/IP connections.

(17) The only Apache-based server to provide APIs for updating
configuration information.
This allows web applications to set up their server instances
programmatically without requiring
user manual intervention.

For more information:
*  http://www.iseries.ibm.com/products/http/services/Apache.htm


+---
| This is the WEB400 Mailing List!
| To submit a new message, send your mail to WEB400@midrange.com.
| To subscribe to this list send email to WEB400-SUB@midrange.com.
| To unsubscribe from this list send email to WEB400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---