Опубликован: 04.07.2008 | Доступ: свободный | Студентов: 636 / 33 | Оценка: 4.83 / 5.00 | Длительность: 42:11:00
Тема: Безопасность
Специальности: Администратор информационных систем, Специалист по безопасности
Теги:
Дополнительный материал 3:
Советы и рекомендации по использованию подключаемого модуля Domino 6 HTTP
Принцип работы подключаемого модуля: анализ TRACE (log)
Если включен режим трассировки (Trace mode), подключаемый модуль создаст файл (в нашем случае C:/WebSphere/AppServer/logs/native.log). Не следует включать ведение журналов трассировки в рабочей среде (по вполне понятным причинам), однако эта функция может быть очень полезна для проверки, действительно ли система делает то, что ожидается. Например, мы на собственном опыте поняли, что имена URI чувствительны к регистру – в нашем случае используя все возможные комбинации.
[Mon Jun 09 11:59:14 2003] 00000b0c 00000c44 - PLUGIN: ------------------------------------------------------------------- [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: Plugins loaded. [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: ----------- ---------System Information---------------------------------------- [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: Bld date: Apr 28 2002, 01:26:50 [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: Webserver: IIS [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: Hostname = VAIOR600 [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: OS version 5.1, build 2600, 'Service Pack 1' [Mon Jun 09 12:05:36 2003] 00000d54 00000e78 - PLUGIN: ------------------------------------------------------------------- [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: iis_plugin: HttpFilterProc: In HttpFilterProc for SF_NOTIFY_PREPROC_HEADERS [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: iis_plugin: checkRequest: In checkRequest [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: lib_util: decodeURI: Decoding '/wmi.nsf' [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: lib_util: decodeURI: Decoded to '/wmi.nsf' [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereCheckConfig: Current time is 1055174814, next stat time is 1055174766 648 Приложение С [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereCheckConfig: Latest config time is 1055173899, lastModTime is 1055173899 [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereShouldHandleRequest: trying to match a route for: vhost='127.0.0.1'; uri='/wmi.nsf' [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/icons' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/domjava' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NS6*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Ns6*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nS6*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.ns6*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NS5*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Ns5*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nS5*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.ns5*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NS4*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Ns4*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nS4*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.ns4*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NS3*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Ns3*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nS3*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.ns3*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NS2*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Ns2*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nS2*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.ns2*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSH*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NsH*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nSH*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsH*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSh*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Nsh*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nSh*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsh*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSG*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NsG*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nSG*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsG*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSg*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Nsg*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nSg*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsg*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSF*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NsF*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nSF*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsF*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.NSf*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.Nsf*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Comparing '/*.nsf*' to '/wmi.nsf' in UriGroup: DominoHostsURIs [Mon Jun 09 12:06:54 2003] 00000d54 00000198 - TRACE: ws_common: websphereUriMatch: Found a match '/*.nsf*' to '/wmi.nsf' in UriGroup: DominoHostsURIsПример C.2. C:/WebSphere/AppServer/logs/native.log
При выполнении анализа подключаемый модуль повторит транзакцию на сервер заднего плана, добавив некоторые специальные диалоговые заголовки, принимаемые Domino, в случае указания HttpEnableConnectorHeaders=1.
Обратите внимание на то, что, так как мы задокументировали (и включили в нашем примере) характеристики балансировки нагрузки, подключаемые модули пытаются анализировать cookie-файлы сеанса, а также проверяют URL на наличие дополнительной "перезаписанной информации URL".