Username
|
The username of the administrator.
admin is the default username.
|
Password
|
The password of the administrator.
admin is the default password.
The password must be entered twice and both passwords must match.
|
Default Files
|
The default document to use when one is not specified.
index.html is the default value for Servertec Internet Server.
Zero or more comma delimited file names can be specified.
|
Input Buffer Size
|
The size of the request input buffer in bytes.
Must be at least 0.
-1 is the default value.
-1 is used to specify the default request input buffer size.
Setting this value too small or too large may impact performance.
|
Output Buffer Size
|
The size of the response output buffer in bytes.
Must be at least 0.
-1 is the default value.
-1 is used to specify the default response output buffer size.
Setting this value too small or too large may impact performance.
|
Maximum Header Length
|
The maximum length allowed for request headers.
Must be at least 128.
-1 is the default value.
-1 is used to specify unlimited header length.
Setting this value too small will result in the server blocking valid
requests.
Setting this value too large may impact performance.
Setting this value to -1 weakens security and can be exploited by
Denial Of Service (DOS) attacks.
|
Maximum Header Count
|
The maximum number of request headers allowed.
Must be at least 32.
-1 is the default value.
-1 is used to allow unlimited number of headers.
Setting this value too small will result in the server blocking valid
requests.
Setting this value too large may impact performance.
Setting this value to -1 weakens security and can be exploited by
Denial Of Service (DOS) attacks.
|
Maximum Content Length
|
The maximum content length allowed for post data.
Must be at least 128.
-1 is the default value.
-1 is used to specify unlimited content length.
Setting this value too small will result in the server blocking valid
requests.
Setting this value too large may impact performance.
Setting this value to -1 weakens security and can be exploited by
Denial Of Service (DOS) attacks.
|
Maximum Client Requests
|
The maximum number of concurrent requests that a client can make.
Must be at least 1.
-1 is the default value.
-1 is used to specify unlimited number of concurrent requests.
Setting this value too small will result in the server blocking valid
requests.
Setting this value to -1 weakens security and can be exploited by
Denial Of Service (DOS) attacks.
|
Context Directory
|
the directory used by the Servlet Context Manager as a temporary work area
for servlet contexts and session store.
./contexts is the default value.
If a relative directory is specified then the directory is relative to the
server's base directory.
|
Templates Directory
|
the directory where templates used by the server are located.
./templates is the default value.
If a relative directory is specified then the directory is relative to the
server's base directory.
|
Shutdown Delay
|
The number of seconds to wait for requests being processed to complete before
shutting down the server.
60 seconds is the default value.
-1 can be used to wait for all requests to finish processing. Using
this value may result in the server hanging while trying to shutdown waiting
for a request the will never complete.
|
Connection Pool Interval
|
the number of minutes between running the Connection Pool Monitor.
5 minutes is the default value.
-1 can be used to keep connections open in the pool. Using
this value may result in database connection timeouts.
The number must be at least 1.
Setting this value too small may impact performance and setting this value
too large can result in database connection timeouts.
|
Server Protocol
|
The HTTP server protocol to use.
Dynamic is the default value for Servertec Internet Server.
HTTP/1.0 allows compatibility with legacy Proxy Servers.
Dynamic allows the server to determine the protocol to use based on
the client's request.
Some Web browsers supporting HTTP/1.1 make requests using HTTP/1.0 until the
server response with HTTP/1.1.
Setting this value incorrectly may have a negative impact on performance.
|
Shell Access
|
Whether to allow CGI scripts and SSI #exec to have shell access.
No is the default value.
Setting this value to Yes is potentially a security hole.
|
Security Enabled
|
Whether to check if a client can access resources being requested.
Yes is the default value.
Setting this value to Yes may have a negative impact on performance.
|
DNS Lookup
|
Whether to lookup the name of the remote client.
If set to No then the IP address of the remote client will be used.
No is the default value.
Setting this value to Yes may have a negative impact on performance.
|
Servlet Chaining
|
Whether to allow Servlet chaining.
No is the default value.
Setting this value to Yes may have a negative impact on performance.
|
Remote Administration
|
Whether to allow computers other than localhost (127.0.0.1) to administer
the server.
Yes is the default value.
Setting this value to Yes is potentially a security hole.
|
Debug
|
Whether to capture all requests made to the server and all responses made by
the server.
No is the default value.
Setting this value to Yes may have a negative impact on performance.
When set to Yes each request and corresponding numbered response is
saved in separate flat files in iws_dir/debug,
where iws_dir is the directory where Servertec Internet Server was
installed or deployed.
|
SSL Support
|
Whether to enable Secure Socket Layer (SSL) support.
No is the default value.
Setting this value to Yes requires Java 1.2.0 or later and may have
a negative impact on performance.
|
Obscure Server
|
Whether to obscure the identity of the server.
No is the default value.
Setting this value to Yes results in the Server response header not
being sent and the FileServlet responding with 404 Not Found for requests for
directories when directory access is disabled.
|
Multiline Request Headers
|
Whether to support multiline request headers as used by Content-Type:
Multipart/Related.
Required by SOAP applications.
Yes specifies that multiline request headers will be supported.
No specifies that multiline request headers will not be supported.
Normally set to No.
Setting this value to Yes may have a negative impact on performance
and may result in the server not properly processing request headers.
|
Content Negotiation
|
Whether to use Accept, Accept-Language, Accept-Charset
and Accept-Encoding request headers when determining which file or
directory to return to the browser.
Yes use Accept, Accept-Language, Accept-Charset
and Accept-Encoding.
No is the default value.
Setting this value to Yes may have a negative impact on
performance.
If Content Negotiation is set to Yes then stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet will try to return
the file or directory that best matches the content type, language, charset
and content encoding specified in the request header or the
Default Content Type, Default Language, Default Charset
and Default Content Encoding.
If Content Negotiation is set to Yes then stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet will set
Content-Type, Content-Language and Content-Encoding
response header to the file or directory that best matches the content type,
language, charset and content encoding specified in the request header or the
Default Content Type, Default Language, Default Charset
and Default Content Encoding.
If Content Negotiation is set to No then stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet will set
Content-Type, Content-Language and Content-Encoding
response header to any Default Language, Default Charset and
Default Content Encoding specified.
If Content Negotiation is set to Yes the search order will be:
uri.content_type_extension.language .charset.content_encoding_extension
uri.content_type_extension.language .charset
uri.content_type_extension.language .content_encoding_extension
uri.content_type_extension.language
uri.content_type_extension .content_encoding_extension
uri.content_type_extension
uri.language.charset .content_encoding_extension
uri.language.charset
uri.language.content_encoding_extension
uri.language
uri.content_encoding_extension
uri.default_content_type_extension .default_language.default_charset .default_content_encoding_extension
uri.default_content_type_extension .default_language.default_charset
uri.default_content_type_extension .default_language .default_content_encoding_extension
uri.default_content_type_extension .default_language
uri.default_content_type_extension .default_content_encoding_extension
uri.default_content_type_extension
uri.default_language.default_charset .default_content_encoding_extension
uri.default_language.default_charset
uri.default_language .default_content_encoding_extension
uri.default_language
uri.default_content_encoding_extension
uri
uri - the uri requested.
content_type_extension - the content type extension as derived
from Content Types from the content type specified in Accept
request header.
If more than one content type was specified then the content types
specified will be ordered by importance.
language - the language encoding as specified in
Accept-Language request header.
If more than one language was specified then the languages specified
will be ordered by importance.
charset - the charset as specified in Accept-Charset request
header.
If more than one charset was specified then the charsets specified
will be ordered by importance.
content_encoding_extension - the content encoding extension as
derived from Content Encodings from the content encoding specified in
Accept-Encoding request heeader.
If more than one content encoding was specified then the encodings specified
will be ordered by importance.
default_content_type_extension - the default content type
extension as specified in Default Content Type.
default_language - the default language encoding as specified in
Default Language.
default_charset - the default charset as specified in
Default Charset.
default_content_encoding_extension - the default content encoding
extension as specified in Default Content Encoding.
For example, if the requested uri was /index and
Accept was text/html,
Accept-Language was ru,
Accept-Charset was IBM866,
Accept-Encoding was gzip,
Default Content Type was text/html=.html,
Default Language was en,
Default Charset was iso-8859-1,
Default Content Encoding was gzip and
Content Encodings was gzip=.gz
then the seach order would be:
index.html.ru.IBM866.gz
index.html.ru.IBM866
index.html.ru.gz
index.html.ru
index.html.gz
index.gz
index.html.en.iso-8859-1.gz
index.html.en.iso-8859-1
index.html.en.gz
index.html.en
index.html.gz
index.html
index.gz
index
|
Send Vary
|
Whether stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet will send the Vary response header when
Content Negotiation is set to Yes.
The Vary response header details the content type, language, charset
and content encoding of the response.
No is the default value.
Setting this value to Yes may have a negative impact on
performance and may not work with all Web browsers.
|
Default Language
|
The language used when setting the server's Locale and when determining which
language stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet should use when responding
to requests.
Normally not set.
If not set then the default Locale is used and stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet do not send the
Language response header when responding to requests.
|
Default Country
|
The country used when setting the server's Locale.
Normally not set.
If not set then the default country is used when setting the server's Locale.
|
Default Variant
|
The variant used when setting the server's Locale.
Normally not set.
If not set then the default variant is used when setting the server's Locale.
|
Default Charset
|
The character encoding used when responding to requests.
Used when determining which content type stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet should use when
responding to requests.
Normally not set.
If not set then stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet do not send the Content-Type response header
when responding to requests.
Used when Content Negotiation is enabled.
|
Default Content Encoding
|
key=value pair representing the default content encoding
and associated file extension.
Used when determining which content encoding stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet should use when
responding to requests.
Normally not set.
If not set then stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet do not send the Content-Encoding response
header when responding to requests.
Used when Content Negotiation is enabled.
|
Content Encodings
|
Zero or more line delimited key=value pairs representing
supported content encoding and associated file extension.
Used when determining which content encodings are supported by
stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet when responding to requests.
Normally not set.
If not set then stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet do not send the Content-Encoding response
header when responding to requests.
Used when Content Negotiation is enabled.
|
Default Content Type
|
key=value pair representing the default content type
and associated file extension.
Used when determining which content type stec.iws.FileServlet,
stec.iws.ServletTagServlet and stec.iws.SSIncludeServlet should use when
responding to requests.
Normally not set.
Used when Content Negotiation is enabled.
|
Content Types
|
Zero or more line delimited key=value pairs representing
supported content type and associated file extension.
Used when determining which content types are supported by
stec.iws.FileServlet, stec.iws.ServletTagServlet and
stec.iws.SSIncludeServlet when responding to requests.
Normally not set.
Used when Content Negotiation is enabled.
|
Administrators should immediately change the default Username/Password from
the Server form [Login > Monitor > Control Panel > Manage >
Server].
Username/Password should not be any obvious word, easily guessed terms,
should be at least 8 characters and should contain letters,
numeric and symbols.
Additionally Username/Password should be kept private, with limited
disclosure and should be changed frequently.