Installation guide

Fixed Problems

iPlanet Web Server, Enterprise Edition 4.1 SP6

iPlanet Web Server, Enterprise Edition 4.1 SP6 includes the following bug fixes:

• 526930. Servlet that does not read POST data returns an HTTP 200 along with error message.

• 517298. “Connection reset by peer” errors when using Administration Server on Windows NT.

• 528640. SHTML error logging can expose hexadecimal memory addresses that can lead to the

execution of arbitrary code on the server.

• 514050. Servlet class loader cannot load resource files.

• 523972.

MMapSessionManager session timeout doesn’t expire sessions.

• 523514.

HttpServletRequest.getParameter does not consistently return Shift_JIS data to a

servlet.

• 524402. The content-type HTTP header is included when a servlet doesn’t set it.

• 524552. The server does not properly handle cookies with a null value.

• 516573.

PathInfo used for session encoding causes problems for JSP/Servlet applications.

• 526082. 30 second delay with POSTs and JSP includes.

• 392232 (IBM AIX only).

sdk_test.sh produces error.

• 388853.

modutil outputs secmodule.db instead of secmod.db.

• 524741. Servlet engine ignores the

rootCause in a ServletException.

• 524415. The HTTP

Connection: Keep-alive header is added to the response headers even

when the servlet sets

Connection: close.

• 523498. Objects stored in a

session object are not removed by removeAttribute.

• 516877. JSPs containing text strings longer than 32k cause server errors.

• 504161 (Windows NT only). The Administration Server does not clean up the registry when

removing a server instance.

• 526810.

viewerr.exe crashes with error logs containing lines longer than 1024 characters.

• 524515.

IIOPsec library is missing the symbols for some SSL functions required to make WAI

C++ applications compile.

• 520263. Error when specifying “/” for From Directory on the Limit Symbolic Links page.

• 526335. Client auth can’t failover to basic auth, even if the ACLs are set up to allow failover.

• 529420. Character encoding is not remembered from a JSP to an included JSP.