It really OAS and not iAS? If it is, you need to upgrade your software. There is a published exploit against the version of Apache used by Oracle's latest iAS release. Oracle has released a patch which stops the exploit
I have built Oracle web servers for years, but I am now of the mind that these things should not be built by DBA's but by webmasters. I am undecided whether to one should go with iAS or construct your own with Apache. The mod_plsql module for instance was not created by Oracle. It and things such as forms server and reports server will run against such a construction. However, we were advised last week that the Windows NT machines will be converted to XP this year. As a result, I started to look at the 9i Internet Developer Suite. About every third line is a statement to the effect that the 9i database, 9 iAS, and 9 iDS are made to work together. I haven't figured out what one is giving up if one builds their own web server and also installs components for the 9 iAS distribution. Is it just convenience? One reason for giving up the convenience is security. An exploit is discovered and possibly published. Apache fixes the problem. If I have built my own I can get the patch from Apache and rebuild the web server. If I'm wedded to iAS I need to wait for Oracle to incorporate the patch into its offering. This could be a matter days to over a week. However weighing-in on the 9 iAS side is the ease of installing a fix. The Apache fix for the aforementioned problem required a rebuild; you need someone wise in the ways of make files and such. The 9 iAS fix was a simple file replacement. Ian MacGregor Stanford Linear Accelerator Center [EMAIL PROTECTED] -----Original Message----- Sent: Wednesday, July 17, 2002 9:18 AM To: Multiple recipients of list ORACLE-L Folks, I'm a DBA who is really an old developer at heart. I know a little Java, a little Asp (enough, as they say, to be really dangerous!), I used to do C code that now makes my head swim to look at. (I think to myself, what the devil was I doing??) Anyway, I've finally found some time and a machine here at work to start playing with OAS just to see what it's all about. Anyone have any good suggestions with regards to: 1. Sites, books, white papers and the like with good install tips, hints, warnings and the like. 2. Sites, books, white papers and the like Quick getting started tips. 3. Your own "getting started" experiences of things to do or not to do. 5. Anything I should do before I mess with OAS. Optimistically hopeful that this will all just go really smooth and I'll have a cool web page that I can bring up soon! RF Robert G. Freeman - Oracle OCP Oracle Database Architect CSX Midtier Database Administration Author Oracle9i RMAN Backup and Recovery (Oracle Press - Oct 2002) Oracle9i New Features (Oracle Press) Mastering Oracle8i (Sybex) Clark Griswold: Eddie, has anyone ever told you that you're bad luck? Cousin Eddie: Those were my mother's dying words. But I guess if your body's covered in third degree burns, and your foot's caught in a bear trap, you tend to start talkin' crazy. -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Freeman, Robert INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: MacGregor, Ian A. INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
