Wednesday, June 3, 2015

RSA to CPASS migration on windows platform



For IIS7

Prerequisites
  • Put agent installer here.  E:\csapps\PolicyAgentIIS7
  • Site should not be a virual directory(i.e. is being in default website folder), if it is so , you will have first make it as website and it should have dedicated application pool.
  • To check if it’s a dedicated or not . Goto “application pool” and check number of application associated with that app pool
  • Also check in the bindings of the application if the URL is “organisation1.com”, if not create new host name with organisation1.com domain name and get that configured with the help of IP DOMAIN team and after that manually enter in bindings too.
  • Close IIS manager



Configuring CPASS
  1. Create a friendly text file and copy password in the bin folder of the installer at E:\csapps\PolicyAgentIIS7. Alternatively, for IIS6 the path will be E:\csapps\sun\webaggents
  2. Cmd>installer bin>cscript IIS7CreateConfig.vbs ABCconf.txt
 Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\neha>e:

E:\>cd csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin

E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7CreateConfig.vbs ABCconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.


Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.
---------------------------------------------------------
Microsoft (TM) Internet Information Server (7.0)
---------------------------------------------------------
Enter the Agent Resource File Name [IIS7Resource.en] :

Enter the Agent URL (Example: http://agent.example.com:80) :
http://application1.lvs.organisation1.com:80

Displaying the list of Web Sites and its corresponding Identifiers (id)

SITE "Default Web Site" (id:1,bindings:http/xxx.xxx.xx.xxx:80:,http/xxx.xxx.xx.xxx:80:server.organisation1.net,http/xxx.xxx.xx.xxx:80:www8t.lvs.organisation.com,net.tcp/808:*,net.pipe/*,net.msmq/localhost,msmq.formatname/localhost,state:Starte)

SITE "Microsoft SharePoint Administration" (id:2,bindings:http/xxx.xxx.xx.xxx:6181:,state:Started)

SITE "application1"(id:7,bindings:http/xxx.xxx.xx.xxx:80:application1.lvs.organisation1.com,state:Started)

Web Site Identifier :
7
------------------------------------------------
Oracle OpenSSO Enterprise 8.0
------------------------------------------------
Enter the URL where the OpenSSO server is running. Please include the deployment
URI also as shown in the example (Example: http://opensso.example.com:58080/ope
nsso):
https://eifed-3-qa.organisation1.com:443/opensso

Please enter the Agent Profile name :
ABC

Enter the Agent profile password file :
ABCpwd.txt

-----------------------------------------------------
Agent Configuration file created : ABCconf.txt
------------------------------------------------------

3. Now,  Configure this config file with the help of this other script “IIS7Admin.vbs”

E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7Admin.vbs -config ABCconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.

Enter the Agent Resource File Name [IIS7Resource.en] :

Creating the Agent Config Directory
Creating the OpenSSOAgentBootstrap.properties and OpenSSOAgentConfiguration.properties File
Updating the Windows Product Registry
Installing the module into IIS.
Completed Configuring the IIS 7.0 Agent

4. Restart the iis service

5. Check if the CPASS is installed by following process
Go to instance in IIS> modules
See if the iis.dll is present



UNCONFIGURING CPASS
1. E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\bin>cscript IIS7Admin.vbs –unconfig itprodconf.txt
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Copyright c 2009, 2011, Oracle and/or its affiliates. All rights reserved.

Enter the Agent Resource File Name [IIS7Resource.en] :


Removing the Agent Bootstrap file
Removing the Agent Config file
Removing the Agent Config Directory
E:\csapps\PolicyAgentIIS7\web_agents\iis7_agent\Identifier_14\config
Removing the entries from Windows Product Registry
Removing the module from IIS.
Completed Unconfiguring the IIS 7.0 Agent


2. Restart IIS service

3. If its still not visible in the module add the “maps” in  “configuration” manually and then restart IIS

Regedit>HKEY_LOCAL_MACHINE>SOFTWARE>ORACLE>OPENSSO>IIS6AGENT>

If this identifier is not present then make it

NOTE
Site should not be a virtual directory(i.e. being in default website folder), if it is so then you will have to first make its website and then it should have dedicated application pool.

Tuesday, June 2, 2015

Certificate renewal on Unix box


What are web site certificates?
If an organization wants to have a secure web site that uses encryption, it needs to obtain a site, or host, certificate. There are two elements that indicate that a site uses encryption:

  •  a closed padlock, which, depending on your browser, may be located in the status bar at the bottom of your browser window or at the top of the browser window between the address and search fields
  • a URL that begins with "https:" rather than "http:"
By making sure a web site encrypts your information and has a valid certificate, you can help protect yourself against attackers who create malicious sites to gather your information.


RAISING A CERTIFICATE REQUEST

1. Run the command for extracting server key (server.key)
/home/u2/neha>openssl genrsa -out server.key 2048
Generating RSA private key, 2048 bit long modulus
.........+++
..................+++
e is 65537 (0x10001)
   this will give a file named 'server.key'

2. generate .csr file
home/u2/neha>openssl req -new -key server.key -out server.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:Global
Common Name (eg, YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

/home/u2/neha>ls -lrt
-r-xr-x--x    1 neha  staff        990930 Aug 21 11:54 openssl
-rw-r-----    1 neha   staff          1675 Aug 21 11:54 server.key
-rw-r-----    1 neha   staff          1074 Aug 21 11:58 server.csr


/home/u2/neha>cat server.csr
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----


3.   get these files on Desktop by FTP from path of server to Desktop. The mode of FTP should be ASCII  while doing get

4.   Send server.crt file to personnel in a organisation who can get this certified

5. Person sends back the crt file in this form

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----
MIIEfzCCA2egAwIBAgIDA35GMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
gjtMTuAyx1SL5laTTjgZ+7kB+JKzKuEuA2x+PZlLOOgE+FyQIwqwZbhK1wqJNh7J
weCs
-----END CERTIFICATE-----


INTERMEDIATE CA: 
---------------------------------------

-----BEGIN CERTIFICATE-----
MIID+jCCAuKgAwIBAgIDAjbSMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
blablablablavlablablablablablablablablablablablablavlablablablablablablablabla
blablablablavlablablablablablablablablavblablablablavlablablablablablablablabla
TezMGnGkqX2Gdgd+DYSuUuVlZzQzmwwpxb79k1ktl8qFJymyFWOIPllByTMOAVM
IIi0tWeUz12OYjf+xLQ=
-----END CERTIFICATE-----

6. Convert the txt files in CRT mode 

7. Copy the txt from BEGIN CERTIFICATE up to END CERTIFICATE. Including "-----BEGIN CERTIFICATE-----, -----END CERTIFICATE-----"

8. Save it on notepad with file name "server.crt” and "geotrust_intermediat.crt" on desktop. Format of txt will be changed to crt like server.crt and geotrust_intermediate.crt

10. Now, again do FTP and put the files server.crt and Geotrust_Intermediate.crt to home folder of UNIX server on which certs needs to be deployed.    Rename it with instance name – instance1.crt and geotrust_intermediate.crt. FTP to UNIX server must be BIN mode, not ASCII mode.

or 

Request UNIX team to put the files, server. Key, crt file and geotrust intermediate file.
In specified path 

11. change the ownership and group of files .
Note: The ownership and group will be same as it mentioned with old files in specified logs.

12. Exit from the ID of instance and then Bounce the apache with your own ID.

13. Check validity of certificate

 /export/apps/apache/OpenSSL/0.9.8.g/bin/openssl x509 -noout -in ./app.crt -startdate -enddate
notBefore=Apr 28 14:37:30 2015 GMT
notAfter=May  1 11:49:37 2016 GMT

How do you check a certificate of site?
Following are the points to see the security certificate of the website
1.       Open the site
2.       Right on the site
3.       Choose the property >Certificate
4.       Certificate contain start and expire date

Tuesday, April 28, 2015

Windows Server Migration Activities



1. Stop the Application specific webserver/appserver services like IIS service, JBoss, Tomcat or any  other software that is installed on the server explicitly. Open the service manager by 
A. Go to start
B. Go to run
C. Type 'services.msc' . Press 'ok'.
D. Choose the services to be stopped and click on 'stop'.

2. Set the services to 'Manual' (Not on 'Automatic'). This will ensure that when server is started again these services will not come up on itself.

3. In case there is any scheduled jobs on the server, make sure that all of them are suspended temporarily.

4. Database server mapping changes-
For SQL
Admin tools> OJDBC data source administrator > System DSN> see the services which have 'SQL service' > Select it> configure> update the server name of DB> Next> update Passward> Next

For Oracle
Make changes in TSNnames.ora file. Dont make changes manual. Use 'Oracle Net manager'.




Start>all Programs> Oracle OraClient10g_home2>configuration and Migration Tools> Net Manager




Add the New Host name (new database name) or new SID that is to be used for data connection after Migration.

5. Check in each Website in IIS, if it is mapped to correctIP.
Website>app>properties>IP Address

6. After Migration some changes will be done in RSA end as well(In case you are using RSA as authentication for any of the application on the server )
Control panel>RSA Authentication Agent> Advanced>clear note secret
change IP
main tab> test the RSA> 'Success' come up in the dialog box.

Monday, April 7, 2014

Type of Issues which we get under Apache Tomcat

Type of Issues which we get under Apache/Tomcat:-
=====================================================================
A. Reducing the file size by compressing the existing files to reduce the used space on server.
  1. First we need to check the size of file system. File size of the different file systems can be known by command df -k 
  2. 1.       We can always check for file of bigger size and compress them if they are not compressed.
    sudo find . –size +5000000 |more
  3.  Suppose you have got the output of last command as :- “/export/apps/apache/app_instance/logs/access_log” , then go to the path where this file exists... path should be something like "/export/apps/apache/app_instance/logs"
  4. Then you need to go to the bin folder of this particular application, example for this file: - /export/apps/apache/app_instance/bin and then you have to stop the apache services with command - “sudo ./apachectl stop” 
  5. And to check if the instances are stopped or not then we need to run a command that will be: - “ps -ef|grep -i”.
  6. Once you are confirmed that all the instances are stopped then go and rename the file i.e. :- “sudo mv access_log access_log_current_date”.Once, name of file is change you can zip the log with command “sudo gzip access_log_current date”.
  7.  Now you can again check the file system with command df -k. It will be surely reduced file system then before. Side wise we should also restart the apache service that stopped, for this we will again have to go to “bin” directory (/export/apps/apache/app_instance/bin) and command  “sudo ./apachectl start” can be used to start the apache service.
  8. So once the services are started you need to do check the log directory if the new log file has been created or not and you need to do the same steps for all the files which you find under large files.
Note :- At times when we get other files as large files we need to check the time stamp of the files so that we can zip the files.

===================================================================


B. To redirect a particular website or a particular address to a different address.


Single address redirect can be done by adding a line to the conf file where the site is hosted.



Two types of redirection can be done.

1.)     Domain  redirection
2.)     Web page redirection.


1.)     Domain Redirection
Domain redirection is to redirect whole domain to of site to another site.
Above domain needs redirects to another site http://xxx5.lvs.domain1.com/dir4/dir5/     
NoteHost name –“dir4” must be mentioned in documented root as virtually
Document Root: /dir1/dir2/dir3/ (check on the path)

Open “httpd.conf” of apache in which you want to make the redirection.Use vi editor (make sure take the backup of configuration file before any changes in it)

  Run command - vi “httpd.conf” and then add
    Document Root /dir1/dir2/dir3/dir4/dir5/ 
    Server Name        www.a1.domain1.com 
    Server Alias         a1.domain1.com 
    Redirect permanent  /   http://xxx5.lvs.domain1.com/dir4/dir5/ 

There after recycle same Apache to affect the changes.

2.)     Web page redirection.
Web page redirection is permanent redirection of link to another link; it redirects always link to domain or link to domain+directoty/link – (whole web page).

Link - /dir1/dir2/

It will redirect the link “/dir1/dir2/” to desired web page, it does not take prefixed domain name
Whatever the domain name is prefixed to link it will redirect to desired web page.
User wants to redirect the link - /dir1/dir2/  which is mentioned in documented root of  application, to http://qwerty.domain.com/display/ddmx/Home.
Whatever domain prefixed   to link it ignores the domain and redirects the link to desired site.
Example:
xxx1.lvs.domain.com/dir1/dir2/ 
or xxx2.lvs.domain.com/dir1/dir2/  
or xxx5.lvs.domain.com/dir1/dir2/  
after changes in configuration for redirection to desired site, it will concentrate to link only and open the other site.
                                     http://qwerty.es.domain.com/a/b/Home.

Path - :/export/apps/apache/Apache2.0.54/conf
File - httpd.conf
Vi httpd.conf and add the below line in redirection parameter of file.

Redirect permanent   /dir1/dir2/index.html  “http://qwerty.es.dupont.com/a/b/Home

Recycle Apache after addition in file to affect the changes.

Note;- Before redirecting, first we need to check if single address needs to be redirected to a different address or a new website is hosted on our server



=====================================================================


C. To change the look of the URL

Re-write Engine modifies a web URL's appearance. This modification is called URL rewriting. Rewritten URLs are used to provide shorter and more relevant-looking links to web pages.
Re-write redirects the URL to the directory of webapps in which war file is deployed. It redirects the URL of application to folder where war file of application is deployed.
Let’s take an example
There is a URL - http://app-dev.lvs.domain1.com , if we click on URL then the actual web page does not come up, it opens “tomcat successfully installation page”. The actual web page is http://app-dev.lvs.domain1.com/app-war-d . I had to write complete URL along with /app-war-d.  to  get the actual web page.

Re-write rule comes in picture now; Re-write engine redirect the JK_Mount in httpd.conf file in instance directory on server.
Login to the server on which the application is hosted .Go to the directory of apache of instance and make changes in httpd.conf file of application.
Export/apps/apache//conf

vi edit the httpd.con file. There is Re-write Engine Module in configuration file.

JK Mount mounting application to URL
Uncomment the RewriteRule by remove the “# key” and then replace the re-write folder name with the name of folder in which war file of application is deployed. Navigate the directory export/apps/tomcat///webapps , in webapps there could be folder(suppose 'app-air-d') in which war file must be deployed , so use the name of that folder in which war file deployed.

RewriteEngine On
RewriteRule  ^/$  /app-air-d/ [R]
#JkMount /* app-dev

Recycle the apache of instance to get the changes affected. Try to open the URL http://app-dev.lvs.domain1.com and it will redirect to substitute directory http://app-dev.lvs.domain.com/app-war-d.

@ Important


  1. Make sure Re-write Engine should be ON, in httpd.conf file of apache.
  2. An ISO file mod_rewrite.so file must be saved on module director of apache. I fit is not there then download it and copy into module directory. 
=====================================================================

D. MIME TYPE updation
The Multipurpose Internet Mail Extensions (MIME) types file contains mappings between file extensions and MIME types. This file is utilized during request processing to tell the server what type of resource is being requested. It bases this information on the extension of the resource (such as .txt, .html, or .cgi) and associates a type, language, or encoding method based on the extension.
Multipurpose Internet Mail Extensions (MIME) is an Internet standard that extends the format of email to support.
An Internet media type is a standard identifier used on the Internet to indicate the type of data that a file contains.
email clients use them to identify attachment files,
    web browsers use them to determine how to display or output files that are not in HTML format,
    search engines use them to classify data files on the web.
  
There are 3 things in MIMI TYPE updations
1.    File Type – Characteristics of the file , weather it is HTML , EXEL , WORD DOC., PPT like ...
2.    File Extension – The Extension of file after “.” .doc, .xls, .ppt,.html.
3.    MIMI TYPE - Type of Application format. Like template , micro

MIMI TYPE is arranged alphabetically, The MIMI TYPE is divided in 3 parts and all 3 parts are arranged alphabetically.
Example.
application/vnd.openxmlformats-officedocument.wordprocessingml.document  
application/vnd.ms-word.document.macroEnabled.12  
application/vnd.openxmlformats-officedocument.wordprocessingml.template  
application/vnd.ms-word.template.macroEnabled.12  
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet  
application/vnd.ms-excel.sheet.macroEnabled.12  
application/vnd.openxmlformats-officedocument.spreadsheetml.template  
application/vnd.ms-excel.template.macroEnabled.12  
application/vnd.ms-excel.sheet.binary.macroEnabled.12  
application/vnd.ms-excel.addin.macroEnabled.12  
application/vnd.openxmlformats-officedocument.presentationml.presentation  
application/vnd.ms-powerpoint.presentation.macroEnabled.12  
application/vnd.openxmlformats-officedocument.presentationml.slideshow  
application/vnd.ms-powerpoint.slideshow.macroEnabled.12  
application/vnd.openxmlformats-officedocument.presentationml.template  
application/vnd.ms-powerpoint.template.macroEnabled.12  
application/vnd.ms-powerpoint.addin.macroEnabled.12  
application/vnd.openxmlformats-officedocument.presentationml.slide  
application/vnd.ms-powerpoint.slide.macroEnabled.12  
application/onenote  
application/onenote  
application/onenote  
application/onenote  
application/vnd.ms-officetheme
Alphabetically arranged MIMI TYPE at below.
application/onenote  
application/onenote  
application/onenote  
application/onenote  
application/vnd.ms-excel.addin.macroEnabled.12  
application/vnd.ms-excel.sheet.binary.macroEnabled.12  
application/vnd.ms-excel.sheet.macroEnabled.12  
application/vnd.ms-excel.template.macroEnabled.12  
application/vnd.ms-officetheme
application/vnd.ms-powerpoint.addin.macroEnabled.12  
application/vnd.ms-powerpoint.presentation.macroEnabled.12  
application/vnd.ms-powerpoint.slideshow.macroEnabled.12  
application/vnd.ms-powerpoint.slide.macroEnabled.12  
application/vnd.ms-powerpoint.template.macroEnabled.12  
application/vnd.ms-word.document.macroEnabled.12  
application/vnd.ms-word.template.macroEnabled.12  
application/vnd.openxmlformats-officedocument.presentationml.presentation  
application/vnd.openxmlformats-officedocument.presentationml.slideshow  
application/vnd.openxmlformats-officedocument.presentationml.slide  
application/vnd.openxmlformats-officedocument.presentationml.template  
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet  
application/vnd.openxmlformats-officedocument.spreadsheetml.template  
application/vnd.openxmlformats-officedocument.wordprocessingml.document  
application/vnd.openxmlformats-officedocument.wordprocessingml.template  
Please go through the above example to arrange the MIMI TYPE.








Wednesday, February 26, 2014

Install new Apache instance on AIX

This blog will help a Apache aspirant to install a Apache on his AIX machine.

Prerequisites
  1.  Download Apache software [  Ref:- http://httpd.apache.org/download.cgi ]
  2. AIX Machine
  3. Essential libraries- The GNU C compiler (gcc) from the Free Software Foundation (FSF) is recommended (version 2.7.2 is fine). It’s libraries are also needed. It’s necessary to have math library (math.h) installed too. like autoconf ,   gzip, GNU make, GNU diffutils, autogen, GNU libtool 1.4.2 or higher, GNU m4, automake,  gperf, expect, GNU Bison, patch, tar, bzip2, bash shell
  4. Memory space- about 10 MB of memory is occupied by the Apache and 100 MB of temporary memory during the installation
  5. Users and group
  6. IP address/ domain name for instance- I am assuming with IP "xx.XX.xxx.XXX" and domain name "app_name.domain.com"

Procedure
cdcux00:neha:/export/apps/apache/app_name> gunzip -c httpd-2.0.65.tar.gz 

cdcux00:neha:/export/apps/apache/app_name> ls -lrt 

total 58664
-rw-r-----    1 apache   www        30023680 Feb 25 06:18 httpd-2.0.65.tar

cdcux00:neha:/export/apps/apache/app_name> tar -xvf httpd-2.0.65.tar

This will extract the folder.

cdcux00:neha:/export/apps/apache/app_name> ls -lrt

-rw-r-----    1 apache   www        30023680 Feb 25 06:18 httpd-2.0.65.tar
drwxr-s--x   12 apache   www            4096 Feb 25 06:37 httpd-2.0.65

cdcux00:neha:/export/apps/apache/app_name> mkdir app_name-apache

cdcux00:neha:/export/apps/apache/app_name> ls -lrt

total 58664
-rw-r-----    1 apache   www        30023680 Feb 25 06:18 httpd-2.0.65.tar
drwxr-s--x   12 apache   www            4096 Feb 25 06:37 httpd-2.0.65
drwxr-s--x   15 apache   www            4096 Feb 25 06:39 app_name-apache

cdcux00:neha:/export/apps/apache/app_name> cd httpd-2.0.65

cdcux00:neha:/export/apps/apache/app_name/httpd-2.0.65> ls -lrt
total 2976
-rw-r-----    1 apache   www             367 Nov 24 2004  emacs-style
-rw-r-----    1 apache   www           10943 Nov 24 2004  config.layout
-rw-r-----    1 apache   www          189152 Nov 24 2004  apachenw.mcp.zip
-rw-r-----    1 apache   www              72 Nov 24 2004  acconfig.h
-rw-r-----    1 apache   www            8180 Nov 24 2004  VERSIONING
-rw-r-----    1 apache   www            3876 Nov 24 2004  README.platforms
-rw-r-----    1 apache   www            8355 Nov 24 2004  Makefile.in
-rw-r-----    1 apache   www            5216 Nov 24 2004  LAYOUT
-rw-r-----    1 apache   www            2912 Nov 24 2004  InstallBin.dsp
-rw-r-----    1 apache   www            2688 Nov 24 2004  BuildBin.dsp
-rw-r-----    1 apache   www           14882 Nov 24 2004  ABOUT_APACHE
-rw-r-----    1 apache   www            7110 Nov 24 2004  .gdbinit
-rw-r-----    1 apache   www           16062 Jul  5 2006  libhttpd.dsp
-rw-r-----    1 apache   www            4190 Jul  5 2006  Apache.dsp
-rwxr-x--x    1 apache   www            5300 Jul 12 2006  buildconf
-rw-r-----    1 apache   www            5909 Jan 10 2007  README
-rw-r-----    1 apache   www           16392 Jan  7 2008  acinclude.m4
-rw-r-----    1 apache   www           28563 Jan 18 2008  LICENSE
-rw-r-----    1 apache   www           39666 Nov 13 2008  Apache.dsw
-rw-r-----    1 apache   www           19408 May 29 2009  configure.in
-rw-r-----    1 apache   www           29213 Oct 18 2010  Makefile.win
-rw-r-----    1 apache   www           11004 Sep 14 2011  NWGNUmakefile
-rw-r-----    1 apache   www            3947 Jan 17 2012  INSTALL
-rw-r-----    1 apache   www          326143 Jun 26 2013  CHANGES
-rw-r-----    1 apache   www             828 Jun 26 2013  NOTICE
drwxr-s--x    9 apache   www             256 Jun 28 2013  docs
-rw-r-----    1 apache   www           16825 Jun 28 2013  httpd.spec
-rwxr-x--x    1 apache   www          482547 Jun 28 2013  configure
-rwxr-x--x    1 apache   www             160 Feb 25 06:28 config.nice
-rw-r-----    1 apache   www             957 Feb 25 06:30 modules.c
-rwxr-x--x    1 apache   www           39349 Feb 25 06:30 config.status
drwxr-s--x    2 apache   www            4096 Feb 25 06:30 test
drwxr-s--x    5 apache   www             256 Feb 25 06:30 srclib
drwxr-s--x    9 apache   www            4096 Feb 25 06:30 os
drwxr-s--x   17 apache   www            4096 Feb 25 06:30 modules
-rw-r-----    1 apache   www            8620 Feb 25 06:30 Makefile
-rw-r-----    1 apache   www               0 Feb 25 06:30 .deps
drwxr-s--x    2 apache   www            4096 Feb 25 06:30 include
-rw-r-----    1 apache   www           52766 Feb 25 06:30 config.log
drwxr-s--x    5 apache   www            4096 Feb 25 06:30 build
drwxr-s--x    4 apache   www            4096 Feb 25 06:37 server
drwxr-s--x    5 apache   www            4096 Feb 25 06:37 support
-rw-r-----    1 apache   www           50710 Feb 25 06:37 modules.o
-rw-r-----    1 apache   www             312 Feb 25 06:37 modules.lo
-rwxr-x--x    1 apache   www            6773 Feb 25 06:37 httpd
drwxr-s--x    2 apache   www             256 Feb 25 06:37 .libs

I am assuming that you are not logged in with apache ID so the I am using "sudo" with each command.

cdcux00:neha:/export/apps/apache/app_name/httpd-2.0.65> sudo ./configure --enable-mods-shared=most --prefix=/export/apps/apache/app_name --with-mpm=worker


Similarly it could also be installed under a folder inside any directory residing in the "app_name" folder

cdcux00:neha:/export/apps/apache/app_name/httpd-2.0.65> sudo ./configure --enable-mods-shared=most --prefix=/export/apps/apache/app_name/app_name-apache --with-mpm=worker


cdcux00:neha:/export/apps/apache/app_name/httpd-2.0.65>sudo make

Till these two steps you will not be able to see the apache installed

cdcux00:neha:/export/apps/apache/app_name/httpd-2.0.65> sudo make install

after this step you will be able to see the apache installed.

cdcux00:neha:/export/apps/apache/app_name/app_name-apache>ls -lrt
total 96
drwxr-sr-x    2 apache   www            4096 Feb 25 06:39 lib
drwxr-sr-x    2 apache   www            4096 Feb 25 06:39 modules
drwxr-sr-x    2 apache   www            4096 Feb 25 06:39 htdocs
drwxr-sr-x    3 apache   www            4096 Feb 25 06:39 error
drwxr-sr-x    2 apache   www            4096 Feb 25 06:39 conf
drwxr-sr-x    4 apache   www             256 Feb 25 06:39 man
drwxr-sr-x    2 apache   www             256 Feb 25 06:39 logs
drwxr-sr-x    2 apache   www            4096 Feb 25 06:39 include
drwxr-sr-x    3 apache   www            8192 Feb 25 06:39 icons
drwxr-sr-x    2 apache   www             256 Feb 25 06:39 cgi-bin
drwxr-sr-x   14 apache   www            8192 Feb 25 06:40 manual
drwxr-sr-x    2 apache   www            4096 Feb 25 06:40 build
drwxr-sr-x    2 apache   www            4096 Feb 25 06:40 bin

Thus the apache is installed.

Setting the configurations

cdcux00:neha:/export/apps/apache/app_name/app_name-apache/conf>ls -lrt
total 360
-rw-r--r--    1 apache   www           53011 Feb 25 06:39 mime.types
-rw-r--r--    1 apache   www           12958 Feb 25 06:39 magic
-rw-r--r--    1 apache   www            2083 Feb 25 06:39 highperformance.conf
-rw-r--r--    1 apache   www           11380 Feb 25 06:39 ssl.conf
-rw-r--r--    1 apache   www           11380 Feb 25 06:39 ssl-std.conf
-rw-r--r--    1 apache   www           37103 Feb 25 06:39 httpd.conf
-rw-r--r--    1 apache   www           37103 Feb 25 06:39 httpd-std.conf
-rw-r--r--    1 apache   www            2083 Feb 25 06:39 highperformance-std.conf

file " httpd-std.conf" is the copy of the httpd.conf. Even then you can't find it, take backup of current httpd.conf (to be on safer side) and then do the following changes.

cdcux00:neha:/export/apps/apache/app_name/app_name-apache/conf>vi httpd.conf

Listen  xx.XX.xxx.XXX:80

ServerName app_name.domain.com

User apache
Group www

for directory index page
 make a html file named "mytesting.html" and keep this inside "cdcux00:neha:/export/apps/apache/app_name/app_name-apache/htdocs"

make following changes in the httpd.conf file 

DirectoryIndex mytesting.html

Now restart the Apache. now when you will look up " app_name.domain.com" on internet explorer this will show the page "mytesting.html" that you made.