Skip to end of metadata
Go to start of metadata

Table of Contents

How to configure Tomcat Connector for IIS 6?

The following are the high level steps required to configure a Tomcat connector with IIS 6:

Configure the AJP Connector

  1. Get the package "tomcat_iis_connector.zip" from the "[ADSS Server installation directory]/support". It contains the configuration files necessary for the ISAPI filter to run and communicate with your ADSS Server.
  2. Extract the downloaded zip file and place the contents in a folder alongside the downloaded binary file in a convenient location on your server. The default location is C:\tomcat_iis_connector.
  3. Copy the 'isapi_redirect.dll' from either of x32 or x64 directories (based on your hardware architecture on the IIS server machine) within the 'tomcat_iis_connector' directory and place this dll file at the root of 'tomcat_iis_connector directory'
  4. If you extracted the AJP Connector to a directory other than the default (C:\tomcat_iis_connector), then edit the isapi_redirect.properties file and ensure that the log_file, worker_file, worker_mount_file and rewrite_rule_file properties point to the correct location.
  5. If your ADSS Server is not running on the same server as IIS (for example, if ADSS Server is running on a non-Windows server), then edit the worker.properties.minimal file in the conf directory so that the worker.worker1.host property points to the IP address or host name of your ADSS Server.

Add ISAPI Filter

  • Open the Internet Information Services (IIS) Manager.
  • Ensure that the IIS Web Site that will be used to proxy ADSS Server requests is selected (e.g. default website).
  • Right click on the default website and click on properties
  • In the properties dialog click on the ISAPI Filters tab:

  • Click the Add button.
  • Set the 'Filter name' to 'tomcat' and set the 'Executable' to the isapi_redirect.dll that you downloaded in section 1.

  • Click 'OK'.
  • The new filter should now be listed in the ISAPI Filters list for the website.

 

Add Virtual Directory

Now you will add a virtual directory in the IIS website to host the ISAPI Filter.

  1. Ensure that the IIS Web Site that will be used to proxy ADSS Server requests is selected (e.g. default website).
  2. Right-click the IIS Web Site and select 'New' >  'Virtual Directory'.
  3. Set the 'Alias' to 'jakarta' and click 'Next'.



  4. Set the 'Path' to the directory where you extracted the ISAPI Filter in section 1 (such as C:\tomcat_iis_connector).



  5. Click 'Next'.
  6. Choose the permission options as 'Read' and 'Execute (such as ISAPI applications or CGI)'



  7. Click 'Next' and then click 'Finish'.

 

Icon

If you only need to access the ADSS services over a non-SSL channel then you can directly jump to step 7 i.e. restart IIS and step 4 and 5 can be safely ignored.  If you also need to access the ADSS services or the ADSS Server console on a secure SSL channel then you should additionally follow the instructions in steps 5 and 6 below.

 

Configuring port for https

  1. Ensure that the IIS Web Site that will be used to proxy ADSS Server requests is selected (e.g. default website).
  2. Right click on the default website and click 'properties'.



  3. Make sure the SSL port is set to either 443 (default SSL port) or another desired port and click 'OK'.

SSL Settings

  1. Ensure that the IIS Web Site that will be used to proxy ADSS Server requests is selected (e.g. default website).
  2. Right click and go to 'properties'.
  3. Go to 'Directory Security' tab > 'Secure Communications' area > 'Edit' dialog.



  4. Select the option to 'Accept client certificates' as shown above and click 'OK'.

 

Icon

In order to access the ADSS Server console and services over SSL using IIS Server, make sure the SSL Server certificate is configured for the default website.  Also ensure the issuer of the ADSS Server operator/client SSL certificate is registered on both the IIS Server and client machines.

 

Restart IIS

 Either restart the 'World Wide Web Publishing Service' from the Windows services panel or restart IIS by right clicking on the default website and choose to stop and then start and you are DONE.

 

  • No labels