RSA Authentication Agent 5.3 for Web for Apache Web Server Readme

[#1]

April 6, 2007

Introduction

This document lists late-breaking information in the RSA Authentication Agent 5.3 for Web for Apache. Read this document before installing the software. This document contains the following sections:

• Technical Notes
• Obtaining the Version Number of the Web Agent Software
• Support for Worker Multi Processing Module
• Multi-Domain Access
• Browser Caching
• Known Issues
• Getting Support and Service

This Readme may be updated. The most current version can be found on RSA Link https://community.rsa.com. Or, you can print this Readme.

---

Technical Notes

This section provides information that you need to know about the behavior of the software.

Obtaining the Version Number of the Web Agent Software

To obtain the version number of the Web Agent Agent software:

1. Change directories to the Web Agent directory (for example: /usr/local/apache/rsawebagent).
2. Type:

strings mod_rsawa_apache.so | grep "Agent"

Support for Worker Multi Processing Module

RSA Authentication Agent 5.3 for Web for Apache Web Server supports Worker Multi-Processing Module (MPM). Previous releases supported Prefork MPM. Support for Worker MPM is configured automatically during the Web Agent installation.

Multi-Domain Access

If you are setting up multi-domain authentication, you must use the same WebID URL across all web servers. When using IIS web servers and Apache web servers, change the WebID URL on the Apache servers to /WebID/IISWebAgentIF.dll. For directions, see the RSA Authentication Agent 5.3 for Web for Apache Web Server Installation and Configuration Guide.

Browser Caching

For security purposes, instruct end users to disable caching in their browsers.

^Top

---

Known Issues

This section describes issues that remain unresolved in this release. Wherever a workaround or fix is available, it has been noted or referenced in detail.

Platform: Apache
Problem: The Content Type HTTP header in web pages generated by the Web Agent was set incorrectly.
Workaround: The Web Agent now uses the Apache API ap_made_conent_type() to get content type information. However, the web site administrator must use the AddDefaultCharset directive value in the httpd.conf file to specify the character type for the web page. Do one of the following:

• If you are using html, set the AddDefaultCharset value in the httpd.conf file to off, and specify the character set(s) in the .html code for the web page.

• If you are using html, set the AddDefaultCharset value in the httpd.conf file to on enable the Apache internal default charset of iso-8859-1.

• Specify an alternate character set by setting the AddDefaultCharset directive value to be something other than the default character set.

Platform: All UNIX platforms
Problem: Uninstalling any version of RSA Authentication Agent 5.3 for Web for Apache Web Server that has been previously installed as an upgrade does not remove all of the Agent files. The rsawebagent directory remains in the original installation directory.
Workaround: After you uninstall RSA Authentication Agent, perform the uninstallation again.

^Top

---

Getting Support and Service

RSA SecurCare Online: https://knowledge.rsasecurity.com/

Customer Support Information: www.rsa.com/support

RSA Secured Partner Solutions Directory: http://www.rsasecured.com/

^Top

---

© 2007 RSA Security Inc. All rights reserved.

Trademarks

RSA and the RSA logo are registered trademarks of RSA Security Inc. in the United States and/or other countries. For the most up-to-date listing of RSA trademarks, see www.rsa.com/legal/trademarks_list.pdf. EMC is a registered trademark of EMC Corporation. All other goods and/or services mentioned are trademarks of their respective companies.

^Top