How do I configure Asset Bank with IIS on a separate server?
These instructions are for installing the Apache Tomcat Connector for IIS, configured for Asset Bank which may be running in Tomcat on a separate server.
In the following I assume the proxy dll will be installed in c:\inetpub\asset-bank-proxy on the web server. If a different directory is chosen then this must be reflected in the paths in the configuration files and registry.
The directory asset-bank-proxy will hold the dll itself, the isapi log and proxy configuration files. If you would like a different arrangement then you'll need to adapt the instructions below.
For more information see the article http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html and linked articles. Note that we use the ajp13 protocol, so there is no dependence on Tomcat being on the same server as IIS.
1. Create directory c:\inetpub\asset-bank-proxy on the web server to be the proxy installation directory.
2. Install files:
a) rewrites.properties (empty)
b) isapi.log (empty file)
c) uriworkermap.properties - maps urls to workers defined in workers.properties
The default should be ok if your webapp name is asset-bank:
/asset-bank/*=ajp13
/asset-bank=ajp13
d) workers.properties - proxy connection properties for ajp13 protocol.
Check the following settings and update if necessary. The intervening firewall if any needs to allow traffic on port 8009.
worker.ajp13.port=8009
worker.ajp13.host=localhost
e) isapi_redirect.dll - the plugin dll
3. Setting permissions
IIS and service accounts need permission to read and execute the isapi_redirect.dll and properties files.
In addition the isapi.log file needs to be writable by these accounts.
The accounts are usually as follows:
- Network Service
- IIS_WPG
- Internet Guest Account(\IUSR)
4. Registry settings
Check the supplied file: isapi_filter.reg.
Open in a basic text editor eg Notepad, and update the properties in the file if necessary to correct the paths to the files (by default the stem is c:\\inetpub\\asset-bank-proxy\\).
You must use the \\ notation since \ character needs to be escaped by a second \.
You can check the info has entered properly by running regedit and checking the values under the key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Jakarta Isapi Redirector\1.0]
5. IIS manager
a) Under the website, create a virtual directory which must be called 'jakarta'.
Set local path = C:\inetpub\asset-bank-proxy (adapt if needed to be the folder where isapi_redirect.dll is located).
While creating this new virtual directory assign it with execute access.
ie Read permission and Execute permission = Scripts and Executables
b) On the website properties ISAPI filters tab, add the dll as a new filter.
Name = jakarta
Path to executable = C:\Inetpub\asset-bank-proxy\isapi_redirect.dll
c) If you're using IIS 6.0 you must also add the Jakarta Isapi Redirector to the Web Service Extensions.
Right-click on Web Service Extensions and choose Add a new Web Service Extension, called ‘Tomcat'.
Add the isapi_redirect.dll to the required files and check the Set extension status to Allowed.
6. Restart IIS and make sure that the tomcat filter is marked with a green up-pointing arrow.