Can Oracle iPlanet support X-Frame-Options & where/how to set it ?

Posted on 2014-11-11
Medium Priority
Last Modified: 2014-11-13
I've got the information on where to set X-Frame-Options for IIS, Apache (& I guess Oracle
Web server being a variant of Apache, we also insert the same code into .htaccess of oracle
Web server).

Now for Oracle iPlanet web server, where do I insert this line of code?
In obj.conf ,  .nsconfig , magnus.conf or ?

We are running Oracle iPlanet V6.1 & V7.

What's the command to restart the iPlanet service for the change to take effect?
Question by:sunhux
  • 2
  • 2

Author Comment

ID: 40434827
Oracle support emailed me to refer to
Doc ID 406587.1  without providing the exact url/link to download it.

Anyone care to attach a copy of the above doc?
LVL 66

Accepted Solution

btan earned 2000 total points
ID: 40436497
Q1. You can check this out on the ref for the obj.conf
more info on the "https-server_id" in below which explain the use of diff config file available

You may want to note the dynamic reconfiguration that may not necessarily need restart

Good to start off on the basic in administration and understanding the server console (GUI) and CLI (wadm) https://docs.oracle.com/cd/E19146-01/821-1828/gbrne/index.html

As for the doc, it is better to login into user portal and do doc search (i have no access though)

Q2. In general, you can catch more info in the server instance command in e.g. restart-instance, start-instance or stop-instance https://docs.oracle.com/cd/E19146-01/821-1828/gdhdz/index.html

Author Comment

ID: 40439736
Thanks very much.

Oracle got back with more detailed example:

In V6.1, edit instance-dir/config/obj.conf
In V7, edit instance-dir/config/<virtual-server-name>.obj.conf

add in the line after the last ‘Service method’:


ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"

Above shows 2 ‘Service method’; add line below after the last ‘Service method’:

 ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Output fn="set-variable" insert-srvhdrs="X-FRAME-OPTIONS: SAMEORIGIN"
LVL 66

Expert Comment

ID: 40439742
thanks for sharing

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Phishing emails are a popular malware delivery vehicle for attack.  While there are many ways for an attacker to increase the chances of success for their phishing emails, one of the most effective methods involves spoofing the message to appear to …
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Stellar Phoenix SQL Database Repair software easily fixes the suspect mode issue of SQL Server database. It is a simple process to bring the database from suspect mode to normal mode. Check out the video and fix the SQL database suspect mode problem.
Suggested Courses

616 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question