Migrating and installing IBM HTTP Server on z/OS systems

You can install the IBM® HTTP Server product on z/OS® systems. Ensure that you order the current version of WebSphere® Application Server that contains the IBM HTTP Server for z/OS.

Before you can successfully install IBM HTTP Server, ensure that your environment meets the prerequisites for the application server. For more information, see the Preparing the base operating system topic.

Note: For new installations of version 8.5.5.11 and higher, the default Java SDK is Java SE 8. Java 8 is the recommended Java SDK because it provides the latest features and security updates. You can continue to use Java SE 6, but no service can be provided after the end of support in April 2018, which could expose your environment to security risks.
Install the IBM HTTP Server product code using IBM Installation Manager and then run an installation script to create a configuration in the installation directory:
Attention:
  • IBM HTTP Server is different from the HTTP Server for z/OS. The information contained within the IBM HTTP Server product documentation pertains to IBM HTTP Server, not the HTTP Server for z/OS.
  • In the past, you could install IBM HTTP Server as an element of the IBM Ported Tools product (5655-M23). This installation option was withdrawn when z/OS 2.2 was released with IBM HTTP Server 9.0 as a built-in element of the operating system.
  • The product code for the IBM HTTP Server is installed into a read-only file system by IBM Installation Manager.
  • After you install the product code, choose an installation directory for each IBM HTTP Server instance that you want to run under z/OS. Each server instance requires its own installation directory.
  • You can use an install script provided with IBM HTTP Server to: Copy files into this directory, perform initial customization, and create symbolic links to the product code directory.
You can use the Web server jobname or other identifier in the installation directory name. For example:
/opt/wwww/webserver1
/var/webservers/AAST1

In the instruction examples in the following topic for installing IBM HTTP Server, an installation directory of /etc/websrv1 is used.

Learn more about the installation features for IBM HTTP Server by reading the appropriate topics:
  • Creating Installation Manager on a z/OS operating system using downloaded zip files or SMP/E files
  • Configuring an instance of IBM HTTP Server
  • Uninstalling IBM HTTP Server

Migrating the mod_auth_saf module directives to use the mod_authnz_saf module directives.

Use the mod_authnz_saf directive for your SAF configuration instead of the mod_auth_saf directive. In addition, SAF password authentication is now enabled by specifying the SAF basic authentication provider directive.
AuthBasicProvider saf
Also, the SAFRequire and AuthSAF directives are not supported in this release of IBM HTTP Server. For information about SAF directives, see the information center topic about SAF directives.
[z/OS]

Migrating from mod_auth_ldap to mod_authnz_ldap

The mod_auth_ldap directive in IBM HTTP Server Version 6.1 has been renamed to mod_authnz_ldap, and has undergone several changes, such as:
  • AuthBasicProvider ldap is now mandatory to have LDAP handle authentication.
  • AuthZLDAPAuthoritative replaces AuthLDAPAuthoritative for configuration, if other types of authorization are permissible.
  • Require directives have been updated to be uniquely identified as being LDAP related, for example, Require ldap-user and Require ldap-group.

For further information, see the mod_authnz_ldap documentation.