Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

PowerScale OneFS 9.5.0.0 CLI Administration Guide

Enable and configure HTTP

You can configure HTTP and WebDAV to enable users to edit and manage files collaboratively across remote web servers.

You can use the isi http settings modify command to configure HTTP-related settings.
  • Run the isi http settings modify command.
    The following command enables the HTTP service, WebDAV, and basic authentication:
    isi http settings modify --service=enabled --dav=yes \
    basic-authentication=yes
    NOTE:Basic authentication is disabled by default.
  • In PowerScale OneFS 9.5.0.0 and later versions, you can configure Apache session timeouts.

    Sessions that are allowed to remain open indefinitely are a security risk. An attacker could use an already authenticated session to access a hosted application. As a protection against this type of attack, OneFS detects HTTP and HTTPS session inactivity and closes inactive sessions. Session closing is controlled by timeout values that are configurable in the OneFS CLI.

    Use the isi http settings modify command to configure timeouts. The following table shows the timeout parameters, the corresponding Apache directives that they implement, and the default values.

    Apache session timeout settings Description Defaults (in seconds)

    Nonhardened | Hardened cluster

    Service Timeout: isi http settings modify --service-timeout <duration>
    • Amount of time (seconds) that the Apache server waits for specific events before failing a request.
    • This parameter affects the Apache instance and each http-based service. Services include the WebUI, the External PAPI, RAN, and the RemoteService.
    • A value of 0 indicates that the service timeout value is the Apache default.
    • Gets the HTTP Timeout Apache directive from both the WebUI and HTTP service.
    • Setting this timeout avoids Denial of Service (DoS) attacks.
    500 | 10
    Inactive Timeout: isi http settings modify --inactive-timeout <duration>
    • Amount of time (seconds) that the Apache server will close sessions after a determined period of inactivity.
    • Gets the HTTP RequestReadTimeout Apache directive from both the WebUI and HTTP service.
    500 | 10
    Session Max Age: isi http settings modify --session_max_age <duration>
    • The maximum amount of time (seconds) a session will be valid before a timeout.
    • Gets the HTTP SessionMaxAge Apache directive from both WebUI and HTTP service.
    500 | 10

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\