Contents Overview 1 Introduction to Web Applications 2 Creating and Removing Web Applications 4 Configuring Web Applications 6 Lab A: Creating and Configuring Applications 10 Installing ISAPI Filters 20 Lab B: Installing and Using ISAPI Applications and Filters 22 Review 29 Module 4: Installing and Configuring Web Applications Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2001 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, ActiveX, BackOffice, FrontPage, MS-DOS, Outlook, PowerPoint, SQL Server, Visual Basic, Visual InterDev, Visual SourceSafe, Visual Studio, Windows, Win32, Windows Media, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Module 4: Installing and Configuring Web Applications iii Instructor Notes This module provides students with the knowledge and skills necessary to configure Web applications in Microsoft ® Internet Information Services (IIS) 5.0. After completing this module, students will be able to:  Describe the types of Web applications.  Create and remove Web applications.  Configure Web applications.  Install Internet Server Application Program Interface (ISAPI) filters. Materials and Preparation This section provides the materials and preparation tasks that you need to teach this module. Required Materials To teach this module, you need the Microsoft PowerPoint® file 2295A_04.ppt. Preparation Tasks To prepare for this module, you should:  Read all of the materials for this module.  Complete the labs. Presentation: 30 Minutes Lab: 60 Minutes iv Module 4: Installing and Configuring Web Applications Module Strategy Use the following strategy to present this module:  Introduction to Web Applications This topic describes the types of Web applications that are discussed in this module. Explain the concept of Web applications, and discuss each of the Application Programming Interfaces (APIs): Common Gateway Interface (CGI), ISAPI, and Microsoft Active Server Pages (ASP).  Creating and Removing Web Applications This topic describes the procedures for creating and removing Web applications in IIS. Explain that, to create a Web application, you must first designate a directory as the starting point (application root) for the application. Next, demonstrate the procedures for creating and removing a Web application.  Configuring Web Applications This topic describes the different procedures for configuring Web applications. Explain that you can control program execution on your Web site by setting application permissions. Describe the procedure for setting application permissions for each permissions setting. Describe how to configure application protection settings and explain the impact that each setting has on performance. Warn students that, for performance purposes, it is not recommended that you run more than ten isolated applications. Next, explain how to configure application mappings to determine which program will run to process a Hypertext Transfer Protocol (HTTP) request. Demonstrate the procedures for setting and removing application mappings, and explain the purpose of caching ISAPI applications. Finally, describe the procedures for configuring ASP scripts to control how they run and for setting debugging options for ASP scripts. Open the Application Configuration dialog box, and describe the settings on the App Options and App Debugging tabs.  Installing ISAPI Filters This topic describes how to install ISAPI filters to control how HTTP requests and responses are handled. Explain the difference between global filters (filters for all sites on a server) and filters for individual Web sites. Open the Application Configuration dialog box, describe the settings on the ISAPI Filters tab, and demonstrate the procedure for adding an ISAPI filter. Discuss the need to stop and restart the Web server whenever adding or changing a global filter. Module 4: Installing and Configuring Web Applications v Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs. This information is provided to assist you with replicating or customizing Training and Certification courseware. The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for Course 2295A, Implementing and Supporting Microsoft Internet Information Services 5.0. Lab Setup The following list describes the setup requirements for the labs in this module. Setup Requirement 1 The labs in this module require the Inetpub directory to be on drive D. To prepare student computers to meet this requirement, perform one of the following actions:  Complete Module 1, “Installing Internet Information Services 5.0,” in Course 2295A, Implementing and Supporting Microsoft Internet Information Services 5.0.  Configure setup requirement manually by installing IIS with the Inetpub directory on drive D. Setup Requirement 2 The first lab in this module requires that five virtual directories be created. To prepare student computers to meet this requirement, perform one of the following actions:  Run C:\MOC\2295A\Labs\Mod4\Setup.bat.  Configure setup requirement manually by creating the following virtual directories in the default Web site: • Inprocess, which uses the path C:\MOC\2295A\Labs\Mod4\Inprocess. • Pooled1, which uses the path: C:\MOC\2295A\Labs\Mod4\Pooled1. • Pooled2, which uses the path: C:\MOC\2295A\Labs\Mod4\Pooled2. • Isolated1, which uses the path: C:\MOC\2295A\Labs\Mod4\Isolated1. • Isolated2, which uses the path: C:\MOC\2295A\Labs\Mod4\Isolated2. Lab Results Performing the labs in this module introduces the following configuration changes:  Five applications are created in the default Web site.  The ActiveState Perl program is installed. Importan t Module 4: Installing and Configuring Web Applications 1 Overview  Introduction to Web Applications  Creating and Removing Web Applications  Configuring Web Applications  Installing ISAPI Filters ***************************** ILLEGAL FOR NON-TRAINER USE****************************** Installing Web applications is an essential skill for extending the capabilities of Microsoft ® Internet Information Services (IIS) 5.0 to include custom applications and scripting languages. After completing this module, you will be able to:  Describe the types of Web applications.  Create and remove Web applications.  Configure Web applications.  Install Internet Server Application Programming Interface (ISAPI) filters. Topic Objective To provide an overview of the module topics and objectives. Lead-in Installing and configuring Web applications enables you to extend the capabilities of IIS 5.0. 2 Module 4: Installing and Configuring Web Applications Introduction to Web Applications CGI CGI ISAPI ISAPI Provides a server-side interface for initiating software services that define communications between information services and resources on the server’s host computer Provides a server-side interface for initiating software services that define communications between information services and resources on the server’s host computer Provides a set of standard APIs that you can use to develop extensions to IIS Provides a set of standard APIs that you can use to develop extensions to IIS Application Programming Interfaces Application Programming Interfaces Application Programming Interfaces ASP ASP Provides a server-side scripting environment that can be used to create dynamic Web pages or to build Web applications by using a standard text editor Provides a server-side scripting environment that can be used to create dynamic Web pages or to build Web applications by using a standard text editor ***************************** ILLEGAL FOR NON-TRAINER USE****************************** A Web application is a collection of Web site elements that performs a task by using one or more programs. Web applications are designed to run on a Web server, such as a computer running IIS, and use a Web browser, such as Microsoft Internet Explorer, as the user interface. Web applications are typically client/server applications. For example, the ordering mechanism on an electronic commerce site is a Web application. IIS provides standard Application Programming Interfaces (APIs) on the server that you can use for developing Web applications. These APIs include:  Internet Server Application Programming Interface (ISAPI)  Microsoft Active Server Pages (ASP)  Common Gateway Interface (CGI) Internet Server Application Programming Interface ISAPI is a Microsoft set of standard APIs that you can use to develop extensions to IIS. ISAPI gives developers a powerful method for extending the functionality of IIS to provide better performance than ASP or CGI, and to provide low-level access to all Microsoft Win32 ® API functions. Because ISAPI dynamic-link libraries (DLLs), which are programs, are generally written in a high-level programming language such as C or C++, they are typically more difficult to develop than ASP-based or CGI-based solutions. There are two kinds of ISAPI DLLs, which have different uses:  ISAPI extensions. A run-time DLL that is usually loaded in the same memory address space occupied by IIS. ISAPI extensions extend the functionality of IIS.  ISAPI filters. Intercept specific server events before the server itself handles them. An example of an ISAPI filter is the Secure Sockets Layer (SSL) protocol component of Microsoft Internet Information Server (IIS) 4.0. In IIS 5.0, Hypertext Transfer Protocol (HTTP) compression is an ISAPI filter. Topic Objective To describe the types of Web applications that are discussed in this module. Lead-in IIS enables you to create Web applications or scripts that provide users with dynamic Hypertext Markup Language (HTML) pages. Delivery Tip Define ISAPI, ASP, and CGI applications. Module 4: Installing and Configuring Web Applications 3 Active Server Pages ASP is a server-side scripting language that can be used to create dynamic Web pages or build Web applications by using a standard text editor, such as Notepad. With server-side scripting, the program runs on the server and only the Hypertext Markup Language (HTML) that is the result of running the program is returned to the client. ASP pages are text files that can contain HTML tags, text, and script commands. The ASP scripting language has built-in objects that allow it to perform tasks, such as connecting to a database or identifying the user name of the logged-on user. With ASP, a developer can add interactive content to Web pages or build entire Web applications that use Internet Explorer as the interface. ASP is an ISAPI extension, which means that it is based on the ISAPI architecture, and is implemented as an ISAPI extension (asp.dll). Therefore, ASP performs well and has access to many features of the IIS server and Microsoft Windows ® 2000 Server. IIS 5.0 was specifically designed to integrate with ASP and has built-in features for optimizing and debugging ASP. Common Gateway Interface CGI is a standard mechanism for communication between a Web server and server-side gateway programs. These gateway programs are written in a compiled language, such as C, or in an interpreted language, such as Perl. CGI enables Web servers to run scripts or programs on the server and then send the output to the client’s Web browser. A script is a program that consists of a set of instructions for an application or utility program. A script can be embedded in a Web page. When a Web client, such as Internet Explorer, submits information to a Web server that uses CGI, the Web server receives the information and then passes it to the gateway program for processing. The gateway program then returns the result of the processing to the server, and the server returns the result to the Web browser as an HTML page. CGI was developed for UNIX-based systems and is supported by most Web servers, including IIS. ISAPI is a set of server extensions for IIS that functions in a way similar to that of CGI but uses fewer resources. The main difference is that, with CGI, the system creates a unique process for every CGI request, whereas ISAPI extensions do not require separate processes. This makes ISAPI applications generally more responsive than CGI applications. Note Note 4 Module 4: Installing and Configuring Web Applications Creating and Removing Web Applications Create Remove ***************************** ILLEGAL FOR NON-TRAINER USE****************************** A Web application is a defined set of directories in a Web site. To create a Web application, you use the IIS snap-in to designate a directory as the starting point (also called the application root) for the application. You can then set properties for the Web application. Every file and directory under the starting-point directory in your Web site is considered part of the Web application until another starting-point directory is found. Therefore, you can use the directory structure to form application boundaries that define the scope of an application. You can have more than one application per Web site, and each application can be configured differently. The default Web site that is created when you install IIS is an application starting point. Each application may have a Global.asa file associated with it. This optional file specifies the actions that occur when the application starts and stops, or when a new user requests a page from the application. This file stores the event information and objects that are used globally by the application. It is not a content file that is displayed to the users. To create a new Web application: 1. Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager. In Administrative Tools, the IIS console is called Internet Services Manager; however, when you open the console, it is called Internet Information Services, also known as the IIS snap-in. 2. In the IIS snap-in, right-click the starting-point directory for the Web application, and then click Properties. Topic Objective To describe the procedures for creating and removing Web applications in IIS. Lead-in To create a Web application, you designate a directory as the starting point, or application root, for the application. Note Delivery Tip Demonstrate the procedure for creating a Web application. [...]... file 3 (continued) d Close all windows and log off Module 4: Installing and Configuring Web Applications 29 Review Topic Objective To reinforce module objectives by reviewing key points Lead-in The review questions cover some of the key concepts taught in the module Introduction to Web Applications Creating and Removing Web Applications Configuring Web Applications Installing ISAPI Filters *****************************ILLEGAL... boundary 5 6 Module 4: Installing and Configuring Web Applications Configuring Web Applications Topic Objective To outline the topics for configuring applications Lead-in You can configure applications so that they perform efficiently in an IIS installation Setting Application Permissions Configuring Application Protection Settings Configuring Application Mappings Configuring ASP Script Options and Debugging... Executable box, specify the DLL file name, and then click OK Note When you add or change a global filter, you must stop and restart the Web server to load the new filters into memory When you add a filter at the Web site level, it is automatically loaded into memory 22 Module 4: Installing and Configuring Web Applications Lab B: Installing and Using ISAPI Applications and Filters Topic Objective To introduce... Protection list, click the appropriate setting, and then click OK 9 10 Module 4: Installing and Configuring Web Applications Lab A: Creating and Configuring Applications Topic Objective To introduce the lab Lead-in In this lab, you will create Web applications, adjust application protection settings, and test the impact of these settings on stability and performance *****************************ILLEGAL... for all Web sites that use the application In addition, clearing this option does not unload running applications; only subsequent requests are not cached 18 Module 4: Installing and Configuring Web Applications Configuring ASP Script Options and Debugging Topic Objective To describe how to configure options and debugging for ASP scripts Lead-in You can configure the settings on the App Options and App... can create custom error messages for your Web site to control the format of error messages that are sent to the client For more information about custom error messages, see Module 3, “Administering Web and FTP Sites,” in Course 2295A, Implementing and Supporting Microsoft Internet Information Services 5.0 20 Module 4: Installing and Configuring Web Applications Installing ISAPI Filters Topic Objective... Out-of-Process Module 4: Installing and Configuring Web Applications By default, applications are created with the Medium application protection level and are run in a pooled process in one instance of DLLHost.exe Additionally, Web services will run in its own process (Inetinfo.exe), and isolated applications will each run in their own instance of DLLHost.exe If an isolated application fails, no other applications. .. USE****************************** You can configure Web applications to: Control the level of program execution that is allowed on your Web site Balance Web server reliability with application performance Determine which ISAPI or CGI program to run to process a request and control how ASP scripts run Configure options and debugging for ASP scripts Module 4: Installing and Configuring Web Applications 7 Setting Application... have not completed Lab A in Module 1, Installing Internet Information Services 5.0,” of Course 2295A, Implementing and Supporting Microsoft Internet Information Services 5.0, you will need to modify the batch file to reflect the correct location of the Inetpub\Adminscripts directory 12 Module 4: Installing and Configuring Web Applications Exercise 1 Creating the Applications and Setting the Protection... IIS-{Default Web Site//Root/isolated2} 14 Module 4: Installing and Configuring Web Applications Exercise 2 Testing the Application Protection Levels In this exercise, you will simulate two different application failures and observe the effect that those failures have on other applications that are running on the server Tasks 1 Load the Web page that is provided to test the five different applications . Importan t Module 4: Installing and Configuring Web Applications 1 Overview  Introduction to Web Applications  Creating and Removing Web Applications  Configuring. to Web Applications 2 Creating and Removing Web Applications 4 Configuring Web Applications 6 Lab A: Creating and Configuring Applications 10 Installing