Alternate for IIS Proxy

hi.
i heard that sap is removing IISPROXY support.but then how we do NTLM?

hi apple,
Well the SAP suggested was is by using the SPNEGO Login Module. This allws you to enable integrated windows authentication functionality w
without the IISProxy. It has been released in SP15 and documentation can be found at: http://help.sap.com/saphelp_nw04/helpdata/en/43/4e80824d155f86e10000000a1553f6/content.htm.
if you were planning to use the IIS for reverse proxy as well , then you can have this functionality with SAP Web Dispatcher.
cheers,
Shantanu

Similar Messages

SAP IIS Proxy being obsoleted for non-NTLM usage

Following a quite challenging support case with SAP I was told by someone involved in SAP IIS Proxy development that SAP IIS Proxy is being obsoleted for non-NTLM usage and that SAP Web Dispatcher will be recommended from now on. SAP IIS Proxy is only required (and recommended) for NTLM usage (eg. Single Sign-On from Windows).
I was also told that a note will be released in the near future describing this change. I thought I would share this piece of information with the SDN community since it can be of value for people in on going implementations.

Hi Samuli,
You can find information about this on:
http://help.sap.com/saphelp_nw04/helpdata/en/6a/69f45201356248830f1e70fdd7178e/frameset.htm
Regards.

IIS Proxy SAR file needed

Hi all:
   I would like to implement the IIS Proxy SSO solution. Is there anybody can send me the IIS Proxy SAR file ?
   I cannot find it in service.sap.com/patches
   my mail : [email protected]
   I will give you the reward points.
   thanks.

Hi,
To my knowledge IISProxy is not supported/delivered by SAP anymore. See the OSS note 886214 for details. You can use WebDispatcher as reverse proxy and SPNego for SSO authentication. They are supposed to be replacements for what you could do with IISProxy.
So I doubt you will find IIS Proxy inside Service Marketplace. Doesn't mean that you cannot get it anywhere else though.
Regards,
Mike

IIS (proxy) plug-in and gif images

I was wondering if anyone has run into the problem of not having the linked images load/show up that within a jsp going thru the iis proxy plug-in setup?


Hello,
          If the GIF images are located on the WebLogic Server, then you need to setup
          IIS to proxy .gif to WebLogic as well.
          It is recommended to place the GIf images on IIS as static content should be
          served by IIS for performance reasons.
          Regards,
          Eric
          "Steve Kruse" <[email protected]> wrote in message
          news:3acd5b9c$[email protected]..
          > I was wondering if anyone has run into the problem of not having the
          linked images load/show up that within a jsp going thru the iis proxy
          plug-in setup?

IIS proxying to multiple WebLogic Servers by path

Hi all,
Is it possible to have 1 IIS proxying to 2 or more different
weblogic instances (no cluster) BY PATH (no virtual hosts, no proxying by extension)?.
Maybe 2 or more iisproxy.ini (or different sections in one) depending on iisforward
path :)
Just like with Apache or Netscape:
APACHE:
MatchExpression "/pathA/*" WebLogicHost=hostA|WebLogicPort=7001|CookieName=CookieA|ErrorPage=/LogoutA.htm
MatchExpression "/pathB/*" WebLogicHost=hostB|WebLogicPort=7003|CookieName=CookieB|ErrorPage=/LogoutB.htm
or
<LocationMatch "^/pathA/">
SetHandler weblogic-handler
WebLogicHost hostA
WebLogicPort 7001
CookieName CookieA
ErrorPage /LogoutA.htm
</LocationMatch>
<LocationMatch "^/pathB/">
SetHandler weblogic-handler
WebLogicHost hostB
WebLogicPort 7003
CookieName CookieB
ErrorPage /LogoutB.htm
</LocationMatch>
NETSCAPE:
<Object name="object1" ppath="*/pathA/*">
Service fn="wl-proxy" WebLogicHost="hostA" WebLogicPort="7001" CookieName="CookieA"
ErrorPage="/LogoutA.htm"
</Object>
<Object name="object2" ppath="*/pathB/*">
Service fn="wl-proxy" WebLogicHost="hostB" WebLogicPort="7003" CookieName="CookieB"
ErrorPage="/LogoutB.htm"
</Object>
TIA.

Issue:
How can IIS 4 or IIS 5 be setup to proxy from one IIS server to
multiple WLS servers.
For example:
http://iisserver/myapp --> proxy http://wls1:7001/test
http://iisserver/myapp2 --> proxy http://wls2:7001/test
Resolution:
Proxying to different weblogic instances with one IIS Server can be
accomplished by using IIS Virtual Directories.
a) Create a Web site and two virtual directories for it.
b) Create two directories for the two virtual directories and copy
iisproxy.dll to each of the directories.
c) Create iisproxy.ini files in each directory created at step b. One
for proxying to WebLogic Server A and another for WebLogic Server B.
d) Register each iisproxy.dll to each of the virtual directories with
IIS by specifying the appropriate mime-type. If you want to proxy everything
for that virtual directory, then you will specify a mime-type of *.
Please note that specifying a mime-type of * will not work with IIS 4.
e) Make sure you set the Application Protection to HIGH for each
Virtual Directory.
Attachments:
No Attachments Available
"PacoG" <[email protected]> wrote in message
news:40c6eb20$1@mktnews1...
>
try {
NewsRefresh nrefresh=NewsRefreshFactory.getInstance("Please");
nrefresh.execute("HELP");
} catch (Exception allexceptions) {
throw new IKnowIKnowException("Linux+Apache");

Best choice for a proxy server on NT?

Hi, I'm wondering what the best choice for a proxy server is on NT?
          Currently I'm running a 2 WL server cluster, but this will grow rapidly. If
          all of the pages that I will be handling will be .jsp (with the exception of
          1 or 2 servlets), which is the best configuration (performance wise) to go
          with?
          Should I use a Weblogic Servlet, NSAPI, or ISAPI to do the proxiing. My
          guess was that IIS would perform the best on an NT machine and that it would
          not be as large as a memory hog as Weblogic would be to simply run as a
          proxy. Is there a significant amount of latency produced by the ISAPI
          bridge?
          Any suggestions?
          Thanks,
          Chris


Chris,
          Please do not cross post across the newsgroups. We would very much
          appreciate it.
          There is a response to this message posted on the performance newsgroup if
          you're interested.
          Thank you so much!
          Michael Girdley
          BEA Product Manager
          Chris <[email protected]> wrote in message
          news:851ks4$auk$[email protected]..
          > Hi, I'm wondering what the best choice for a proxy server is on NT?
          >
          > Currently I'm running a 2 WL server cluster, but this will grow rapidly.
          If
          > all of the pages that I will be handling will be .jsp (with the exception
          of
          > 1 or 2 servlets), which is the best configuration (performance wise) to go
          > with?
          >
          > Should I use a Weblogic Servlet, NSAPI, or ISAPI to do the proxiing. My
          > guess was that IIS would perform the best on an NT machine and that it
          would
          > not be as large as a memory hog as Weblogic would be to simply run as a
          > proxy. Is there a significant amount of latency produced by the ISAPI
          > bridge?
          >
          > Any suggestions?
          >
          > Thanks,
          > Chris
          >
          >

Handling j_security_check for IIS

Hello,
I'm using the IIS plugin to separate the static contents from the
dynamic ones. However, I'm having problems with j_security_check--Kevin
Taylor once mentioned that he solved the problem for Apache with
LocationMatch.
Has anyone in this forum ever solved the same problem for IIS? Any tips
and pointers will be greatly appreciated.
TIA,
Ray

Please change the URL to:
http://e-docs.bea.com/wls/docs81/plugins/isapi.html#100382
Pankaj Khandelwal wrote:
Proxying can be done based on MIME types and URL ( PATH ).
In your case I am assuming you have done only proxying by mime type [
.jsp etc ].
To forward all the request which starts with /j_security_check you also
need to proxy by PATH.
Please refer to e-docs for the instructions.
http://edocs/wls/docs81/plugins/isapi.html#100382
Check the point 3 where it says
"If you want to configure proxying by path complete this step"
Hope that helps.
Ray Hsieh wrote:
Hello,
I'm using the IIS plugin to separate the static contents from the
dynamic ones. However, I'm having problems with
j_security_check--Kevin Taylor once mentioned that he solved the
problem for Apache with LocationMatch.
Has anyone in this forum ever solved the same problem for IIS? Any
tips and pointers will be greatly appreciated.
TIA,
Ray

Using SSL & IIS proxy

We use Weblogic 7.0 running behind IIS as a web server. The IIS server
takes care of the SSL traffic/certificate. We like our web services to
use SSL. Is there a way to do this without WL doing the SSL traffic? If
we specify 'protocol="https"' in the servicegen task (ant), the WL
server is complaining because it does not see SSL being used. If we
don't specify the protocol the web services do not get advertized in the
WSDL with the proper protocol.
Any help is appreciated.
Joop Kaashoek

Actually we wanted to keep using IIS and let it handle the SSL. We did NOT want
the Weblogic server to handle SSL, but we just wanted the web services to
ADVERTIZE in their WSDL that HHPS needs to be used.
But it looks like this won't work for other reasons : the IIS proxy appears to
mess up the XML/SOAP traffic, it is probably too html-dependent. The error
message we get is
javax.xml.rpc.soap.SOAPFaultException: Received a response from url: <our web
service> which did not have a valid SOAP content-type: text/html.
So maybe we can't use the IIS proxy at all and have to go straight to the
Weblogic server instead.
Thanks,
Joop
a wrote:
As far as I know, WebServer proxy can't handle SSL connections to Weblogic.
If you want your WebService to handle SSL you need to get rid of ANY
commercial webserver and use Weblogic's
built-in webserver, which of course is not production quality
hope it helps
"Joop Kaashoek" <[email protected]> wrote in message
news:[email protected]..
We use Weblogic 7.0 running behind IIS as a web server. The IIS server
takes care of the SSL traffic/certificate. We like our web services to
use SSL. Is there a way to do this without WL doing the SSL traffic? If
we specify 'protocol="https"' in the servicegen task (ant), the WL
server is complaining because it does not see SSL being used. If we
don't specify the protocol the web services do not get advertized in the
WSDL with the proper protocol.
Any help is appreciated.
Joop Kaashoek

Printer is asking for a proxy port,how do i find that number

my printer is asking for a proxy port number ,how do I find that number?

Hey tomdenise,
If your network is not on a proxy, you do not need to enter a proxy. Here are the steps you need to go through to resolve this issue.
1. Find your printer's IP address by printing a network configuration page.
2. Type you IP address into the address bar of your web browser.
3. Click on the network tab at the top of the page.
4. Look at the left hand side and click IPv4 under wireless.
5. Change the IP settings to Manual.
6. Enter the printer's IP address, your subnet mask, and your routers IP address or default gateway in the spaces.
7. Set the Prefered DNS to 8.8.8.8.
8. Set the Alternate DNS to 8.8.4.4.
9. Click apply.(You may need to refresh the page if it says processing for longer than a min and click apply again.)
10. Now try to enable Web Services.
Although I am an HP employee, I am speaking for myself and not for HP.
If I have resolved your issue, feel free to provide Kudos and make sure you mark this thread as solution provided.

IIS proxy 5.1 and Weblogic 6.1 does not support sticky session

Dear Sir,
Our system is migrating from Weblogic 5.1 to Weblogic 6.1. After testing on
development environment, it is found that IIS proxy for 5.1 plug-in and Weblogic
6.1 server is perfect match for our case. Since our appliction system hit some
bugs of IIS proxy for 6.1. In development environment, one IIS match with one
Weblogic.
During production launch, another problem found. It seems that IIS proxy 5.1
plug-in with Weblogic 6.1 does not support the sticky load balancing. A sticky
service is one where a client sends its requests to the same instance and those
requests are not redirected to other instances. In production, two IIS match with
two Weblogic. Below is
#WebLogicHost=10.0.3.12
#WebLogicPort=8012
WebLogicCluster=10.0.3.12:8012,10.0.3.13:8012
COnnectionTimeoutSecs=10
ConnectionRetrySecs=2
ErrorPage=https://www.xxxx.com/eBank/sysnotready.htm
CookieName=eBankingWebLogicSession
Anyone have idea on out case?
Thanks,
KAI

My test was with 6.1 SP3.
The way to tell is by analyzing the cookie(JSESSIONID).
Perhaps the behaviour changed post SP1. I can't say for sure.
Eric
"Gary Rudolph" <[email protected]> wrote in message
news:[email protected]...
Is that entirely true concerning you don't need the persistence set to
replicated in the weblogic.xml to gain sticky load balancing?
The reason I ask was that in our situation sticky wouldn't work without
having the persistence set to replicated. This was with NSAPI and WLS 6.1
SP1. The weblogic servers were configured in a weblogic cluster. So..based
on this statement we should not have needed to set the persistence, but in
practice we did for it to work.
Gary
"Eric Gross" <[email protected]> wrote in message
news:[email protected]...
I just checked, and you are correct. You just need to have clustering
enabled in 6.1. You do not necessarily need to have persistence set to
replicated.
Of course, you won't get failover, but you will get the sticky load
balancing.
Regards,
Eric
"Ricky Wong" <[email protected]> wrote in message
news:[email protected]...
Why do we need to set session persistence to replicate in order to
perform
sticky load balancing ? There is no such requirement in WebLogic 5.1.
As
far
as I know, the IIS plugin simply interprets the value of the sessioncookie,
which should be embedded with the application server address, then
forward
the request to that particular application server.
We didn't use session replication in our environment because not allsession
variables are serializable.
"Eric Gross" <[email protected]> wrote in message
news:[email protected]...
The problem you mentionned in the other newsgroup post has been
fixed
and
will be in SP4. If you are in production or nearing production and
need
a
resolution now, then please open a case with support.
You should not need any other parameters to do the load balancing.
But
to
have the sticky load balancing, you must make sure you have session
persistence set to replicated for the webapp in question.
I'm not sure I am understanding your 3rd question.
In any case, my advice is to either wait for SP4 to bereleased(scheduled
sometime this month) or if you really need to go into production
soon,
contact support to obtain the latest IIS plugin.
Regards,
Eric
"Mike" <[email protected]> wrote in message
news:[email protected]...
Dear Eric,
Thanks very much for you kindly information, but we still have thefollowing issues
regarding the WL IIS proxy:
1. We have already tried the IIS proxy that comes with WL6.1 SP3.However, the
result from that version of IIS proxy is not satisfactory, as weexperienced cases
where the web page is not displayed correctly (as in
http://newsgroups.bea.com/cgi-bin/dnewsweb?cmd=article&group=weblogic.develo
per.interest.plug-in&item=994&utag=).
If there is any IIS proxy released after WL6.1 SP3, Could you
kindly
give
us
a pointer to the plugin?
2. In WL5.1 case, we are only required to have "WebLogicCluster"
parameter
set
to two weblogic servers in order use the load balancing features.
In
WL6.1, we
do not come across any additional settings required to support
load
balancing.
Is there any such settings required (e.g. in
config.xml,weblogic.xml,
application.xml,
etc?)
3. Does WL IIS proxy problem has anything to do with the version
of
the
IIS server/windows
versions that are using? we have already tried with IIS4 and IIS5
and
have
different
kinds of issues.
Thanks in advance for your kind assistance.
Mike
"Eric Gross" <[email protected]> wrote:
Yes, the session format has changed when using clustering and you
cannot
use
the 5.1 plugin to proxy to 6.1.
What problems did you have using the 6.1 plugin? Maybe you need
the
latest
6.1 plugin.
Regards,
Eric
"KAI" <[email protected]> wrote in message
news:[email protected]...
Dear Sir,
Our system is migrating from Weblogic 5.1 to Weblogic 6.1.
After
testing on
development environment, it is found that IIS proxy for 5.1
plug-in
and
Weblogic
6.1 server is perfect match for our case. Since our appliction
system
hit
some
bugs of IIS proxy for 6.1. In development environment, one IIS
match
with
one
Weblogic.
During production launch, another problem found. It seems
that
IIS
proxy 5.1
plug-in with Weblogic 6.1 does not support the sticky load
balancing.
A
sticky
service is one where a client sends its requests to the same
instance
and
those
requests are not redirected to other instances. In production,
two
IIS
match with
two Weblogic. Below is
#WebLogicHost=10.0.3.12
#WebLogicPort=8012
WebLogicCluster=10.0.3.12:8012,10.0.3.13:8012
COnnectionTimeoutSecs=10
ConnectionRetrySecs=2
ErrorPage=https://www.xxxx.com/eBank/sysnotready.htm
CookieName=eBankingWebLogicSession
Anyone have idea on out case?
Thanks,
KAI

SSO implementation through IIS proxy

I am implementing SSO through IIS proxy. when I tried add the iis_sso.dll to IIS ISAPI filters tab, Its showing red color(which says that it is inactive). Please tell me how to make it green (Active).

Ramesh,
Which version of EP? I am assuming as well you have IIS 6.0? Also, ISAPI.dll is no longer supported.
James

How to use an authenticated user for a proxy call

Dear all,
I am currently working on a JEE application where the user needs to authenticate (for this I have configured the web.xml).
Now inside this application I need to do a proxy call to a PI webservice.
I would like to use the user credentials of the already logged in user in order to call the proxy.
What I don't want to do is to use a service user for the proxy call.
The code I am trying to call looks something like this:
     private IntegratedConfigurationIn getPort() throws Exception{
          IntegratedConfigurationIn port = null;
          try {
               IntegratedConfigurationInService service = null;
               service = new IntegratedConfigurationInService();
               port = (IntegratedConfigurationIn) service.getIntegratedConfigurationIn_Port();
              BindingProvider bp = (BindingProvider)port;
              bp.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, user);
              bp.getRequestContext().put(BindingProvider.PASSWORD_PROPERTY, password);
              if (url.length() != 0)
                   bp.getRequestContext().put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, url);
          catch (Exception ex){
               ex.printStackTrace();
          return port;
The examples I found to retrieve the userdata pointed to codes similar to this one:
public HttpServletRequest getHttpRequest() throws Exception {
          // Get runtime context
          Properties props = new Properties();
          props.put("domain", "true");
          Context initialContext = new InitialContext(props);
          ApplicationWebServiceContext wsContext = (ApplicationWebServiceContext) initialContext
                    .lookup(" /wsContext/ApplicationWebServiceContext");
          HttpServletRequest req = wsContext.getHttpServletRequest();
          return req;
com.sap.security.api.IUser sapUser = com.sap.security.api.UMFactory.getAuthenticator().getLoggedInUser(getHttpRequest(), null);
          IUser ep5User = com.sapportals.wcm.util.usermanagement.WPUMFactory.getUserFactory().getEP5User(sapUser);
Now I don't know how to bring it togehter and how to use an authenticated user for the BindingProvider.
I would appreciate any hints or ideas.

Peter,
from the first screenshot, what I understood is that, you are calling an inbound PI web service that is intended to create an integrated configuration object (this is used for whole lot of other reason completely) but not actually calling a development web service.
For this, you would have to generate your client classes from the WSDL provided by the PI developer for that particular service. Once you get those client classes generated, you could used the method provided in the other screenshot to extract the user and password and call the intended web service.
Vijay Konam

How to configure webserver plugin for IIS to fwd request to multiple server

Hi,
Have configured Sun One webserver plugin for IIS is configured as per the documentation - http://docs.sun.com/source/816-7156-10/agplugin.html
Have a requirement to forward the request to three different servers
Eg : http://www.host1.com/app1
http://www.host2.com/app2
http://www.host3.com/app3
Getting bad gateway error when this is configured in sun-passthrough.properties file
serverpool1.server=http://www.host1.com
serverpool1.passthrough=/app1
serverpool2.server=http://www.host2.com/
serverpool2.passthrough=/app2
Is this configuration wrong?
Thanks

First, set the user back to www or whatever it was. To do namebased virtual hosting, you'll need to change two things. The first is to add a NameVirtualHost directive to /etc/httpd/sites/virtualhostglobal.conf
This is one of the VirtualHost stanzas from my Linux box, you just have to adjust the paths for your machine:
<VirtualHost www.mydomain.com>
ServerAlias mydomain.com
ServerAdmin [email protected]
DocumentRoot /usr/people/httpd/html/www
<Directory /usr/people/httpd/html/www>
Options Includes
AllowOverride AuthConfig
</Directory>
ScriptAlias /bin /usr/people/httpd/cgi-bin/www
ScriptAlias /cgi-bin /usr/people/httpd/cgi-bin/www
</VirtualHost>
Restart Apache and you should be good to go. If there are errors, could you post them from /var/log/httpd/error_log ?
Roger

HP Officejet pro 8500 won't print and keeps asking for a proxy setting. Help.

HP Officejet pro 8500 won't print and keeps asking for a proxy setting. Help.

Hi,
Can you confirm that you have an Officejet 8500a or Officejet 8500? On the 8500a model, you can set the networks proxy address and port setting from the front panel of the printer (setup>Webservices setup>proxy). If you are unsure what your proxy settings are you'll need to contact your network admin. If your network uses a proxy users name and password for all devices, you need to enter this information along with the proxy address and port in the printers embedded web server. Type the products IP address into an internet brownser window (printer must be connected to the same network as PC). Select the network tab, and than look for the proxy settings option. Enter in the information and click apply. Once the networks proxy information has been correctly inputed into the embedded web server, try printing again. If unsuccessfully, you might try reinstalling the printer software after uninstalling it. Hope this helps!
I was an HP employee
Reminder: Please select the "Accept as Solution" button on the post that best answers your question. Also, you may select the "Kudos" button on any helpful post to give that person a quick thanks.

ColdFusion 11 wsconfig.exe -- Error while configuring connector for IIS.

I ran into a problem with my ColdFusion 11 64-bit installation/migration on a Windows Server 2012 R2/IIS 8.5. I was following the ColdFusion 11 Lockdown Guide - Pete Freitag (very helpful) and I ran into problems on page 35 "Run the ColdFusion Web Server Configuration Tool". When I attempted to do this for ALL IIS websites I encountered a Windows error [APPCRASH - Exception Code:c0000005]. Also, note my Administrator-Command Prompt window provided this error message "Error while configuring connector for IIS. Make sure you have administrator privileges". However, I did not experience this error with all of the migrated sites. I traced my steps backward to discover the problem. I used the Microsoft Web Deployment tool (good tool) to migrate the old IIS websites to the new IIS. I utilized Metabase Explorer the IIS 6.0 Resource Tools to discover that some of the migrated sites that were crashing did not have the key/value ID:6006 | Name: DefaultDoc. Once I added this key and redeployed the site the ColdFusion 11 connector (wsconfig.exe) worked fine. In addition, I added this key/value to some of the larger previously migrated sites in IIS 8.5 ("Default Document") and it worked with the connector as well.
Knowing how IIS encapsulates information the DefaultDoc key/value should have passed from the website setting. Why would this make wsconfig.exe crash?
Thanks in advance and I hope this saves someone from hours of research and frustration.

DiscoDelight,
Have you forwarded this information directly to the ColdFusion product team? If not, I'll try to draw their attention to it. Only a few of them are active on these forums, so this issue might be overlooked.
-Carl V.
EDIT: I just pinged them on Twitter to take a look at this post.
EDIT #2: They just pinged me back that they are looking into it.

Alternate for IIS Proxy

Similar Messages

Maybe you are looking for