Disabling HTTP

We'd like to know how to disable HTTP functionality in NetWeaver CE 7.1 SP3 and use strictly HTTPS. There is another thread on this forum with a similar subject, but its answer is similar to the Administrator's Guide--it refers one to icm/server_port_0 in c:\usr\SAP\CEx\SYS\profile\CEx_Jxx_<hostname>, but there are no icm/server_port statements in that file, except for the icm/server_port04 statement we added to turn on HTTPS. So, where is this specified?
Also, is it possible to have behavior similar to Websphere such that if you enter your application URL using http it's automatically rerouted to the same URL with https?
Thanks,
William

Hi William,
the default port configuration that is delivered is described on the help portal: [http://help.sap.com/saphelp_nwce10/helpdata/en/44/f71aede38e2462e10000000a1553f7/frameset.htm]
The default configuration entries are not specified in the profile, but are defined internally. The default configuration in the profile would look as follows:
icm/server_port_0 = PROT=HTTP, PORT=5$(SAPSYSTEM)00, TIMEOUT=600
icm/server_port_1 = PROT=P4, PORT=5$(SAPSYSTEM)04
icm/server_port_2 = PROT=IIOP, PORT=5$(SAPSYSTEM)07
icm/server_port_3 = PROT=TELNET, PORT=5$(SAPSYSTEM)08
If you want to change the port configuration, you should add these 4 lines to the profile and do the modifications there.
e.g.
icm/server_port_0 = PROT=HTTPS, PORT=1443, TIMEOUT=600
icm/server_port_1 = PROT=P4, PORT=5$(SAPSYSTEM)04
icm/server_port_2 = PROT=IIOP, PORT=5$(SAPSYSTEM)07
icm/server_port_3 = PROT=TELNET, PORT=5$(SAPSYSTEM)08
Please keep in mind that the numbers of icm/server_port_ parameter have to be unique and that no gaps are allowed in the numbering!
Regards,
Oliver
PS: The HTTPS port is per default not configured. So if you haved managed to set up an HTTPS port you must have changed the configuration already. I am wondering how?

Similar Messages

Would like to disable HTTP and use only HTTPS yet I get side effects

Hello,
I have established a secure connection between the AS ABAP and AS Java.
I would like assure that all communication between the servers is using https and for that, as a test, I have deactivated the http service using SMICM transaction.
The only side effect I could recognize so far is that the Web Dynpro for ABAP stuff doesn't work through transaction SE80, the working area simply doesn't come up. If I activate HTTP again it is working.
Am I doing the right thing by disabling HTTP completely and if yes, what else do I need to do in order to prevent this side effect from happening?
Roy

humuhumunukunukuapuaa wrote:
If I get some nice approvals on my app spree in 10 days, I would like to close Talbots and Abercrombie and Fitch store cards. Total CL for the 2 is $2,700 ($1,350 each) but I can make up for that closure and utilization loss by getting quite a bit more than those amounts on majors during my app spree. Talbots has only been open 4 months, A&F one year. I have other cards that are the same age or older so should not majorly affect AaoA. Thoughts? I know some will say don't close cards, but they're store cards and I don't need to be responsible for store cards I don't use.If you have no use for them and don't foresee using them in the future then you should probably close them out. They won't affect your AAoA as the cards will stay in your reports for 10 years. No sense in keeping cards that you don't want just to take up room in your sock drawer.

How do I disable http at the AP level with 5508 running 7.4.100.0

                   I have a 5508 with 7.4.100.0, with 76 3602I AP's connected. Each AP responds to an HTTP request, asking for username and password at the AP. How do you disable this, and not disable https:// at the WLC?
This is the IP of the AP, not the controller. I only want to allow SSH to the AP's, for diagnostic support when neccesary.
I have other 5508's running 7.0.98.0, 7.0.240.0, and 7.3.116.0, and they do not do this.

This issue is:
CSCuf66202    HTTP port 80 open on Access Points when controller is 7.4.100.0
To be fixed in the 7.4 MR1 release, due out this summer.
In general, lightweight APs are not supposed to have TCP port 80 open, unless they are operating in OEAP mode.
As far as manually configuring "no ip http server" on the AP - this does not survive a reboot. TAC has asked for a general purpose way to configure lightweight APs:
CSCsy17873    support general purpose method of configuring APs
This has not been committed ... if people in the field think this would be useful, please communicate that to your friendly neighborhood Cisco sales team.
Cheers,
Aaron

How do I disable http proxy settings on iPad mini?

How do I disable http proxy settings on iPad mini?

You can save zip file to GoodReader and unzip with GoodReader (tap to enlarge image)

Prime 2.0: Disable HTTPS (GUi)

Hi,
Howto disable HTTPS by default in Cisco Prime 2.0?
I cannot see that it's stated in the Documentation. This function was able to set in LMS 4.2 & PI 1.3.
Best Regards,
/ W

Hi Again,
I went this question through Cisco TAC.
The answer i recieved was: "It is not supported to disable HTTPS, as it may cause other issues."

Re: Disable HTTP access to Weblogic 6.0

Appears to be: http://e-docs.bea.com/wls/docs60///////config_xml/properties.html
On 20 Jul 2001 08:35:38 -0800, "Florian Kirchhoff" <[email protected]> wrote:
>
Is this possible in Weblogic 6.0?
"Don Dwoske" <[email protected]> wrote:
It looks like you've got a couple of different things going on
here.
If you want to disable http, do this in the WL properties file:
weblogic.httpd.enable=false
your getInitialContext should figure out what port your naming
service is on unless you've hardcoded it to be localhost:80, true?
I switch between ports 80 and 7001 all the time without problems.
-Don
"Gagan Bhalla" <[email protected]> wrote:
Hi,
Can someone tell me how do I disable the HTTP access to
Weblogic.
The environment I am running on my dev machine would be
Win2000+
Weblogic 5.1+ SP6. I am redirecting any HTTP request to
the secure
port and that part is working. But I want to be able to
completely
disable any HTTP requests all together. Is there a way
to do this.
In the weblogic.properties file, if I change the weblogic.system.listenPort
property to point to anything other than port 80, it gives
me errors
on the WLInitialContext. What else do I need to change
in this
so that I can listen on a port other than 80?
Thanks for your help,
Gagan
javax.naming.CommunicationException. Root exception is
java.net.ConnectException: No server found at T3://localhost:80
at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java,
Compiled Code)
at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java,
Compiled Code)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java,
Compiled Code)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:148)
at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:123)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:671)

I Need to keep HTTP session alive.
But i need to block trace method or say get method.
Any clue how can we do that.
thanks

Disable HTTPS redirect

How do I disable HTTPS redirect. I am "aware of the risks" blah blah paranoid blah. And well aware of what I'm doing. But for some reason with 32 no everything heads over to https including non-https bookmarks.
No matter how I type it in;
HTTP://www.xxxx
www.xxxxx
I would like to find some way, by setting, about:config command (or hack if I have to) or even an extension someone could point me to that could stop this maddening overuse of secure transfers.

It's not all sites, though, just some sites? Like the following URL that you've never visited before (on a site that has not SSL support):
http://dev.jeffersonscher.com/jstest.asp
If ALL sites attempt HTTPS, make sure you haven't installed the "HTTPS Everywhere" extension or something similar.
You can review and disable extensions on the Add-ons page. Either:
* Ctrl+Shift+a
* "3-bar" menu button (or Tools menu) > Add-ons
In the left column, click Extensions. I suggest disabling unrecognized and nonessential extensions, and removing any that obviously are undesirable (if any).
Often a link will appear above at least one disabled extension to restart Firefox. You can complete your work on the tab and click one of the links as the last step.
Does that resolve it?

[svn:osmf:] 14817: Temporarily disable http streaming related tests to have integration build back online .

Revision: 14817
Revision: 14817
Author:   [email protected]
Date:     2010-03-17 10:29:27 -0700 (Wed, 17 Mar 2010)
Log Message:
Temporarily disable http streaming related tests to have integration build back online.
Modified Paths:
    osmf/trunk/framework/OSMFTest/org/osmf/OSMFTests.as

Revision: 14817
Revision: 14817
Author:   [email protected]
Date:     2010-03-17 10:29:27 -0700 (Wed, 17 Mar 2010)
Log Message:
Temporarily disable http streaming related tests to have integration build back online.
Modified Paths:
    osmf/trunk/framework/OSMFTest/org/osmf/OSMFTests.as

Disabling http pipelining

Hi, Not sure if I am in the right place here. But....we are running Sun One Web server 6.1 and may want to disable http pipelining. I can't find anything on this. Anyone know how to do it? Is it possible with this version?

you probably meant that you wanted to disable keep alive ? http pipelining is implemented when browser/web server talks using HTTP/1.1 protocol and uses keep alive. is that what you meant ?
you could use match-browser SAF to disable keep alive for a certain client. is that what you are looking for ?
http://docs.sun.com/app/docs/doc/820-5703/abuiq?a=view
you will need to add this directive within your configurations's obj.conf found under https-<hostname>/config/obj.conf under <Object name="default">
hope this helps

WLS 6.1 Disable HTTP?

Is it possible to disable http in Weblogic Server 6.1? If so, how?

Hi Kathy,
I do not believe there is any way to cleanly disable HTTP in
WebLogic 6.1. I'm not sure why you would want to do this. If
you can be more specific about what it is you are trying do I
will try to assist. Thanks.
Regards,
Tom Hegadorn
Developer Relations Engineer
BEA Support
"Kathy Long" <[email protected]> wrote:
Is it possible to disable http in Weblogic Server 6.1? If so, how?

Disable HTTP TRACE causes error 413 instead of 501

Hello,
I�ve tried to disable the HTTP TRACE Method for a Webserver 6.0 SP5 Instance as described in the according SUN Solve document:
obj.conf:
<Object name="default">
<Client method="TRACE">
AuthTrans fn="set-variable" remove-headers="transfer-encoding"
set-headers="content-length: -1" error="501"
</Client>
(authtrans method in one line..)
After a Restart I got the following result:
telnet muwebt1sn1 80
Trying <IP-Adress>...
Connected to muwebt1sn1.
Escape character is '^]'.
TRACE http://muwebt1sn1/ HTTP/1.1
HTTP/1.1 413 Request Entity Too Large
Server: Netscape-Enterprise/6.0
Date: Tue, 20 Apr 2004 06:51:00 GMT
Content-length: 168
Content-type: text/html
Connection: close
<HTML><HEAD><TITLE>Request Entity Too Large</TITLE></HEAD>
<BODY><H1>Request Entity Too Large</H1>
A request entity is longer than the server can handle.
</BODY></HTML>Connection closed by foreign host.
I would have expected an error code 501 / Method not supported. Does anybody know what went wrong ?
Thanks
Wolfgang

Nothing went wrong. That's the expected behaviour on 6.0 SP5.

How to disable HTTP proxy on J2EE ?

Hi,
It appears that Sun Application Server 8.2 can be used as a HTTP proxy.
Is it possible to disable this behaviour and still serving web apps ? am I saying bullshits ?
Regards,
Laurent.

I am saying bullshits. Sorry. Application Server does not act as a HTTP Proxy.

Fix not working to disable http trace in iPlanet 6.0 SP5

Hello.
I'm running iPlanet web server 6.0 SP5 on Solaris 8. A recent security compliance scan disclosed a number of vulnerabilities, among them the fact that I have HTTP TRACE enabled. I applied the fix to obj.conf described at http://sunsolve6.sun.com/search/document.do?assetkey=1-26-50603-1&searchclause=security
stopped and restarted the server, but the TRACE did not disable. The way I test this is
<code>
telnet server-name http-portnum
TRACE / HTTP/1.1
HOST:hostname
</code>
Rather than generating an error (501?) as it should it comes back with
<code>
HTTP/1.1 200 OK
Server: Netscape-Enterprise/6.0
Date: Fri, 13 Aug 2004 20:31:44 GMT
Content-length: 36
Content-type: message/http
</code>
In addition if , instead of TRACE / HTTP/1.1 I use the command
<code>
OPTIONS * HTTP/1.1
</code>
I get
<code>
HTTP/1.1 200 OK
Server: Netscape-Enterprise/6.0
Date: Fri, 13 Aug 2004 20:32:03 GMT
Content-length: 0
Allow: HEAD, GET, PUT, POST, DELETE, TRACE, OPTIONS, MOVE, INDEX, MKDIR, RMDIR
</code>
So clearly it's not disabled.
Here is a snippet of the obj.conf file showing the inserted "fix" :
<code>
# Sun Netscape Alliance - obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
<Object name="default">
<Client method="TRACE">
AuthTrans fn="set-variable" remove-headers="transfer-encoding" set-headers="cont
ent-length: -1" error="501"
</Client>
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="unix-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service type="magnus-internal/jsp" fn="NSServletService"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service fn="shtml_send" type="magnus-internal/parsed-html" method="(GET|HEAD)"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
AddLog fn="flex-log" name="access"
</Object>
</code>
Can anyone suggest why this isn't working? I've beaten this one to death. Thanks. Peter.

1) Why would TRACE and OPTION request specifying HTTP 1.0 vs. 1.1 yield such different results?
Web Server 6.0 only implements the TRACE and OPTIONS methods for HTTP/1.1, not HTTP/1.0. This is reasonable as TRACE and OPTIONS are part of the HTTP/1.1 protocol and not the HTTP/1.0 protocol.
In other words, TRACE is always disabled for HTTP/1.0 requests, even if you don't use the set-variable work around.
2) Is the OPTIONS command a legitimate test of whether this fix works? If it is, has anyone managed to have the command return an "Allow:" line MINUS the TRACE?
Nope, not in Web Server 6.0. OPTIONS will always list TRACE. (Note that in Web Server 6.1, TRACE is not as tightly integrated into the server core. As a result, OPTIONS will conditionally list TRACE in 6.1.)
3) Has anyone managed to generate a 501 error message after specifying TRACE / HTTP/1.1 instead of 1.0?
Nope, not in Web Server 6.0.
4) Does this fix really work?
I wouldn't call it a fix; it's a work around. However, it does effectively disable TRACE. The work around is a bit of a kludge, resulting in the odd 413 status code.
The real "fix" appears in Web Server 6.1 where you can disable TRACE simply by commenting out the Service method="TRACE" fn="service-trace" line in obj.conf.

Disabling HTTP OPTIONS method

Hi
Can anyone tell me how I can disable the HTTP OPTIONS method in Sun One Web Server 6.0 SP4.
Thanks

1) Why would TRACE and OPTION request specifying HTTP 1.0 vs. 1.1 yield such different results?
Web Server 6.0 only implements the TRACE and OPTIONS methods for HTTP/1.1, not HTTP/1.0. This is reasonable as TRACE and OPTIONS are part of the HTTP/1.1 protocol and not the HTTP/1.0 protocol.
In other words, TRACE is always disabled for HTTP/1.0 requests, even if you don't use the set-variable work around.
2) Is the OPTIONS command a legitimate test of whether this fix works? If it is, has anyone managed to have the command return an "Allow:" line MINUS the TRACE?
Nope, not in Web Server 6.0. OPTIONS will always list TRACE. (Note that in Web Server 6.1, TRACE is not as tightly integrated into the server core. As a result, OPTIONS will conditionally list TRACE in 6.1.)
3) Has anyone managed to generate a 501 error message after specifying TRACE / HTTP/1.1 instead of 1.0?
Nope, not in Web Server 6.0.
4) Does this fix really work?
I wouldn't call it a fix; it's a work around. However, it does effectively disable TRACE. The work around is a bit of a kludge, resulting in the odd 413 status code.
The real "fix" appears in Web Server 6.1 where you can disable TRACE simply by commenting out the Service method="TRACE" fn="service-trace" line in obj.conf.

Disable http - use only https

dear all,
i have created a self sign certificate on my oracle application server and enables ssl on port 443.
how can i disable the http service as i inly want users to access https://myportal/ instead of using http://myportal as well
thank you in advance for your assistance

To make a single application available over two protocols in standalone OC4J, that application must be declared in two different Web site XML files, and marked as "shared". This feature is enabled if the shared attribute of the <web-app> element in each Web site XML file is set to "true". Setting an application as shared makes a single application deployment available over the protocols defined for each Web site it is declared within. To share between HTTP and HTTPS, one Web site would be secured, configured for HTTPS, and the other would be not secured, configured for HTTP...
This is wat i got from this site..
http://database.in2p3.fr/doc/oracle/Oracle_Application_Server_10_Release_3/web.1013/b28959/sessions.htm
So setting that attribute to false may be of help to you...
Think this info is somewat useful...
Regards
~RK

Disabling HTTP

Similar Messages

Maybe you are looking for