Integration Server URL for HTTPS

I want to configure SSL for our PI 7.0 system. I have:
- Configured SSL on the Java Stack and tested it. It works fine.
- Configured SSL on the ABAP and tested it. It works.
I know to enable HTTPS I need to change the following exchange profile parameter:
com.sap.aii.connect.secure_connections = messaging
I think I need to change the J2EE server
SAP XI AF CPA Cache to register with the http/https ports and the Fully qualified domain name (so to match the SSL Certificate).
The big question is:
Do I need to change the URL for the Integration Server (in the business system in the SLD)? For example:
https://<hostname>.domain.com/sap/xi/engine?type=entry
(where https is the default 443 so I don't have to specify the port).
Or can we just leave that as the default HTTP connection as below?:
http://<hostname>.domain.com/sap/xi/engine?type=entry
Any help is greatly appreciated since I don't have access to a sandbox and it is trial and error (with developers needing to use the system). Thanks!

I agree with Silvia here.
The entry can continue to point to the default port / default URL of the Integration Server as you would need to authenticate only the end point and not internal XI calls.
Also, if I remember correct, the SSL port is always one port higher than the default port both for J2EE and ABAP stack.
@Silvia : Nice to see ppl from SAP (especially the author of CTS+ article ) contributing on the XI forums. Need more people like you here
Regards
Bhavesh

Similar Messages

Dynamic URL for HTTP receiver adapter

Hi all,
when the XI send the http request to the target system, the format maybe like this:
header + body the body is including: Prolog, payload and Epilog
here is about the target system have a 'input' parameter(maybe string type)
is it possible to pass the 'head + body' these value(or maybe the whole http request message) into input
i mean is it possible to set the dynamic URL for http receiver adapter like this:
http://host:port/path?input=<the header and body>
i have searched the blog Dynamic Configuration of Some Communication Channel Parameters using Message Mapping
Link:[/people/william.li/blog/2006/04/18/dynamic-configuration-of-some-communication-channel-parameters-using-message-mapping]
and the similar threads in the forum
please give me some advice
thanks in advance

When a HTTP server requests the whole message as URL parameters, then I assume that the server also requests an HTTP GET, which is not supported by XI.
Could you check this?
Regards
Stefan

Security on report server URL for SSRS

I have a report which takes DEPARTMENT_ID as parameter. Users can only see report of their own department but problem is anyone can access the below URL and view other department's report.
http://<server>/Reports
OR
http://<server>/ReportServer?/<FolderName>/Report&DEPARTMENT_ID=5
Is there a way to make these URLs secure so only authorized users can access it? Or this option is not available in SSRS and I have to block access through firewall or something? Like disallowing access to this URL from all IPs and only allow my web server
IP to access it and then I make a page in ASP.Net in which I show this report using Report Viewer?

Hi,
For this issue I'll suggest you to add one Unique Id in URL lets say id = "ykljlkl340kjkl".
For this you have to follow below steps;
1. In BIDS create one Report Parameter Name as ID with visibity = Hidden
2. Tablix Properties -> Visibity -> show Hide based on Expression -> iff(Parameter!ID.value="ykljlkl340kjkl",False,True)
3. In Application ReportViewer Control will be only accessible if Id ="ykljlkl340kjkl" .
Thanks
Please Mark This As Answer or vote for Helpful Post if this helps you to solve your question/problem.

Sync Addon Setup says "Please enter valid server URL" for Custom Sync Server settings

While setting up the Sync add-on, I selected "Use a custom server" setting.
I wish to keep the syncing information on my own server space where my personal website is also hosted.
No matter what URL i enter (the ftp one or the http addr) it still show a "Please enter a valid server URL" message under the textbox and the next button stays disabled.
Please help!
This is important for me because xmarks is of no use to me anymore as it is blocked by our company firewall.
Hoping "Firefox Sync" proves to be the solution!
Thanks in advance.

If you follow the "strong recommendation" to use the Weave Minimal server make sure to watch out for these pitfalls. Took me a while...
# Don't try to create a new account in Firefox. You must create the account on the command line on the server.
# Don't forget to take note of the long string printed by the create_user script, that's your SyncKey, and you need it later.
# In the server URL field in the "sign in with existing account" dialogue, you must enter a trailing slash, ie. if you installed Weave Minimal at https://myserver/weave, you must enter this at https://myserver/weave/
Good luck. It does work!

Integration Server URL not being updated in SXMB_ADMIN

I have changed an incorrect entry in the SLD for my business system for my XI installation (port was wrong).
When I go into SXMB_ADMIN --> Integration Engine --> Configuration --> Integration Engine Configuration
The corresponding Integration Server has the wrong port entry (the old one). So, I goto "Goto" --> Change Global Configuration --> and click on System Landscape and it pulls back the old entry (supposedly from the SLD)!
I have run RZ70 and the SLD bridge in the Visual Admin with no effect. Where is this data cached? I need to get the right data. The developers can't work (this was a new PI 7.0 installation (failed at the wizard configuration step create business system -- was installed by someone else). Your help is greatly appreciated. Thanks!

Hi George
In SXMB_ADM >> Integration Engine Configuration, click "Specific Configuration"! Check the port number on Category "RUNTIME" Parameter "IS_URL".

Encoder to Server URL for streaming video??

I am trying to encode and stream live video. I have downloaded both the Flash Media Encoder and Flash Media Server. To complete the process of streaming video, it appears that I need to obtain a "server URL address" which is called "RTMP" on the encoder page. Where can I find this? Is this something that can be downloaded, or do I have to purchase this from a partner like Level 3 communications, AT&T, etc.? Any information on this would be helpful. Thanks in advance!

You can give the URL as "rtmp://localhost/live"
where rtmp is the protocol used for streaming from FMLE to FMS.
localhost is the name or IP address of the machine on which FMS is. I have used localhost becuase i have assumed that your FMLE and FMS are on same machine else use IP adrress or name if the machine on which FMS is instead of localhost.
Live is the apploiction that is there in applocations folder of FMS.
then in stream name give any name you want to give

Does Hyperion Integration Server exist for AS400?

I need drill through to AS400. I have IBM Data warehouse 7.1 y db2 olap 7.1 on AS400, but sql drill through come with Integration Server.There are any way to install integration server on AS400??

Yes.. ShowCase is porting EIS 6.5 for the iSeries/AS400. It should be released by late Q3 2002. Check either with IBM or ShowCase (depending on where you got your DB2 7.1) for 8.1 availability

Weblogic server to server loadbalancing for Http requests

Hi
we have a domain consisting of 3 clusters (weblogic 9.2 mp3)
FE--> has a monolithic app using both JSPs ejb
JMS--> Provides Messgaing services to FE and hosts dsitributed JMS destinations
security --> provides security services to FE (This is a new cluster we are adding to the existing domain)
Our clients interact with FE through a h/w load balancer and IIS hosting IIS plugin.
FE interacts with JMS using comma sperated url list
Now , new requirement is for The FE cluster to send http requests to the security cluster
How do I load balance these requests and have failover in case one node in the security cluster goes down?
Traditionally these methods are used for client to server load balancing but our use case is different so I am wondering how to accomplish this.
Options I came up with are
using a HttpCluster servlet (but you hav eto run a separate weblogic instance just for that)
using another h/w load balancer in front of this security cluster
I am trying to see if there are any other options to accomplish this .Also trying to understand pros and cons and which of this is reccomended for Production environments
Appreciate any comments/feedback on this
Thanks
Best

Using HTTPClusterServlet is not recommeded to be used in Prod.
To load balance the request going to the security cluster, you can simply use a webserver infornt of the cluster.
Failover is taken care of by the Cluster itself so you dont have to worry about that....

How to make the App Server Listen for HTTPS

I have a web application that needs to be accesible over an HTTPS connection, not HTTP.
When I deploy an application with Java Studio Creator to the App Server it is automatically set to an HTTP URL. How do I setup HTTPS ?
Thank you in advance,
Joe Paladin

Looks like I should have thanked myself in advance....
Turns out its pretty easy. Open the admin console, go to configuration, add and HTTP listener, check the security check box, and fill out the other mandatory fields like the port. Standard SSL port is 443.
Save changes, and restart the App Server. Any deployed apps should be reachable via https://localhost:443/myWebApp
This approach uses a default certificate that comes with the app server. Here is a link if you want to create a certificate :
http://java.sun.com/developer/technicalArticles/WebServices/appserv8-1.html
Joe Paladin

Groupware Integration(Server synchronization) for CRM 7.0

Hi CRM Experts,
Iam trying to get into Groupware Integration for CRM 7.0 however all the documentation i can found on the maketplace are for older CRM versiones like crm 4.0 or 5.0?
maybe there wasnt any significant changes in that peticular function so the older documentation still works?
still if that the case do i download and install the mapbox, goupware connector and groupware connector proxy for the crm 5.0(since there none for crm 7.0) ?
iam a little lost here place advice
with kind regards
Kalle Eismann
Edited by: Kalle Eismann on Aug 31, 2010 12:12 PM

Hi Kalle,
You can use the same documentation for crm 5.0 and 4.0. You need to install the groupware connector and run trx. MIGRATE to use ABAP MAPBOX. Try to install the gw connector in a windows 2003 server as SAP asked me once. If you need any help let me know.
Regards,
Caíque Escaler

How to use URL for http adapter

Hello,
Iam working on IDOC2HTTP scenario. Here the end user system they have given only url address userid and password.End user is htttp. Please can u help me how ot use that.
Thanks in Advance.
Regards,
Abhiram

Hi Abhiram,
you can put there the URL directly or link to a destination where you store the address.
Have a look to [Configuration of HTTP receiver adapter|http://help.sap.com/saphelp_nw2004s/helpdata/en/43/64dbb0af9f30b4e10000000a11466f/frameset.htm]
Regards,
Udo

Messaging URL of Integration Server error

Hi everyone;
We set up NW EHP1 PI 7.1 on our company.
We've done all post installation steps both in Abap +Java side.
It seems my adapter engine has some problem...
First we were getting 2 errors when we try to do SLD registration. 1st eror was:CPA cache update URL used by Adapter Engine: http://sapsrv2.sap.medyasoft:50400/dir/hmi_cache_refresh_service/ext?method=CacheRefresh&mode=<Mode>&consumer=af.mpi.sapsrv2 CPA cache update URL stored in SLD: URL currently used by Adapter Engine and URL stored in SLD are different!
we've fixed it by using Java System Properties,XPI CPA services,directory url under NWA .
But we coundn't solve the second one:
Messaging URL of Integration Server used by Adapter Engine: http://sapsrv2.sap.medyasoft:50400/sap/xi/engine?type=entry
Messaging URL of Integration Server stored in SLD: http://SAPSRV2:50400/sap/xi/engine?type=entry
Messaging URL of Integration Server: URL currently used by Adapter Engine and URL stored in SLD are different!
Is the anyone who knows how we can change messaging URL of Integration Server stored in SLD?
Kind Regards,
Seyda

It seems you are using different urls for AE and SLD (http://sapsrv2.sap.medyasoft:50400/sap/xi/engine?type=entry is different from http://SAPSRV2:50400/sap/xi/engine?type=entry). Try using the same for the configurations you have done
For example: http://sapsrv2.sap.medyasoft:50400/sap/xi/engine?type=entry for both configurations
Regards,
Federico

Problem by Maintaining a Business System for the Integration Server

Hi to all,
I have the following problem. I tried to change some Business systems configuration in SLD but accidentally deleted defined Business System for our Integration Server. After that I tried to create that business system again but I have the following error:
Integration Server already defined. There is already an integration server defined for the selected technical system. Please select role Application System.
Since than Im receiving the following error message when I try to refresh my adapter engine cache:
com.sap.aii.ib.server.abapcache.CacheRefreshException: Unable to find an associated SLD element
Do you know how can I define the Business System again currently I can't see it in SLD Business systems?
Ive also checked the IS URL (TR: SXMB_MONI) and it seems that its ok.
Regards
Naycho

Hi Naycho,
i think you have to clean up some sld rubbish
Go to SLD / Administration / Content Maintenance. Choose left side "all classes" or "landscape description" and right side "business system". Delete all entries you find for your business system, after that try to recreate it.
Regards,
Udo

CSS Sorry Server for HTTPS

How to configure Sorry server for HTTPS (443) port. Sorry server works fine with HTTP, But not with 443
In the following config if server1 and server2 are down, the HTTP requests goes to the Sorry Server, but for HTTPS nothing is displayed. I am running the sorry server on port 81
Please suggest
!************************** SERVICE **************************
service prisorry
ip address 10.100.11.11
keepalive type http
keepalive port 81
port 81
active
service secsorry
ip address 10.100.11.12
keepalive port 81
keepalive type http
port 81
active
service server1
ip address 10.100.11.11
keepalive type http
keepalive port 80
active
service server2
ip address 10.100.11.12
keepalive type http
keepalive port 80
active
!*************************** OWNER ***************************
owner Loadbalancing
content L4Rule1
protocol tcp
add service server2
add service server1
port 80
url "/*"
vip address 10.100.11.4
advanced-balance sticky-srcip-dstport
primarySorryServer prisorry
secondarySorryServer secsorry
active
content L4Rule2
protocol tcp
add service server2
port 443
add service server1
vip address 10.100.11.4
advanced-balance sticky-srcip-dstport
primarySorryServer prisorry
secondarySorryServer secsorry
application ssl
active
content L4Rule3
add service server2
protocol tcp
port 1443
add service server1
vip address 10.100.11.4
advanced-balance sticky-srcip-dstport
primarySorryServer prisorry
secondarySorryServer secsorry
active
Thanks

I just deployed a couple 11050's the other day so my experience is limited, but I'd guess your problem is that, when using the Primary Sorry Server, you end up with clients sending HTTPS requests to an HTTP port. Having HTTPS requests redirected to HTTP ports is one thing because the client then makes an HTTP request to that port, but the way you have it above, it appears to me that the client will be talking HTTPS to port 81 on the Sorry Server, which is listening for HTTP.

Integration server wrong port number

Hi All, Suddenly from yesterday in our production PI server some setting has got changed. Files are not reaching Integration server. On investigation found out wrong port # is appearning. In RWB,Component Monitoring>Integration Engine XPI> Test Message tab, i see Send Message to: Http://<servername>:<wrong port #>/sap/xi/engine?type=entry.
I checked in xsmb_admin-->Integration Engine Configuration, there i see the correct port(8002). Not sure why the same port is not appearning the Test Message Tab.
For testing purpose i changed from 5000 to 8002 and test the message in the Test Message tab and processed. If i have 5000 then i get the below error message:
Transmitting the message to endpoint http://<server>:5000/sap/xi/engine/entry?action=execute using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: java.net.ConnectException: A remote host refused on attempted connect operation.
Can you someone throw some light on this issue? This is a production issue.
Thanks,

Hi,
Also check integration server URL (Pipeline URL) is correctly maintained in the Business System for the Integration Server in the SLD.
HTTP port you can also check on Abap stack SMICM -> Servicies option.
--Divyesh

Integration Server URL for HTTPS

Similar Messages

Maybe you are looking for