Message Server to ICM(s) redirection issue

Hello,
System setup:
Backend network address: server_i0.domain.com.au
Backend ip address: 10.10.1.10
Frontend network address: server_e0.domain.com.au
Frontend ip address: 172.16.195.10
ABAP HTTP Message Server port: 8125
ICM port: 8025
The backend network is obviously a highspeed network that our SAP servers use to communicate to each other.
The frontend network is our LAN/WAN environment that our end users use to access our SAP systems.
From the browser (IE 6.0) if I enter the following URL:
http://server_e0.domain.com.au:8125  I should be automatically redirected to http://server_e0.domain.com.au:8025
This is not happening.  It works if I define the server_i0.domain.com.au address in my hosts file on my pc referencing the LAN/WAN IP address of 172.16.195.25 and then use the URL of http://server_i0.domain.com.au:8125 (auto redirected to port 8025)
What do I need to do on the backend WAS to allow server_e0.domain.com.au:8125 to redirect to port 8025??
Regards
Shaun

Hi,
do I get it right, that you want to use the message server as load balancer for your ABAP system?
This can be done in transaction SICF, in the corresponding service you would like to use.
Anyway this is not the recommended way to load balance since for example bookmarking doesn't work. I would recommend to install a load balancer (if you want on the same box) for example the SAP Web Dispatcher.
Regards,
Jochen

Similar Messages

  • Web dispatcher redirects to Message Server

    Hello SDN members.
    Iu2019m using web dispatcher in front of a ABAP+JAVA installation. When Iu2019m tracing (HTTP) requests from the portal that are aimed to the ABAP WAS (usually requests to the webgui service) I can see the following:
    1. the request are first directed to port 8100 (message server)
    2. and then redirected to port 8000 (its)
    Is this normal? Iu2019m aware that the Web Dispatcher uses the message server for information regarding load balancing, but is this redirect necessary? If not, how can I avoid it? From what i have seen in the SAP documentation, Web Dispatcher sends the requests to the ICM directly. Maybe I am missing something here.
    Thank you very much for your time.
    giorgos.

    Hello Allaine,
    Thanks for your answer. It really clarifies the process. However I would like to elaborate a bit on a gray (for me) spot:
    SAP suggests that you should use Web Dispatcher as an HTTP Load Balancer (especially when a portal is used) and not the Message Server. Since that is what we are trying to do, I expected not to see any u201Cactionu201D on the Message Server port (8100 - even though the Web Dispatcher uses the Message Server for information regarding available servers, I thought that this would happen in the background). My expectations are based on the Web Dispatcher documentation where it is stated that:
    Unlike [HTTP Load Balancing Using the SAP Message Server|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/47/c5935087b62d66e10000000a42189c/content.htm], redirects are not executed when the SAP Web dispatcher is used. This avoids the associated disadvantages (several IP addresses must be known, book marking is not possible, authentication after changing the application server).
    So, what you meant in your post is that when the message server is accessed the HTTP balancing has already taken place? Or not?
    Also as stated in Note [857596|https://service.sap.com/sap/support/notes/857596] HTTP 301 is sent by the Message Server when Load Balancing takes place. Thatu2019s why I said I want to avoid the redirection . I would like to comply with SAP directive to use the Web Dispatcher for HTTP Load Balancing and not the Message Server.
    any suggestion is valuable!
    Giorgos.

  • Use message server as load balancing instead of web dispacher for XI in HA

    Hi all!
        We are currently upgrading a cluster XI installation from 3.0 to 7.0.
        The idea is:
              Now:    1 node (central instance)
                         1 node (database)
              Future: 1 node (central instance)
                         1 node (database + application instance)
         So we need some king of load balancing between the two instances.
         We already know web dispatcher and all configuration required. However we
    were trying not to use it but use the abap/java message server who can also do
    the redirect.
         However, once the Exchange Profile has been updated, it does not work.
         If we change "com.sap.aii.connect.repository.httpport" to "8101". Cache refresh stop working with a "Authorization Error". This is really strange because if I try the very same URL in the explorer and I enter the logon data, I have no problem.
         Do you have any experience with this? I mean, is it possible to avoid installing web dispatcher?
         Thanks and kind regards,
               Encinas.

    Hi David,
    the message server does only a redirect and some XI applications (JAVA and ABAP side) cannot handle the redirect URL.
    Therefore in the XI environment you have to use a "real" dispatcher (keeping the session and forwarding the session, instead of redirect) - for example you can use the SAP WebDispatcher here.
    Best regards,
    Silvia

  • IDES 4.7, MMC - disp+work running but message server not reachable

    Hi,
    I loaded IDES 4.7 in Windows 2003 server with Oracle 9i. While starting MMC, the disp+work running but message server not reached causing the issue.
    Please suggest,
    Thanks,
    Prasad

    Hi,
    Please find the logs from the file Dev_disp
    rdisp/http_min_wait_dia_wp : 1 -> 1
    Fri Jul 13 14:14:52 2007
    ***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 8588]
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    ***LOG Q0L=> DpLoopInit, nomscon () [dpxxdisp.c   1545]
    Fri Jul 13 14:14:54 2007
    CCMS: start to initalize 3.X shared alert area (first segment).
    Fri Jul 13 14:15:31 2007
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndAdmin () [dpxxdisp.c   4130]
    Fri Jul 13 14:15:33 2007
    ***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 8588]
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:15:36 2007
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    Fri Jul 13 14:15:38 2007
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    Fri Jul 13 14:15:42 2007
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndAdmin () [dpxxdisp.c   4130]
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndAdmin () [dpxxdisp.c   4130]
    Fri Jul 13 14:15:43 2007
    ERROR => MsISnd2: not_attached [msxxi.c      1296]
    ***LOG Q0N=> DpRqNoWpHandle, MsSndName () [dpxxdisp.c   4049]
    Fri Jul 13 14:15:53 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:16:13 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:16:33 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:16:54 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:17:14 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:17:35 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:17:56 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]
    Fri Jul 13 14:18:16 2007
    ERROR => MsIAttachEx: NiBufConnect to plvprasad/sapmsDEV failed (rc=NIECONN_REFUSED) [msxxi.c      633]

  • FPN configured for message server port

    Hello,
    I would like to configure my Consumer Portal to connect to my Producer on port :8101 (the default message server port of the Producer).  However, each time I try with this conifguration FPN breaks and nothing works - can't browse the PCD or see remote roles via Identity Management (when I switch the config back to point to port :50000 in the Producer object on the Consumer it works fine again).  I'm not using a SAP web dispatcher between the two portals but Producer portal is indeed listening on port :8101 since I can hit it directly.  Is this a limitation of FPN?
    My http trace shows an ABORT message when trying to connect with the :8101 configuration.
    The 8101 port is necessary to be configured in order to leverage our clustered load balanced environment which has the 8101 message server port listening and redirecting to a cluster of servers.
    Patrick

    When using Remote Delta Links one can configure the SAP Message Server's RMI-P4 port (3901 by default) for RMI-P4 communication.
    For the HTTP load balancing you cannot configure it to point to the HTTP port of SAP Message Server (8101 by default) only the application server's HTTP port on the Central Instance (e.g. 50000) can be used.
    But don't bother yourselves with this, because SAP recommends using SAP Webdispatcher for HTTP load balancing in FPN scenario, so don't use SAP Message Server directly for HTTP load balancing in the FPN connection setup!

  • Reinstallation SAP ABAP Netweaver issue message server not connected

    hi ,
    i am trying to reinstall SAP ABAP Netweaver but getting error in step 24 of 27. i am getting the following error.
    WARNING 2010-07-20 08:52:08.078 iaxxcmsclient.cpp:93
    CIaMsgClient::CIaMsgClient(localhost, 3900)
    Connect to message server (localhost/3900) failed: NIECONN_REFUSED.
    INFO 2010-07-20 08:52:08.078
    CJSlibModule::writeInfo_impl()
    State of instance NSP/DVEBMGS00 changed from ABAP: UNKNOWN to ABAP: UNKNOWN.
    WARNING 2010-07-20 08:52:37.171 iaxxcmsclient.cpp:93
    CIaMsgClient::CIaMsgClient(localhost, 3900)
    Connect to message server (localhost/3900) failed: NIECONN_REFUSED.
    WARNING 2010-07-20 08:53:07.156 iaxxcmsclient.cpp:93
    CIaMsgClient::CIaMsgClient(localhost, 3900)
    Connect to message server (localhost/3900) failed: NIECONN_REFUSED.
    WARNING 2010-07-20 08:53:36.125 iaxxcmsclient.cpp:93
    CIaMsgClient::CIaMsgClient(localhost, 3900)
    Connect to message server (localhost/3900) failed: NIECONN_REFUSED.
    Please do tell me how to resolve this issue.
    thanks,
    tanmaya

    Hi Tanmaya,
    Question: How to find whether the port is blocked or not?
    (A) You can check the message server port in txn SMMS or dev_ms trace in ST11 to verify if the port is correctly set. If it is and you cannot connect to the message server then you will need to find out which program/service is occupying port 3900. So please follow the steps below:-
    (A1) On Unix there is a program called LSOF available which shows ALL programs that occupies all ports. SAP Note [164937|http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_bc_cst/~form/handler%7b5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d313634393337%7d] shows were you can get this program.
    (A2) On Windows the equilivent of LSOF is Process Explorer from the Sysinternals Suite. This is available on the MS website [here|http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx]. You can use this to filter by port.
    So using these programs you will be able to see which programs occupy all ports on your server and either remove or disable them.
    P.S. You can use SAP Note [421359|http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_bc_cst/~form/handler%7b5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d343231333539%7d] to bind any port to any service on Unix including "protected" ports !!!
    Hope this helps
    Michael

  • Sun Java(tm) System Messaging Server 6.3-0.15 outgoing mail issue

    Hi,
    We are running Sun Java(tm) System Messaging Server 6.3-0.15 (built Feb  9 2007).
    with this java code if i change  email.setFrom(SenderEmial);   to any other email address than the mail server will send email form that email instead of authenticated which is a problem for us so that any one can misuse it. i need help regarding this issue.I think its due to lack of SSL security so i want to know that how i can enable SSL.
      Email email = new SimpleEmail();
        email.setSmtpPort(25);
        email.setAuthenticator(new DefaultAuthenticator("[email protected]","myPass"));
        email.setDebug(false);
        email.setHostName("mail.sunjavamail.com");
        email.setFrom(SenderEmial);  //By changing this my mail server is sending emails from any email address.
        email.setSubject("Hi");
        email.setMsg("Test Mail");
        email.addTo("[email protected]");
          // email.setTLS(true);
       // email.setSSL(true);
        email.send();
        System.out.println("Done");
    Thanks..

    Hi,
    I do not think this is unusual.  Out of the box there are no restrictions on From: addresses, they're not required to match the domain of the sender or match up with DNS results.  You can configure various restrictions or even modify the from address based on the users authenticated credentials, but not by default. 
    See the following documentation for details on restricting From: addresses:
    https://wikis.oracle.com/display/CommSuite/Mail+Filtering+and+Access+Control#MailFilteringandAccessControl-FROMACCESSDescription
    https://wikis.oracle.com/display/CommSuite/Handling+Forged+Email+by+Using+the+Sender+Policy+Framework

  • Windows Server 2012R2 RDS sound and smartcard redirection issues

    We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each.  RDS Connection Broker is also virtual machine with
    Windows Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
    Our terminals are running correctly after fresh boot, but in 12 to 48 hours after boot we encounter problem with sound and smardcards redirection in RDP. Remote sound stops working and users cannot login with their smardcards.
    Relogging users doesnt help, deleting profiles doesnt help, restarting sound service doesnt help, only viable way to solve issue is server restart. There is not any event in event log about this issue.

    Hi,
    Thank you for posting in Windows Server Forum.
    Sound Redirection:
    Please check the following GP setting as well.
    Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
    Limit audio playback quality: Enabled
    Audio Quality: High
    On the Client PC, in the .rdp file that you use to connect to the server, make sure you have the following line:
    audioqualitymode:i:2
    In addition check that the Windows Audio and Windows Audio Endpoint Builder services must be running for audio to work.
    Smartcard redirection:
    Kindly try to update the patch for Smartcard redirection and check the result.
    Smart card redirection in remote sessions fails in a Windows 7 SP1-based RDP 8.1 client
    http://support.microsoft.com/kb/2913751
    Hope it helps!
    Thanks,
    Dharmesh

  • Sendmail & SunOne Messaging Server issue

    Hi,
    I am trying to run SunOne messaging server & sendmail on same sun box. When i run [b][b]sendmail it gives me an error message " This server is running iPlanet Internet Mail; skipping Sendmail startup." even though i have stopped all SunOne messaging services. if i do netstat -an|grep for 25 & 110 it does not show anything.
    Is it possible to run sendmail & iplanet messaging server on same box if we configue sendmail on some different port? If yes, how to configure sendmail on different port for solaris9?
    Thanks for your help.
    ---Rajeev

    Why would you want to do that?
    iMS offers sendmail compatibility, for command-line sending, as needed.
    I admit, I'm not familiar with configuring sendmail to use different ports. You'd have to look to sendmail experts for that.
    The message you get during startup is simply how we bypass the startup of sendmail when we install iMS. If you stop iMS, you should be able to start sendmail, ASSUMING that you use the re-named sendmail binary that we move to "sendmail.bak" on iMS installation.

  • Sapwebdispatcher: ERROR: Connection to message server failed

    Hi Team,
    We have been facing an issue on the webdispatcher. Web-disaptcher is notable to communicate with the Message Server[PRD-XI].
    =====================
    Environment: Set-up =
    =====================
    1. The Webdispatcher is in DMZ. We have opened the port 8100 at the firewall.
    ==========================================================================
    ERROR MESSAGE
    ==========================================================================
    [Thr 2058] Fri Jan 11 18:53:27 2008
    [Thr 2058] *** ERROR => NiBufIConnect: non-buffered connect pending after
    5000ms (hdl 4;10.1.10.56:8100) [nibuf.cpp 4611]
    [Thr 2058] *** ERROR => Connection request from (-1/65535/0) to host:
    10.1.10.56, service: 8100 failed (NIECONN_REFUSED)
    [icxxconn_mt.c 2738]
    [Thr 2058] *** ERROR => IcmConnClientRqCreate() failed (rc=-8)
    [icrxx_mt.c 5100]
    [Thr 2058] *** ERROR => Could not connect to SAP Message Server at
    10.1.10.56. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c 2459]
    [Thr 2058] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c 2460][Thr 2058] *** ERROR => see also OSS note 552286 [icrxx_mt.c 2461]
    ==========================================================================
    SAPWEBDISPATCHER VERSION DETAILS:
    ==========================================================================
    wd011:wpiadm 73> sapwebdisp -v
    SAP Web Dispatcher Version 7.00.10, multithreaded, ASCII, 64 BIT
    kernel information
    system name =
    kernel release = 700
    database library =
    compiled on = AIX 2 5 005DD9CD4C00
    compile time = May 19 2007 01:59:47
    update level = 0
    patch number = 110
    source id = 0.111
    supported environment
    operating system
    AIX 1 5
    AIX 2 5
    AIX 3 5
    =============================================================================
    TEST OUTPUT
    ==========================================================================
    wd011:wpiadm 71> sapwebdisp -bootstrap
    SAP Web Dispatcher Bootstrap
    ============================
    This bootstrap will perform the following steps:
    1. create profile file "sapwebdisp.pfl"for SAP Web Dispatcher (if not
    already existing)
    2. create user for web based administration in file "icmauth.txt"(if notalready exisiting)
    3. start SAP Web Dispatcher with the created profile
    After the bootstrap you can use the web based administration
    Generating Profile "sapwebdisp.pfl"
    Hostname of Message Server (rdisp/mshost): 10.1.10.56
    HTTP Port of Message Server (ms/http_port): 8100
    Checking connection to message server...
    ERROR: Connection to message server failed: NIECONN_REFUSED
    Do you want to continue with these settings? no
    ==========================================================================
    BACK-END APPLICATION MESSAGE SERVER DETAILS: SID: PPI [PI/XI]
    ==========================================================================
    icm/server_port_0 PROT=HTTP,PORT=80$$
    ms/server_port_0 PROT=HTTP,PORT=81$$
    trc file: "dev_ms", trc level: 1, release: "700"
    [Thr 1] Thu Jan 3 15:31:05 2008
    [Thr 1] WLM Tag 'PPI/MSG' successfully set for this process
    [Thr 1] MsSSetTrcLog: trc logging active, max size = 20971520 bytes
    systemid 324 (IBM RS/6000 with AIX)
    relno 7000
    patchlevel 0
    patchno 110
    intno 20050900
    make: multithreaded, Unicode, 64 bit, optimized
    pid 2519162
    [Thr 1] ***LOG Q01=> MsSInit, MSStart (Msg Server 1 2519162)
    [msxxserv_mt. 1824]
    [Thr 1] SigISetDefaultAction : default handling for signal 20
    [Thr 1] load acl file = /usr/sap/PPI/SYS/global/ms_acl_info
    [Thr 1] MsGetOwnIpAddr: my host addresses are :
    [Thr 1] 1 : [10.1.10.56] pi100 (HOSTNAME)
    [Thr 1] 2 : [127.0.0.1] loopback (LOCALHOST)
    [Thr 1] 3 : [10.1.99.4] pi100v (NILIST)
    [Thr 1] MsHttpInit: full qualified hostname = pi100
    [Thr 1] HTTP logging is switch off
    [Thr 1] set HTTP state to LISTEN
    [Thr 1] ms/icf_info_server : deleted
    [Thr 1] *** I listen to port sapmsPPI (3600) ***
    [Thr 1] *** I listen to internal port 3900 (3900) ***
    [Thr 1] *** HTTP port 8100 state LISTEN ***
    [Thr 1] CUSTOMER KEY: >R1306811094<
    [Thr 1] Thu Jan 3 15:31:28 2008
    [Thr 1] MsHttpReadUrl2: H-1 url = /sap/public/icf_info/urlprefix (403
    Forbidden)
    [Thr 1] MsHttpReadUrl2: H-1 url = /sap/public/icf_info/logon_groups (403
    Forbidden)
    ======================+++++++++++++++++++++++++++==============================
    Please find the attached file for a better understanding of the trace file.
    A quick action on this would be much appreciated.
    Please let me know for any information required.
    Thank you.
    Regards,
    ~sagar

    Vipin,
    I don't have access to our firewall myself to confirm what ports and services we opened (I worked with our Network Operations team to get this done), but if I recall correctly, it was pretty limited, just http and https over tcp ports 80, 443, 8100, and 8101.  Probably could even restrict that to just https over 443 and 8101.  However, from your configuration, you don't yet have your web dispatcher configured to talk to your message server over https, only http.  I would recommend that you get the web dispatched completely configured and working in as close to your final desired configuration as possible while keeping it inside your firewall, not your dmz.  Then move it to the dmz and see what breaks, and that way you know it's just the firewall that needs configuration at that point.
    To configure the SSL termination, the following are the parameters required and the way that I configured them in our scenario (which terminates incoming SSL requests and re-encrypts them when sending them on to the backend, and also uses SSL for message server communication):
    rdisp/mshost = mshost.domain.org
    ms/https_port = 8101
    wdisp/server_info_protocol = https
    wdisp/group_info_protocol = https
    wdisp/url_map_protocol = https
    icm/server_port_1 = PROT=HTTPS,PORT=443,TIMEOUT=30,PROCTIMEOUT=600
    icm/server_port_2 = PROT=HTTPS,PORT=8101,TIMEOUT=30,PROCTIMEOUT=600
    icm/host_name_full = wdhost.domain.org     (note, use the externally visible name as registered on your SSL certificate for web dispatcher here; does not need to match the actual machine hostname, but must be resolvable in external DNS)
    icm/HTTP/admin_0 = PREFIX=/sap/admin,DOCROOT=\usr\sap\RW1\W00\data\icmanroot/admin,AUTHFILE=\usr\sap\RW1\SYS\global\security\data\icmauth.txt,PORT=8101
    ssl/ssl_lib = $(DIR_EXECUTABLE)\sapcrypto.dll
    ssl/server_pse = $(DIR_INSTANCE)\sec\SAPSSLS.pse
    ssl/client_pse = $(DIR_INSTANCE)\sec\SAPSSLC.pse
    wdisp/ssl_encrypt = 2
    wdisp/ssl_auth = 1
    is/HTTP/show_detailed_errors = FALSE
    wdisp/permission_table = $(DIR_INSTANCE)\sec\ptab
    On the backend host I have the following parameters:
    sec/libsapsecu = \usr\sap\RP1\DVEBMGS00\exe\sapcrypto.dll
    ssl/ssfapi_lib = \usr\sap\RP1\DVEBMGS00\exe\sapcrypto.dll
    ssl/ssl_lib = \usr\sap\RP1\DVEBMGS00\exe\sapcrypto.dll
    ssf/name = SAPSECULIB
    icm/server_port_2 = PROT=HTTPS,PORT=443,PROCTIMEOUT=-1
    ms/server_port_1 = PROT=HTTPS,PORT=8101
    Naturally, a server certificate is configured on the backend that the web dispatcher trusts (it can be an internally generated certificate; the outside public just needs to trust the web dispatcher's certificate, so that one should come from a recognized CA).  Port 8101 is NOT open from the outside, just from the dmz and only to/from the web dispatcher host (this does allow me to use the webadmin interface from the inside).  The https service also has to be activated on the backend in SMICM.
    There's good advice about security setup for the web dispatcher in Note 870127, and troubleshooting advice in the Note mentioned in your tracefile output, 552286.  Fairly complete documentation is in the online help at http://help.sap.com/saphelp_nw70/helpdata/en/de/89023c59698908e10000000a11402f/frameset.htm.  Note 538405 is also good, more for performance configuration than security.
    I hope you find this helpful.
    --Matt

  • PI 7.11: Cannot connect to server using message server:...

    Hello Guys,
    we make the Application Management for a Customer PI System.
    Scenario:
    - the SAP Gui Connection to the ABAP Stack is routed via SAPRouter and Works fine.
      SAP Gui -> our SAP Router -> VPN Box from Customer -> Firewall Customer -> ABAP Stack PI System
    - WebAccess its working fine, the Customer use Webdispatcher on every PI Server...
      Browser -> VPN Box from Customer -> Firewall Customer -> Java Stack (Port: 5xx00 btw. 81xx (Webdispatcher))
    Problem:
    Our Problem ist, we can not proceed the Integration Builder or the ESB, the Java Web Start works fine and open the Logon Screen Correctly -> but i fill the Logon Screen with my User name and Password and press Logon come the follwing Error:
    "Cannot connect to server using message server: ms://<hostname>.<domain>:8134/P4"
    In the Details from the Error Message:
    "<hostname>.<domain>:53404 Reason: com.sap.engine.services.rmi_p4.P4IOException:
    Cannot open connection to host: <IP-Adress of Central Instance> and Port: 53404"
    The Customer says, the Firewall is open with the IP Adresses and P4 Port but i dont think so...
    Can everybody help me, or have tips for me! I have checked a lot of OSS Messages (PI High Availabilty etc... its all correct on the System)
    Sorry for my bad English
    Best Regards,
    Markus

    Hi Markus,
    did you check if the browser is using a proxy? (In this case your scenario unfortunately won't work).
    P4-port should generally be routed via a proxy (described in the help.sap.com), but within the PI-Tools(JNLP) the proxy-usage is not implemented.  There is even a SAP-note that describes how to check the JavaWebStart-Proxyconfiguration, but this won't help either.
    If there is a proxy defined in the browser everything is working fine till you pass the logon-screen but even with the correct "javaws"-settings you won't be able to go on.
    (This problem is pretty bad if you do have developers and the SAP-servers seperated because of security issues. I'm hoping that this malfunction will be solved with upcoming patches.)
    Solution: Establish a connection without any proxy in between.
      E.g.: a terminal server in the same network
    It would be helpful to find more people with the same problem to force a fix from SAP for that.
    If anyone else is having problems with this, please add a comment to this thread.
    Best regards
    Christian

  • Can not start messaging server resource group in cluster 3.2

    Hi all,
    Please help in the following issue.
    I am not able to start resource group (msg-rg) and following is the error:
    ms1@root# clrg online -M -e msg-rg
    clrg: (C748634) Resource group msg-rg failed to start on chosen node and might fail over to other node(s)
    clrg: (C135343) No primary node could be found for resource group msg-rg; it remains offline
    scstat output (remove some for brief description)
    -- Device Group Servers --
    Device Group Primary Secondary
    Device group servers: SJMS ms1 ms2
    -- Device Group Status --
    Device Group Status
    Device group status: SJMS Online
    -- Resource Groups and Resources --
    Group Name Resources
    Resources: msg-rg mail msg-hasp-rs msg-rs
    -- Resources --
    Resource Name Node Name State Status Message
    Resource: mail ms1 Offline Offline - LogicalHostname offline.
    Resource: mail ms2 Offline Offline - LogicalHostname offline.
    Resource: msg-hasp-rs ms1 Offline Offline
    Resource: msg-hasp-rs ms2 Offline Offline
    Resource: msg-rs ms1 Offline Offline - Stop Succeeded
    Resource: msg-rs ms2 Offline Offline - Stop Succeeded
    Following is the from /var/adm/messages (remove some for brief description)
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 224900 daemon.notice] launching method <ims_svc_start> for resource <msg-rs>, resou
    rce group <msg-rg>, node <ms1>, timeout <300> seconds
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 784560 daemon.notice] resource msg-rs status on node ms1 change to R_FM_UNKNOWN
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 922363 daemon.notice] resource msg-rs status msg on node ms1 change to <Starting>
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 751138 daemon.notice] 47 fe_rpc_command: cmd_type(enum):<1>:cmd=</usr/cluster/lib/r
    gm/rt/hafoip/hafoip_monitor_start>:tag=<msg-rg.mail.7>: Calling security_clnt_connect(..., host=<ms1>, sec_type {0:WEAK, 1:ST
    RONG, 2:DES} =<1>, ...)
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 268902 daemon.notice] 45 fe_rpc_command: cmd_type(enum):<1>:cmd=</opt/sun/comms/msg
    scha/bin/imssvc_start>:tag=<msg-rg.msg-rs.0>: Calling security_clnt_connect(..., host=<ms1>, sec_type {0:WEAK, 1:STRONG, 2:
    DES} =<1>, ...)
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 515159 daemon.notice] method <hafoip_monitor_start> completed successfully for reso
    urce <mail>, resource group <msg-rg>, node <ms1>, time used: 0% of timeout <300 seconds>
    Sep 26 12:25:19 ms1 Cluster.RGM.rgmd: [ID 443746 daemon.notice] resource mail state on node ms1 change to R_ONLINE
    Sep 26 12:26:53 ms1 Cluster.PMF.pmfd: [ID 887656 daemon.notice] Process: tag="msg-rg,msg-rs,1.svc", cmd="/bin/sh -c /opt/sun/
    comms/messaging64/bin/start-msg watcher", Failed to stay up.
    Sep 26 12:26:55 ms1 Cluster.RGM.rgmd: [ID 784560 daemon.notice] resource msg-rs status on node ms1 change to R_FM_ONLINE
    Sep 26 12:26:55 ms1 Cluster.RGM.rgmd: [ID 922363 daemon.notice] resource msg-rs status msg on node ms1 change to <Start succe
    eded.>
    Sep 26 12:26:55 ms1 Cluster.PMF.pmfd: [ID 819736 daemon.notice] PMF is restarting process that died: tag=msg-rg,msg-rs,1.svc,
    cmd_path=/bin/sh -c /opt/sun/comms/messaging64/bin/start-msg watcher, max_retries=0, num_retries=0
    Sep 26 12:27:25 ms1 SC[SUNW.ims:7.0,msg-rg,msg-rs,ims_svc_start]: [ID 141062 daemon.error] Failed to connect to host 192.168.
    0.250 and port 27442: Connection refused.
    Sep 26 12:29:55 ms1 last message repeated 6 times
    Sep 26 12:30:26 ms1 Cluster.RGM.rgmd: [ID 764140 daemon.error] Method <ims_svc_start> on resource <msg-rs>, resource group <m
    sg-rg>, node <ms1>: Timeout.
    Sep 26 12:30:26 ms1 Cluster.RGM.rgmd: [ID 443746 daemon.notice] resource msg-rs state on node ms1 change to R_START_FAILED
    Sep 26 12:30:26 ms1 Cluster.RGM.rgmd: [ID 529407 daemon.notice] resource group msg-rg state on node ms1 change to RG_PENDING_
    OFF_START_FAILED
    Sep 26 12:30:26 ms1 Cluster.RGM.rgmd: [ID 784560 daemon.notice] resource msg-rs status on node ms1 change to R_FM_FAULTED
    Sep 26 12:30:26 ms1 Cluster.RGM.rgmd: [ID 443746 daemon.notice] resource msg-rs state on node ms1 change to R_STOPPING
    S

    I got the mistake in adding /etc/hosts. I pasted the area here for any person who can notice if they encountered same problem or same mistake.
    it should be following format:
    192.168.0.250 mail.test.com mail msg-lcreate logical hostname as follow:
    clrslh create -g msg-rg msg-lNotice qfe0:1
    # ifconfig -a
    lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
    inet 127.0.0.1 netmask ff000000
    eri0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
    inet 192.168.0.240 netmask ffffff00 broadcast 192.168.0.255
    groupname sc_ipmp0
    ether 0:3:ba:29:8a:ac
    eri0:1: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 >index 2
    inet 192.168.0.242 netmask ffffff00 broadcast 192.168.0.255
    qfe0: flags=9040842<BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 3
    inet 192.168.0.243 netmask ffffff00 broadcast 192.168.0.255
    groupname sc_ipmp0
    ether 0:3:ba:22:d4:36
    qfe0:1: flags=1040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4> mtu 1500 index 3
    inet 192.168.0.250 netmask ffffff00 broadcast 192.168.0.255
    qfe2: flags=1008843<UP,BROADCAST,RUNNING,MULTICAST,PRIVATE,IPv4> mtu 1500 index 5
    inet 172.16.0.129 netmask ffffff80 broadcast 172.16.0.255
    ether 0:3:ba:22:d4:38
    qfe3: flags=1008843<UP,BROADCAST,RUNNING,MULTICAST,PRIVATE,IPv4> mtu 1500 index 4
    inet 172.16.1.1 netmask ffffff80 broadcast 172.16.1.127
    ether 0:3:ba:22:d4:39
    clprivnet0: flags=1009843<UP,BROADCAST,RUNNING,MULTICAST,MULTI_BCAST,PRIVATE,IPv4> mtu 1500 >index 6
    inet 172.16.4.1 netmask fffffe00 broadcast 172.16.5.255
    ether 0:0:0:0:0:1Now I am able to plumb logical hostname ip. messaging resource group is able to swing over between nodes and resource group is able to go online (before creating messaging server resource (msg-rs).
    after creating messaging server resource, use following command to start message resource group:
    ms1@root #clrg online -eM msg-rgI used the following command to create message resource (msg-rs)
    clrs create -g msg-rg -t SUNW.ims -x IMS_serverroot=/opt/sun/comms/messaging64 -y >Resource_dependencies=msg-l,msg-hasp-rs msg-rsBut still having problem in starting resource group after adding msg-rs
    Please advise where I went wrong..
    Thanks.

  • Installing Messaging Server on Windows XP

    Folks, I'm trying very hard to install the Messaging Server on my laptop running XP. Actually, I'm interested in evaluating the Calendar Server, but it seems I need the SJSMS as well if I want to be able to programmatically subscribe to notification events when items change on the SJSCS.
    Unfortunately, I can't really tell if the darned thing installs as part of the JES installation. It doesn't show up in the program group under Sun whereas Calendar Server, Portal Server, etc. all show up.
    So I tried re-installing just the Messaging Server. It promptly removed everything else from the Start->All Programs->Sun program group. The other bits and pieces still have their directories all available, but interestingly, the log now shows that calendar server isn't running any more. Still no Messaging server in the Sun program group.
    So I tried re-installing yet another time. This time is claimed to UNINSTALL the SJSMS!
    I'm at the point where I plan to uninstall the entire JES and start again. This is an evaluation install, so I'm just hoping to have the Calendar Server and the Messaging Server (and of course, the Directory Server as it's a required component for the other two).
    My question: Does the SJSMS work on XP? If so, what's a good way to test? I can't seem to find the JBiff.java program anywhere on my system, although the docs indicate that's what I should use for testing! I also can't find it online at Sun's web site.
    Thanks,
    MK

    Java Enterprise System 2005 Q4 supports Windows XP as developer evaluation platform. Messaging, Calendar are part of this release. Both can be evaluated on Windows XP starting from 2005 Q1 release.
    From the original message, the main issue seem to be missing Messaging in Program groups. Messaging Server is not directly
    installer under C:\Sun similar to other products, it is installed C:\Sun\server-root as it requries the Administration Server.
    There should be services created for Messaging
    Please see the summary.txt file in your install root that describes where Messaging has been installed and other details thaat are used for setting up the evaluation configuration.
    To evaluate calendar, select custom option, choose 'configure automatically; in product selection, uncheck all products, select Calendar (which auto selects other dependencies),and proceed.

  • "Not an executable or is a link" errors when starting Messaging Server

    "Not an executable or is a link" errors when starting Messaging Server
    <P>
    If Calendar Server 3.x has been installed to the same server root
    as Messaging server, it is possible that the command 'NscpMail start'
    to restart the server will return a string of errors:
    # /etc/NscpMail start
    19971207145610:Dispatch:Notification:Local Module
    (Account-Handler) is not a n executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Account-Manager) is not a n executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (AutoReply-Handler) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Configuration-Manager) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Error-Handler) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Mailbox-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Program-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (SMTP-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (SMTP-Router) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (UNIX-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (Finger-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (IMAP4-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (POP3-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (SMTP-Accept) is not an executable or is a link.
    Module not loaded.
    Startup Problem:
    Module Error-Handler is required for proper operation.
    Netscape Messaging Server Exiting!
    The Calendar server 3.x installation may have changed the permissions
    on [server-root]/bin directory from 755 to 750. Simply issue the
    command (as root) 'chmod 755 [server-root]/bin' and then start
    the server with the 'NscpMail start' command, and it should start
    without a problem.

    "Not an executable or is a link" errors when starting Messaging Server
    <P>
    If Calendar Server 3.x has been installed to the same server root
    as Messaging server, it is possible that the command 'NscpMail start'
    to restart the server will return a string of errors:
    # /etc/NscpMail start
    19971207145610:Dispatch:Notification:Local Module
    (Account-Handler) is not a n executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Account-Manager) is not a n executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (AutoReply-Handler) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Configuration-Manager) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Error-Handler) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Mailbox-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (Program-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (SMTP-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (SMTP-Router) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Local Module
    (UNIX-Deliver) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (Finger-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (IMAP4-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (POP3-Server) is not an executable or is a link.
    Module not loaded.
    19971207145610:Dispatch:Notification:Network Module
    (SMTP-Accept) is not an executable or is a link.
    Module not loaded.
    Startup Problem:
    Module Error-Handler is required for proper operation.
    Netscape Messaging Server Exiting!
    The Calendar server 3.x installation may have changed the permissions
    on [server-root]/bin directory from 755 to 750. Simply issue the
    command (as root) 'chmod 755 [server-root]/bin' and then start
    the server with the 'NscpMail start' command, and it should start
    without a problem.

  • Why do i get the message server error when trying to restore my icloud backup i dont know if my backup was completed

    hi can anyone tell me why the message server error shows
    i did a icloud backup and have not been able to see if it was completed
    i now have a replacement iphone and want to know how i get the files back
    please help

    Hi there n@nnydee!
    I have an article for you that will give you some steps to go through in order to troubleshoot this issue with restoring from your iCloud back ups. The article can be found right here:
    iCloud: Troubleshooting restore issues with iCloud Backup
    http://support.apple.com/kb/ts4036
    Thanks for using the Apple Support Communities!
    Cheers,
    Braden

Maybe you are looking for

  • More than 255 bytes in SO_NEW_DOCUMENT_ATT_SEND_API1

    I know they are some posts about this topic already but I have read them all but I still don't have the solution. I hope someone could help me with this: The problem is this: I have an internal table and I make an excell file of it which is mailed (s

  • No Service after restoring from backup

    So I have an iPhone 3gs. It was Jailbroken on 5.1.1 with upgraded iPad baseband 6.15.0 or something of that sort to allow sim unlocking. I decided to downgrade the baseband and upgrade to iOS 6 and unlock through official channels. Everything works f

  • Skype crashes entire computer on call

    Hi there.I am having a big problem with my skype, everytime I try to call someone or someone tries to call me the whole skype crashes and moments after that my whole computer crashes. This has been happening in more than I month and I hoped the lates

  • How to restore photo file after empty trash

    photos file have been deleted and trash is empty.  please advise how to restore. many thx! cheers

  • GCU showing up under "Rewards Overview" but not working on items in cart

    I'm trying to buy Zelda: Wind Waker for Wii U. It costs $40.99 and should show up as $32ish in my cart, but no luck so far. I went into my account and under Rewards Overview, it says I have GCU Benefits through Dec. 23, 2016 (I activated my GCU on 12