Need to Publish Portal on internet -introducing SSL & Apache infront Portal

Hi,
Recently we have installed Portal server u2013 EP 7.01 and our backend systems are ECC and BW. UME Data source is Database Only.
On Portal server we have one central instance and one server node. Currently we are accessing our Portal through http by maintaining host file entries on our local PCu2019s.
We want to make our Portal available on the internet for end users.and URL should be like https://mysapportal.customer.com/irj/portal
Hence we planned to introduce SSL (https) and Apache Web server in front of our Portal server
We have gone through few documents but we didn't get complete information.
Can anyone tell us the procedure and the detailed configurations steps which are required on both Portal and Apache systems?
Advance Thanks
Thanks
Phani

Hi,
If you are looking for configuration to make apache Web server configuration run via HTTPS, then this is a Wrong place to search and you can find apache configuration in apache sites.
You can Make Portal Access via https. i have given one wiki link for the same below and there are many available for your reference.
http://wiki.sdn.sap.com/wiki/display/EP/ConfiguringtheUseofSSLontheSAPJ2EE+Engine
Regarding Apache, You can Configure SSO Between Portal and Apache, using kerberos or other relevant methods. this way, Portal will be accessed via Https and apache Pages will be accessed from portal. Reduction of complexity. This is just one suggestion and i believe this is what olivier suggested as well to design your architecture as requirement will change based on project.
I hope it helps

Similar Messages

Images not loading while accessing portal from internet

Hi all
we are trying to publish the portal on internet. We have used apache as reverse proxy and it is in dmz .
When we access the portal from internet we are getting the login page but it is with out images (e.g branding imag etc).
we also could login in the portal but we only see the links for Help Personalize Log off , Histrory Back and Forward remaining page is blank.
Is this reverse proxy configuration issue?
Can any body help us in resolving this issue.
Regards
Rajendra.

Hi Rajendra/Experts,
We are currently working on custom webdynpro application which needs to be exposed to Internet using Apache HTTP Server.
We can able to access URL, but no images are getting displayed and also the application not functioning when we click any button/links.
Below is HTTPD file configuration
ProxyPass /esampleApp http://hostname:port/webdynpro/dispatcher/local/esampUI/ESamplingApp
ProxyPassReverse /esampleApp http://hostname:port/webdynpro/dispatcher/local/esampUI/ESamplingApp
when we look in to images URL which is being called from Apache we found out "webdynpro" is missing in the URL.
Actual URL in Portal Server: (working)
http://portalhostname:port/webdynpro/resources/local/esampUI/Components/esampling.ui.ESamplingComp/logo.gif
Apache URL:
http://Apachehostname:port/resources/local/esampUI/Components/esampling.ui.ESamplingComp/logo.gif
Please suggest.
Thanks
Aravind

RFC WSDL need to publish in Service Registry or not?

Hi,
I have created a webservice(WSDL) using SOAMANAGER for Remote Function Call(RFC) developed in R/3 System. This WSDL will be used in Enterprise Portal for our Web Application. Is it required to publish the Webservice in Service Registry? What is the importance of publishing webservice in Registry? If it is required, who will be responsible for publishing it(ABAP Technical person or Basis or Enterprise Portal person)?
Thanks and Regards,
Vimala P

Hi Nidhi,
>My Scenario is I need to publish one RFC as a webservice in PI 7.1 and provide an endpoint URL to user to use.
As per my understanding, you are trying to expose an RFC as webservice. If yes, have a look at this [link|http://help.sap.com/saphelp_nw04/Helpdata/EN/e9/ae1b9a5d2cef4ea4b579f19d902871/frameset.htm] to ensure you have done it properly.
> I have done the configuration but when I try this option Tools-> display WSDL it gives me following error-- ``Object Service Interface Z_QMNC_SAVE_CORRECTIONS | urn:sap-com:document:sap:rfc:functions not found in Enterprise Services Repository``
I am not clear with configuration you have done. Can you describe a bit more?
Regards,
Sunil Chandra

Portal on Internet IP and R/3 on Local IP

Hi,
I have the Portal that is located at an intranet IP Address and Also has an internet IP, but the R/3 just has an intranet IP. So when I try to connect from the Internet to the Portal is ok, but When I tried to execute an Iview it doesn't work. I think is because the iview is trying to connect to an internal IP (where is located the server of the R/3).
Any Ideas?
Thanks!
Matias.

Hi,
I can think of 2 possible reasons
1. Firewall between portal in internet and R/3 in intranet. In this case you need to open up firewall ports for the iView to work.
2.. The domain of Portal and the domain of R/3 system may be different. SSO will not work. Try user mapping
Hope this helps.
Thanks and Regards,
Prasanna Krishnamurthy

Analyze link generated by Portal not working after SSL Configuration

Hi,
We've installed OracleAS Portal 10.1.4 and Oracle Discoverer Version 10.1.2.48.18 on the same machine. We recently configured SSL on OracleAS Portal for SSO server only. Discoverer was not SSO enabled.
Now after successful SSL configuration we are facing one problem. The Analyze link that is generated by Portal to analyze the worksheet in Single Worksheet Viewer is no longer working. when we click on the analyze link we get the "HTTP 500 Internal Server Error" and a message that Page cannot be displayed.
Please advise...

Hi Andrew
It sounds like you need to enable SSO for Discoverer too.
Best wishes
Michael

Company name in Internet Explorer Title Bar When Portal URL is launched

Hai Gurus,
I want to shown my company name in Internet Explorer Title Bar, when portal URL is launched. Please let me know how to do this.
Thanks & Regards,
H.K.Hayath Basha.

Hi Kuthbudeen,
To change the title of the browser go to:
System Administration > System Configuration > Service Configuration > Portal Runtime > Central Configuration.
Scroll down to: portal.html.head.title
and change to required name.
Do restart ur portal for the changes to take effect.
Revert back if changes have taken place or not?
In addition,
U need to restart portal server ( logoff will not help)
Regards,
Purav
Edited by: Purav Mehta on Jan 15, 2008 11:20 AM

Webdynpro iview form portal on internet

Hi ,
I 've a strange problem .
I'm using NWDS04 SP13, EP6.0 SP13.
Problem
1) I 'm pulling web dynpro iviews to the portal.
2)They are working fine on LAN,WAN.
3)when i 'm accessing them from internet IP(real ip)
first screen is coming with all the data.
when i click on the button or drop down
problem
===============
Application expired .need to refresh .
Although i 've set the expiration time 1hr.
problem is coming only through internet .
i 've to made some changes or ??
plz help very very Urgent
Regards
Vikas

Hi,
I can think of 2 possible reasons
1. Firewall between portal in internet and R/3 in intranet. In this case you need to open up firewall ports for the iView to work.
2.. The domain of Portal and the domain of R/3 system may be different. SSO will not work. Try user mapping
Hope this helps.
Thanks and Regards,
Prasanna Krishnamurthy

Exposing Portal over Internet

Hi,
We have implemented SAP modules like SRM, BI and HR in our landscape and Portal is the single point for accessing all the available functionalities. Now, we want to access the portal from Internet WITHOUT MAKING OTHER SYSTEMS accessible because of security reasons. With this, I am not able to access SRM applications because it tries to connect to Web AS of SRM system as configured in System Object of Portal.
Please let me know the way or method used in accessing Portal over Internet.
Thanks,
Iftekhar

Hi Iftekhar,
The ideal scenario should be configuring a reverse proxy which can be place in a DMZ zone. The Reverse proxy will be use to write the rewrite rules.
Also to ensure the security a SSL implementation is highly recommended.This can be through out the landscpe or from the internet cloud to the reverse proxy depends on the requirement.
You can find a tons of material in SDN for configuring reverse proxy and SSL in the landscape.This could be starting point for configuring reverse proxy.
[The Reverse Proxy Series -- Part 1: Introduction]
and for SSL you can follow this [ADS SSL configuration journal I. / ABAP -> JAVA / 640 - 70x]
Regards
Indranil

I have captivate 6, I´m using Quizers part and I need to publish file .app in .ipa, what do I have

I have captivate 6, I´m using Quizers part and I need to publish file .app in .ipa(ipad), what do I have to do to make it run in native way, that is without internet conection?

Hi!
That's an interesting question you have raised.
I would recommend you to create your Captivate Project, Publish it to HTML5 output and Zip the Output Package,
Use the PhoneGap to package it for iOS devices and produce .IPA file for the same .
You can create an account here -- https://build.phonegap.com/
I haven't tested it yet, but, I'll do it today.
Let me know if this works out.
Thanks,
Anjaneai

SSL implementation on portal development

Hi, All
I have implemented SSL on QA using the standard port 443 and it is working fine.I did the same SSL implementation on portal development using the same port 443 and it doesn't work.When I call up the https url from IE for my portal development it seems like it's not connecting it just stays blank and it is not displaying anything.
However when I change the port to 50001 it works fine nad everything on the web page is displayed but I want it to work on the standard port 443.Please help on rectifying this or any Ideas on how to solve this.
Thank you

You need to change the http provider service on your DEV portal dispatcher to use port 443 instead of 50001.
Also, make sure there are no other web servers using that portal number on the same host as the DEV portal.
Cheers
Message was edited by:
Michael Nicholls

BEx Query not able to excecute on SAP Portal using Internet Explorer 9

Hello,
What config. do I need to do in the Internet Explorer 9 so that it will excecute the query on SAP portal.
Error message: Internet Explorer cannot display the webpage
Thanks
Arjun

Hi Arjun
Please check the SAP portal and BI system version and then check the compatibility for BEx Query in IE9.
Refer to http://service.sap.com/pam >> Click on SAP Netweaver version, here you can find the PDF files.
BI (BEX Web) is supported on IE9 with SAP porta version 7.0 SPS24 in vista or windows 7 if you SAP portal version is 7.0
Best Regards
Arun Jaiswal

What IP to register in the domain register site?How publish to www internet

1 - During domain registration process, I need to provide minimum of 2 DNS or IP addresses. Is this information at the Snow Leopard Server? Where to find it? Or how to create it?
2 - How to setup a registered domain in Snow Leopard Server? I follow all several online manuals from Apple, but all I get is to publish for my closed network only. I wish to publish to www internet.
Thank you guys! As always, FORUNS "consultings" provide all answers!

1 - During domain registration process, I need to provide minimum of 2 DNS or IP addresses. Is this information at the Snow Leopard Server? Where to find it? Or how to create it?
You cannot run public DNS on a single server. You need to have two servers (for redundancy's sake), and you need a static IP address for each one. If you only have a single server you can't meet these criteria.
All it not lost, though, most ISPs will run DNS for you (especially if you're running a commercial account). In addition, most DNS registrars will offer DNS hosting service. In these cases you simple tell the ISP/registrar what records you want in your domain (e.g. www.yourdomain.com) and what IP address it should map to.
2 - How to setup a registered domain in Snow Leopard Server?
Just use Server Admin -> (server) -> DNS -> Zones and add a new Primary Zone for your domain. From there you can add all the appropriate records (e.g. www.domain.com, mail.domain.com, etc.)
I follow all several online manuals from Apple, but all I get is to publish for my closed network only. I wish to publish to www internet.
There is no difference. If the server has a zone defined in Server Admin then it will answer queries from anyone looking for a hostname in that domain. The only difference is how external/internet users know to use your server, and that's handled by the authoritative name servers registered with your domain - when you setup the domain you specify the IP addresses of the authoritative name servers that public users can use to query your domain records.

Portal Security (Internet-Intranet)

Hi,
I have set up the portal on an intranet. Now I would like it to be accessible from the internet.
As far as I know I have to set up DMZ for that. (De-melitarized zone) for that.
Could someone help me out with that with help/documents.
Regards,
Shobhit

Hi Shobhit,
you do not need to setup a DMZ to make your portal accessible from the Internet. To make the portal accessible from the Internet you just need to make sure that Internet based clients can connect to IP of the portal server, or resolve and connect to the portal server's DNS. Therefore, this is indeed a network configuration issue.
The DMZ is a recommended but not a mandatory security feature for the portal. The idea behind setting up a DMZ is to protect your portal server by adding an additional security layer in your network landscape with traffic and connection filtering application level gateways, IDS systems, etc. that can ward off potential security threats. Also, depending on your security needs, you can use a DMZ not only for internet, but also for intranet connection requests.
As far as documentation goes, you can start off from the Network Security section of the SAP NetWeaver Security Guide, which is available at service.sap.com/security.
Best Regards,
Yonko

Portal on internet

Hi Gurus,
Can any body tell me
how to put portal on internet using External facing (EP7.0)
if any body have documents please help me
Thanks and Regards,
Kishore

Hi Kishore,
Please go through these important FAQ regarding External Facing Portal. I am sure that will vary helpful for you.
Q: What is an external-facing portal?
A: An external-facing portal is an implementation of the SAP NetWeaver Portal as a public Web site.
An external-facing portal is open to the internet, providing content to anonymous users, internal employees and business partners and enabling users to self-register in order to access additional content and to personalize the portal.
An external-facing portal uses features of the portal that provide Web-like behavior (for example, use of the browser navigation buttons) and reduce the amount of resources required to view portal pages.
Although not always appropriate for certain resource-rich applications, the external-facing portal can boost ROI by using the same platform for the company's internet and intranet implementations.
Q: What version of NetWeaver do I need to implement an external-facing portal?
A: SAP NetWeaver 04 SPS 14 or higher, or SAP NetWeaver 2004s SPS 6 or higher.
Q: Where can I find documentation about implementing an external-facing portal using SAP NetWeaver Portal?
A: The most current documentation is available on the Help Portal (help.sap.com) at:
SAP Running an IT Scenarios at a Glance NetWeaver 2004s: SAP NetWeaver Library Implementing an External-Facing Portal.Enterprise Portal
SAP NetWeaver  Portal  People Integration  SAP NetWeaver 04: SAP NetWeaver Library Implementing an External-Facing Portal.Special Topics
Q: Where can I find the limitations of implementing an external-facing portal using SAP NetWeaver Portal?
A: SAP Note 877188 and SAP Note 853509.
Q: Why shouldnt I use the external-facing portal for internal implementations?
A: It is recommended not to use this solution for internal use because some functionality that is commonly used for internal implementations is not supported.
Specifically, session management and WorkProtect mode are not supported as they require the use of the client framework JavaScript. Therefore, some standard SAP content such as Web Dynpro, SAP business packages and KM (especially collaboration) that uses these features are also not supported.
In addition, to get the full benefit of the performance improvements in an external-facing portal, the content must be light and supported by the light framework page. Content in internal implementations generally does not meet these requirements. For more information on recommended content for an external-facing portal, see the Content section.
Q: Should I use the provided light framework page for my external-facing portal implementations?
A: Your external-facing portal should use the light framework page, but we recommend that you customize or replace the out-of-the-box navigation iViews within the light framework page. You can easily do this with the Navigation and Framework tag libraries.

SSO failing when sap transactions are accessed in portal thru internet

Hi,
We are accessing portal through internet on reverse proxy(Apache) but the SSO is failing when accessing sap transactions in portal but other screens(ESS) are accessible. Please let me know does this require any config settings in portal or apache side.
thanks i advance.
Marcus

Hi Rajender,
I tried doing the same in the ECC system but the iview is throwing error"resource not available".
We have given just an Apache Ip address in the format <ipaddress>:80 as we doesn't have FQDN for the apache in the place of WebAs and ITS Host name.
Also the WEBAS path is /sap/bc/bsp/sap and ITS path is /sap/bc/gui/sap/its/webgui. Does this require any modifications.
Please also let me know for any changes need to be done on the httpd.config file on Apache server.
portal.xxxxx.xxx.xx - Our External URL
hostname:port/irj/portal - Our Intranet URL
Please let me know the exact format of the entries to be made in ITS and Web As settings with the apache details.
Web AS Host Name : Hostname:port
ITS Host Name : Hostname:port
ITS Path : /sap/bc/gui/sap/its/webgui
thanks in advance
Marcus

Need to Publish Portal on internet -introducing SSL & Apache infront Portal

Similar Messages

Maybe you are looking for