Portal and web dispatcher

Please i need your help, i´am new in this and i´am trying to run the portal on internet with the web dispatcher, i already get the wd work, and i can see the admin page.
I have de wd running on a web server (saphost1) in standalone mode,(when i configured the wd i gave the portal message server port, and the name of the host in which the portal is running), and the portal running in other server (saphost2) in an ABAP+JAVA WebAS,
i want to access the portal through the wd but i don´t know how to do that (redirect the url from saphost1:/irj/portal) , i searched in the docs but i haven´t found something.
Please help me i really need to get this done the sooner as possible
Thanks
Coatl

Hi Martin!!!
Thank you very much, that was just what i was looking for. i have another doubt, i done everything that the SAP Library says, but when i try to display the portal, i get the next error:
500 Dispatching Error
Error: -26
Version: 7000
Component: HTTP_ROUTE
Date/Time: Wed Feb 14 12:46:58 2007
Module: http_route.c
Line: 3122
Server: acsservicios__00
Error Tag:
Detail: no valid destination server available for '!ALL' rc=13
In the sapwebdisp.pfl i have the next values:
Profile generated by sapwebdisp bootstrap
unique instance number
SAPSYSTEM = 6
add default directory settings
DIR_EXECUTABLE = .
DIR_INSTANCE = .
Accessibility of Message Servers
rdisp/mshost = acslobot.advanced.local
ms/http_port = 8106
use static description files for logon groups: group info
wdisp/group_info_location = file:
icrgroups.txt
use static description files for logon groups: url prefixes
wdisp/url_map_location = file:
urlinfo.txt
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 500
wdisp/server_info_location = file:
C:\SAPWebDisp\icrgroups.txt
wdisp/HTTPS/max_pooled_con = 500
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=8006
SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/icm/admin,DOCROOT=./admin,AUTHFILE=icmauth.txt
icm/HTTP/redirect_0 = PREFIX=/, TO=/irj/portal
when i aces to de address: <webdisphost>:8006/...i get the mentioned error, where 8006 is the port where the wd listen, but when i try to aces the url <webdisphost>:8006 it says that the page cant be found
What can be grown with my configuration....please need your help
Coatl

Similar Messages

SSL Re-encryption with Portal and Web Dispatcher: certificate expired

Hello,
I am trying to set up HTTPS connection to the Portal through SAP Web Dispatcher. We are using SSL Re-encryption. I think I got everything set up correctly. When trying to access through a Web browser the web dispatcher trace file shows error message 'certificate expired'. Looking at the Portal (Visual admin - Keystore) I am pretty sure it is the service-ssl with localhost. It is expired. Two questions:
- is it correct that it uses localhost or am I missing anything?
- How would I recreate the certificate? (I am sure it is somewhere in the Online documentation, but haven't found it yet). Can I do this while the Portal is productive without breaking the normal access (http) to the Portal. This is our Production portal.
Thanks,
Ingrid

Hi,
Go thru the contents of SAP Note,
685306 -Enabling SSL and renewing the J2EE certificate
And also the help contents in,
http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm
These might of some help to you !
Regards
Srinivasan T

Cisco Load balancer and Web Dispatcher to the same portal

Hello Experts,
We have implemented intranet portal with Cisco as the load balancer. Now we need to expose this intranet to the outside world as an extranet portal. So the same portal will be accessed from both intranet and from outside. We are thinking of installing a web dispatcher in the DMZ so that outside users can access the Web Dispatcher URL to access the intranet portal. In effect intranet users will use load balancer and extranet users will use Web Dispatcher to access the same portal. Now my question is if we configure Load Balancer and Web Dispatcher to the same portal, will the portal be able to load balance properly? Is this the right approach?
Thank You,
mansooralip1

Dear Andrew,
We need to provide access to our intranet to some outside companies for them to also use some of our portal applications. As per your answer, I understand that I can configure Web Disptacher to talk to the Cisco Load Balancer of our portal. In this case Web Dispatcher will work just as a reverse proxy. But when I discussed this with one of our basis resource, he told me that when we install and configure Web Dispatcher, it always ask for the Message Server URL and Port number, even if I just want to use Web Dispatcher as a Reverse Proxy. If his concerns are valid, I do not think I will be able to configure Web Dispatcher to access the cisco Load Balancer because I cannot put Cisco load banacer URL and port instead of the Message Server URL and Post Number. Can you kindly share your comment on the same?
Now the second part of my question, if Web Dispatcher cannot be configured to talk to Load Balancer(as mentioned by our basis resource), I will have to use two load balancers. One web Dispatcher in DMZ as a Load Balancer *** Reverse Proxy for the external users. Second the internal Cisco Load Balancer for the intranet users. So the same portal will be accessed by two load balancers. My question here is, in this set up, can the portal work efficieintly here by distributing equal loads two both the server instances?
Thank You,
mansooralip1

Exception accessing portal over web dispatcher

Hello experts,
We are facing issue while accessing portal over web dispatcher on IE (7 & 8).
We get following exception when we try to load any WebDynpro IView (both standard and custom)
com.sap.tc.webdynpro.services.sal.deployment.core.ClassLoaderException: Classloader of 'sap.com/pb' is null, even though application is started.
We are able to execute the application in following ways though
1. Accessing the portal directly bypassing webdispatcher
2. Using Mozilla Firefox browser to access the webdispatcher URL.
Please guide what is missing from the configuration perspective to make it work on IE.
Appreciate the responses.
Thanks
Ashutosh

Yes
ERROR => shmget(15162,744864600,480) (22: Invalid argument) [shmux_mt.c 1501]
[Thr 2199027274608] *** ERROR => ShmCreate( ATTACH 62, 744864600) failed 1 [mpixx_mt.c 1061]
[Thr 2199027274608] *** ERROR => IcmBufInit: MpiInit failed (rc=1) [icxxbuf_mt.c 189]
[Thr 2199027274608] *** ERROR => IcmInit: IcmBufInit failed (rc=1) [icxxrout_mt. 2024]
We have 4 GB of SWAP memory and 4GB of the main memory available.
Ashutosh

BSP Application in Portal and WebAS Authentication popup

Hello,
we have a very well running SAP Portal SP14 and a BSP
application running WebAS 6.20.
SSO between Portal and WebAS works perfect. Profiles are maintained and verify.der is imported.
But:
From time to time we have users which open logon to
portal and execute the bsp application, authentication is successfull, but after a certain period of time or any unknown incident these users get a popup from webas and they are asked(forced) to enter their username and password. It seems to be that their session expired and they have to re-authenticate. But they are still logged on to Portal.
Can we prevent this popup from beeing shown to the user? Problem is, that they enter any password and they et locked
Does anybody have the same problem?
Thanks
Maik

Hello Maik,
i am newbee in SAP.I have little proble with SSO.I am using Ep7.0
Though i have imported the verify.der file and installed the certificate still SSO
doesn't seem to be working.I am getting error as:
"not authorized for executing BSP application".
Do i need to give any particular role to users or is any other setting required?
regards!

Apache Server Sizing and Web Dispatcher filtering

Hi,
We are planning to expose our intranet portal for internet user. An internet user would access it via browser (https) -> Apache - reverse proxy (outer DMZ) -> Web Dispatcher - Load Balancing (Inner DMZ) -> Portal.
We are looking for end-to-end SSL implementation.
My questions:
1] Do we need to have load balancing at apache server for performing reverse proxy? If yes, how it would be achieved?
2] What is the hardware sizing required for Apache server on Linux box?
3] Does the portal performance is affected by end-to-end SSL implementation?
4] In load balancing using Web Dispatcher, can we forward particular request to a specific application server? Like, filter out the internet requests or forward BI related requests to a specific application server node.
Regards,
Sham

Hi,
1) Depends on your requirement. When you have 1 Apache RP and 1 SAP Web Dispatcher, you won't need load balancing of at the Apache.
2) Depends on the number of concurrent requests you are expecting. More information on that can be found at apache.org
3) Portal performance gets affected when using SSL and the portal is responsible for the SSL (there are product out there that do the SSL handling). How much the SSL will affect your portal depends on the number of users. But generally the impact of SSL isn't really high with recent hardware, the portal will be more occupied with the number of users, navigation, etc than with SSL
4) You can use logon groups to assign a specific user (group) to a dedicated server
br,
Tobias

Could not connect to backend system through portal via Web Dispatcher

Web dispatcher redirecting problem
Dear Experts,
I have implemented a scenario which comprised of customizing that is developed in Portal EP7. What customizing does is getting report from backend system (ERP 6.0)
According to the needs for reaching the portal from internet I configured the SAP Web Dispatcher in the environment as you may see its contents below.
The problem is when I run the customizing in portal system then it requires connecting to backend system (ECC 6.0) to get the data (report). But from this point on web browser comes to a blank page, could not view the data that is from backend system via portal. Because in the time when it tries to retrieve data in backend system, on the left bottom of the explorer the indicator shows internet address that system uses connecting to the backend system as local network address of the backend system which is not known in internet therefore I get blank page.
The question is how to configure the web dispatcher in a way that both portal and backend systems could be reachable from internet?
Contents of profile file of Web Dispatcher as;
SAPSYSTEMNAME = WDP
SAPGLOBALHOST = portald
SAPSYSTEM = 02
INSTANCE_NAME = W02
DIR_CT_RUN = $(DIR_EXE_ROOT)\$(OS_UNICODE)\NTAMD64
DIR_EXECUTABLE = $(DIR_CT_RUN)
Accesssability of Message Server
rdisp/mshost = portald
ms/http_port = 8101
Configuration for medium scenario
icm/max_conn = 500
icm/max_sockets = 1024
icm/req_queue_len = 500
icm/min_threads = 10
icm/max_threads = 50
mpi/total_size_MB = 80
SAP Web Dispatcher Ports
#icm/server_port_0 = PROT=HTTP,PORT=81$$
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=60000
icm/HTTP/redirect_0 = PREFIX=/, TO=/irj/index.html
icm/HTTP/redirect_0 = PORT=50000
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 500
wdisp/HTTPS/max_pooled_con = 500
Configuration for medium scenario
icm/max_conn = 500
icm/max_sockets = 1024
icm/req_queue_len = 500
icm/min_threads = 10
icm/max_threads = 50
mpi/total_size_MB = 80
Regards,
Ali Taner

Hi,
To resovle this you must have registered FQDN for your backend system as well. When you call the report from Portal using internet it should call that FQDN of your backend system then DNS will resolve this & you will get the expected page. This way only you can resolve this issue.
Thanks,
Sachin Sable

Load Balancer and Web Dispatcher "keepalive page"

I would like our monitoring and load balancer to be able to perform http status check against SAP web dispatchers.
Is there a built in "keepalive" page that can be queried within Web Dispatcher, or will a URL rule be needed?

Dear Andrew,
We need to provide access to our intranet to some outside companies for them to also use some of our portal applications. As per your answer, I understand that I can configure Web Disptacher to talk to the Cisco Load Balancer of our portal. In this case Web Dispatcher will work just as a reverse proxy. But when I discussed this with one of our basis resource, he told me that when we install and configure Web Dispatcher, it always ask for the Message Server URL and Port number, even if I just want to use Web Dispatcher as a Reverse Proxy. If his concerns are valid, I do not think I will be able to configure Web Dispatcher to access the cisco Load Balancer because I cannot put Cisco load banacer URL and port instead of the Message Server URL and Post Number. Can you kindly share your comment on the same?
Now the second part of my question, if Web Dispatcher cannot be configured to talk to Load Balancer(as mentioned by our basis resource), I will have to use two load balancers. One web Dispatcher in DMZ as a Load Balancer *** Reverse Proxy for the external users. Second the internal Cisco Load Balancer for the intranet users. So the same portal will be accessed by two load balancers. My question here is, in this set up, can the portal work efficieintly here by distributing equal loads two both the server instances?
Thank You,
mansooralip1

Installing reverse proxy and web dispatcher

I have come across a requirement for configuration of Reverse proxy & web dispatcher... to be installed on separate servers.
Can you help me know if SAP Web Dispatcher can run as a standalone component or will I have to install NW and then, install the SAR file. If we need NW, should I go for AS ABAP / JAVA... I believe it would be ABAP as we are using SAR file and not an SCA. Although, I wonder if my Web Dispatcher needs a database as I dont see any functional use of the database ?
How about reverse proxy.. Would it be good to go with IIS or with Apache.. Any other alternatives that you know of ?
I have been using Windows 2008 server & DB2 UDB.
Thanks,

Hi,
Please see the link below about the reverse proxy..
https://cw.sdn.sap.com/cw/docs/DOC-115672
For 'Dispatcher run as a standalone component' see the link below..
http://help.sap.com/saphelp_nwmobile71/helpdata/en/bc/0e774258449041e10000000a1550b0/content.htm
http://tleterme.developpez.com/bw/how/HowToWebDispatcher.pdf
Regards
Bhuban

Oracle 9i AS Portal and Web Appliances

To anybody's knowledge, is it possible to house the middle tier of the portal architecture (9iAS) on a web appliance such as the Cobalt RaQ4, or the Sun Netra?
My client would like to scale by adding more of these appliances as opposed to more expensive servers. Thanks in advance, and I'd be interested to know if anyone has gone down this route.

Nick
Oracle9iAS is available already packaged as an appliance! Check out:
http://www.oracle.com/ip/deploy/ias/index.html?9iappliance.html

Error when configuring Web Dispatcher for SSL with Enterprise Portal

We are in the process of configuring the Web Dispatcher using SSL to connect to our Enterprise Portal (the Web Dispatcher will be in the DMZ). We have followed all of the help.sap.com guides and now have SSL listening on the EP side (port 8103). We are now receiving this strange certificate error when we start the Web Dispatcher:
[Thr 5332] Tue Mar 20 00:36:23 2007
[Thr 5332]   MatchTargetName("<FULLY QUALIFIED HOSTNAME>", "CN=XXX, OU=XXX, O=XXXX, C=XX") FAILS
[Thr 5332]   SSL socket: local=<IPADDRESS>:4742 peer=<IPADDRESS>:8103
[Thr 5332] <<- ERROR: SapSSLSessionStart(sssl_hdl=009D7670)==SSSLERR_SERVER_CERT_MISMATCH
[Thr 5332] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH [icxxconn.c 2005]
[Thr 5332] *** ERROR => IcmConnClientRqCreate() failed (rc=-14) [icrxx.c      4919]
[Thr 5332] *** ERROR => Could not connect to SAP Message Server at <FULLY QUALIFIED HOST NAME>. URL=/msgserver/text/logon?version=1.2 [icrxx.c      2301]
[Thr 5332] *** ERROR => rc=-1, HTTP response code: 0 [icrxx.c      2302]
[Thr 5332] *** ERROR => see also OSS note 552286 [icrxx.c      2303]
We have gone through the trouble shooting note 552286 as listed in the error above. Any assistance is appreciated.

Hello, did you receive any resolution for this problem? We are receiving a similar error and I am unsure of how to resolve.

Web Dispatcher Configuration.

Hi,
1)Our srm server is connected to portal and end-users are using portal to connect to it. Srm server has another 2 other application server for load balancing.
As Load balancing is not happening we are getting ITS memory bottle neck issue.
We have installed Webdispatcher for load balancing but I have confusion how will be connectivity Portal --> SAP Web Dispatcher --> SRM.
2) C:\usr\sap>sapwebdisp.exe -checkconfig pf=c:\usr\sap\sapwebdisp.pfl
Checking SAP Web Dispatcher Configuration
=========================================
maximum number of sockets supported on this host: 32768
Server info will be retrieved from host: CIserver:8100 with protocol: http
Checking connection to message server...OK
Retrieving server info from message server...OK
Message Server instance list:
------++--
+
instance name
hostname
HTTP port
HTTPS port
------++--
+
APPS602_PRD_01
APPS602
8001
50101
APPS601_PRD_00
APPS601
8000
50001
CIserver_PRD_02
CIserver
8002
8003
------++--
+
Checking ABAP servers with URL "/sap/public/icman/ping":
Checking ABAP server APPS602:8001...OK
Checking ABAP server APPS601:8000...OK
Checking ABAP server CIserver:8002...OK
Checking J2EE servers with URL "/index.html":
Checking J2EE server APPS602:8001...ERROR: unexpected OK code: 404
ERROR: check if application is deployed and active
Checking J2EE server APPS601:8000...ERROR: unexpected OK code: 404
ERROR: check if application is deployed and active
Checking J2EE server CIserver:8002...OK
Retrieving group info from server APPS602:8001...OK
Defined server groups:
+
group name
#entries
+
!J2EE
3
!J2EES
3
!DIAG
3
!DIAGS
1
!ALL
3
LOGON_PRD
3
+
Retrieving url info from server APPS602:8001...OK
Url map info file "/sap/public/icf_info/icr_urlprefix" is OK
Check ended with 2 errors, 0 warnings
Please advise
Regards
Mazher

Hi All,
I have crossed checked in T-code SMLG still load balancing is not happening
some time getting below warnings in SM21
ITS, New user session denied due to memory bottleneck.
ITS, User session terminated
Can you please advise.
Thanks

Configuration the connection between portal and srm server only via JDBC

Dear all:
   We want to implement the SRM server and present the supplier web/page in the portal server. Our SRM and portal server install in intranet network.
   For internal employee use the SRM server and the Supplier access the portal server via Internet, we install Web Dispather in DMZ to exchange the HTTP request.
     Network TOP like this :
    SRM server--Portal||FireWall||-Web Dispatcher--Supplier
(--Internal|firewall--|DMZ|-Internet )
The question is : Between DMZ zone and our internal network zone ,there is the firewall and it only allows JDBC protocol (SQL statements or result set) to pass. Other protocol and port could not pass this firewall.
So ,it seems that no way to implement this ,right? Or any other way to implement it ?

thanks

CRM_UI Reporting - HTTPS Terminating at Web Dispatcher or SSL all the way

Hi,
We need to set up access to crm_ui reports (leads and marketing mainly) in CRM 7.0 for vendors coming from the internet. The CRM server is in the internal network. In order for this to work I plan to setup the web-dispatcher in the application dmz. The initial login is going to be via the web dmz layer (using sun's iplanet server), which then routes the crm URL to the web dispatcher in the App dmz and then from the web dispatcher to CRM server.
One requirement from our security team is to set up the flow as HTTPS.
On going through SAP help I get the impression that it can be set up two ways, one, configuring web dispatcher to pass the SSL connection to backend, & two - configuring the web dispatcher to terminate SSL.
Seems the former is quite straight forward (from SAP online help we have to set the icm/server_port_<xx>> = PROT=ROUTER) but does it also require that we setup the crm_ui_frame service as SSL and activate the HTTPS service in ICM?
Or is it better to go via the second option (HTTPS termination) without changing the backend setup? SAP Online help lists steps to do the HTTPS termination but I have not come across any detailed documentation for the first method.
Any thoughts, suggestions will be helpful for either scenario.
Thanks,
Rommel Bhan

Thanks Martin the document helped.
Now the web dispatcher seems to talk to the HTTPS port on the backend.
However there is one issue I see in the dev_webdisp and was wondering if you have an insight.
Based on webdispatcher parameters, its taling to ms_https_port 8533 of backend
[Thr 773] Mon Feb 15 15:03:35 2010
[Thr 773] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
[Thr 773] SecudeSSL_SessionStart: SSL_connect() failed --
[Thr 773]   secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"
[Thr 773] >> -
Begin of Secude-SSL Errorstack -
>>
[Thr 773] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
[Thr 773] ERROR in af_verify_Certificates: (27/0x001b) Chain of certificates is incomplete : "CN=sapcms02.reinternal.com, OU=I0020210975, OU=SAP Web AS, O=SAP Trust Community, C=DE"
[Thr 773] ERROR in get_path: (27/0x001b) Found root certificate of <CN=sapcms02.reinternal.com, OU=I0020210975, OU=SAP Web AS, O=SAP Trust Community, C=DE> which does not fit the given PKRoot
[Thr 773] ERROR in verify_with_PKs: (27/0x001b) Found root certificate of <CN=sapcms02.reinternal.com, OU=I0020210975, OU=SAP Web AS, O=SAP Trust Community, C=DE> which does not fit the given PKRoot
[Thr 773] << -
End of Secude-SSL Errorstack -
[Thr 773]   SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
[Thr 773]   SSL NI-sock: local=10.104.146.81:62579 peer=10.104.146.81:8533
[Thr 773] <<- ERROR: SapSSLSessionStart(sssl_hdl=110acb850)==SSSLERR_SSL_CONNECT
[Thr 773] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt.c 1911]
[Thr 773] *** ERROR => IcmConnClientRqCreate() failed (rc=-14) [icrxx_mt.c   5976]
[Thr 773] *** ERROR => Could not connect to SAP Message Server at sapcms02. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   3289]
[Thr 773] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   3290]
[Thr 773] *** ERROR => see also SAP note 552286 [icrxx_mt.c   3291]
My backend is setup with SSL and web dispatcher is set to the following. Also since the backend and sapweb dispatcher are on the same host, using the same sidadm, the SSL stuff is on one location. I generated the SAPSSLS.pse in the backend using STRUST
Accessibility of Message Servers
rdisp/mshost = sapcms02
ms/http_port = 8100
ms/https_port = 8533
wdisp/server_info_protocol = https
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=ROUTER,PORT=60000
icm/server_port_1 = PROT=HTTPS,PORT=0
icm/server_port_2 = PROT=HTTP,PORT=8080 <-- web dispatcher admin port
#SSL parameters similar to one in backend
ssf/ssfapi_lib = /usr/sap/CMS/SYS/exe/run/libsapcrypto.o
sec/libsapsecu = /usr/sap/CMS/SYS/exe/run/libsapcrypto.o
ssf/name = SAPSECULIB
ssl/ssl_lib = /usr/sap/CMS/SYS/exe/run/libsapcrypto.o
ssl/server_pse=/usr/sap/CMS/DVEBMGS00/sec/SAPSSLS.pse
ssl/client_pse=/usr/sap/CMS/DVEBMGS00/sec/SAPSSLC.pse

X-Forwarded-For HTTP header behaviour with web dispatcher

can anybody specify the behavior of Web Dispatcher regarding the X-Forwarded-For HTTP header?
When a client accesses SAP EP via proxy1, proxy2 and Web Dispatcher in
this order, is it guaranteed that the format of the X-Forwarded-For
HTTP header that I can refer at SAP EP becomes the following forms?
X-Forwarded-For: client, proxy1, proxy2
In other words, is it guaranteed by Web Dispatcher that the rightmost
IP address, proxy2 in this example, is the closest downstream client?
thanks in advance.

Hi Jane
I am not sure what exactly are you looking for but the following link is a general doc on administration of web dispatcher.Please see if this helps.
http://help.sap.com/saphelp_nw70/helpdata/en/f5/51c7d170bc4a98b1b5a0339213af57/content.htm
Regards
Chen

Portal and web dispatcher

Similar Messages

Maybe you are looking for