Reverse Proxy issue for domain name

Hi All,
We are in process of implementing reverse proxy to the SAP Portal and web dispatcher.
We given all rewrite rules accordingly, The public IP also resolves the domain name also.
Our domain is etender-aai.aero.
When we given rewrite rule with the public IP reverse proxy is working fine.
But when we given etender-aai.aero in rewrite rule its not working.
Please help me in this.
Thanks & Regards,
Sreekanth

Hi,
If you want help, you'll have to explain clearly what is your configuration and what you want to achieve.
I'm sorry to tell you that I absolutely did not nderstand anything about your problem....
Do you try to publish your SAP Portal externally on the internet ?
Do you use the web dispatcher as a reverse proxy ? or do you add an other reverse proxy (like Apache) in front of the web dispatcher ?
Regards,
Olivier

Similar Messages

Windows 8.1 will not issue a Domain Name Request.

I have a windows 8.1 system that will not issue a Domain Name Request to resolve a simple query such as www.microsoft.com. It works OK in my Windows 7 system on the same computer. I know this is happening because I run the Wireshark packet
trace on each system. Windows 7 issues the request; Windows 8 does not. I can flush the DNS cache with "ipconfig /flushdns, net stop dnscache, net start dnscache". When I try to do email, Thunderbird can't find the server; when
I try to browse the internet, the browser(Opera, Chrome, Mozilla) can't resolver the name. ipconfig /all looks normal. The Domain Name Server is hardwired (8.8.8.8, 8.8.4.4, or 208.67.222.222, 208.67.220.220). Any ideas?

Hi,
If you ping the server with its IP address, could it work? If so, it should be your Windows 8.1 DNS components problem.
When this problem occures? If this problem just occures recently, it would be better to make system restore to revert your system to a former normal time point.
In not, firstly, try to reinstall NIC driver for test. Also check Event Viewer if it identify the problem.
As you said, you run Wireshark Packet. In my opinion, it would be better to run this tool to capture you network communication trace in Windows 8.1. This maybe could help you find the reason of the problem.
In addition, Network Monitor also a good choice to captuer network trace.
Roger Lu
TechNet Community Support

No windows identity for Domain Name\User

I have recently upgraded SharePoint 2013 farm from RTM to SP1. I am repeatedly getting errors No windows
identity for Domain Name\User in ULS log. Some users who was earlier able to access to site is not able to access site.
Please remember to mark the replies as answers or vote as helpful if they help.

Few questions to quickly check with you..
1. Have you re-run your SharePoint Configuration Wizard after you upgraded from RTM to SP1? Its very important to re-run SharePoint Configuration Wizard to ensure SharePoint Config DB is updated with latest changes in the farm.
2. If you have performed the above step but still face issues, have you restarted your SharePoint Server after re-running your SharePoint Configuration Wizard? If not please restart the server.
3. If not anyone of the above, then have you changed your authentication type for your web application in Central Admin. Example, from Classic Authentication to Claim Based Authentication?
Please remember to click 'Mark as Answer' if the reply answers your query or 'Upvote' if it helps you.

Is Reverse Proxy required for Hybrid deployment

Hi everyone,
We plan to deploy a new infrastructure on prem attached to O365.
The aim of this deployment is to create lync meeting on the on prem FE server which will be accessible by O365 Lync users. (FI: these meetings will be created on prem because the customer wants to cascade Lync conference with his Polycom video conferencing
infrastructure).
Some users are homed on-premises and some users are homed online, but the all users share the same SIP domain. Is Reverse Proxy on prem will be required for O365 users to join meetings created on the on-premise FE or the O365 architecture
can handle it?
The only functionality needed is meeting (not mobility). I saw this (https://social.technet.microsoft.com/Forums/en-US/cf4f63f9-355f-475b-8148-608633adfe86/is-reverse-proxy-necessary-for-lync-hybrid-deployment?forum=lyncdeploy) but the functionality asked
are different.
Many thanks for your help.
Thomas

You'll need a reverse proxy on premises to publish the external web services FQDN of your on-premises front end pool. Meet will use this behind the scenes regardless of where it's pointing. If you're hybrid, the DNS URLs should typically point
to your on-premises deployment however anyway:
https://technet.microsoft.com/en-us/library/jj205403%28v=ocs.15%29.aspx?f=255&MSPPError=-2147217396
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

IDM 6.1 Reverse Proxy issue

I would like to get some suggestions on our Reverse Proxy setup for IDM.
We have an instance of IDM running at our company and tried to turn on access to users outside of the company using Reverse Proxy and ran into an issue:
Connecting via the external url returns a page with the base href set to an internal URL
To resolve we did the following:
Currently our internal users get to the IDM server via
https://xxx.internal.com/idm/
External users access the IDM server via the Reverse Proxy server and
https://zzz.company.com/idm/
We Modified:
Waveset.properties
Original:
ui.web.baseHrefURL=
updated to:
ui.web.baseHrefURL=https://zzz.company.com/idm/
With ui.web.baseHrefURL=https://zzz.company.com/idm/ setup, I was able to access IDM from the internet and everything looked good. But that means that when an internal user uses the https://xxx.internal.com/idm/ link it is translated to https://zzz.company.com/idm/ so I think that means that the internal requests are going to be routed to the internet and then back to the internal user.
Is this the wrong way to set up Reverse Proxy? Any suggestions are greatly appreciated.

In a word, don't. The content at /some/path will still think it's deployed at /some/path. Any HTML links, images, or redirects it returns will point to the wrong place when a web browser accesses the content as /VIRTUAL_DIR/some/path.
If you want to access the content as /VIRTUAL_DIR/some/path on the frontend, why not deploy it as /VIRTUAL_DIR/some/path on the backend?

BAPI to reverse Goods Issue for movement type 601

Hi Everyone,
Does anyone know of any BAPI that could be use to reverse Goods Issue for Movement type 601?
I tried using BDC of transaction VL09 and was able to reverse the GI document successfully but the return message type was 'E' with unreadable message -
Tabelle 'E' enth#t keinen Eintrag f# 'Ch 004 &'
When I tried using BAPI_GOODSMVT_CANCEL, I get the error message 'E M7 130 Material document cannot be processed'.
Best Regards,
Junwen

hi, Junwen!
the following code works pretty well:
      fp_vbeln = vbeln_val.
      fp_budat = budat_val.
      fp_tcode = 'VL09'.
      fp_vbtyp = 'J'.
      CALL FUNCTION 'WS_REVERSE_GOODS_ISSUE'
        EXPORTING
          i_vbeln                         = fp_vbeln
          i_budat                         = fp_budat
        I_COUNT                         =
        I_MBLNR                         =
          i_tcode                         = fp_tcode
          i_vbtyp                         = fp_vbtyp
        TABLES
          t_mesg                          = it_mesg
       EXCEPTIONS
         error_reverse_goods_issue       = 1
         OTHERS                          = 2.
luck.

OAM- Apache Reverse Proxy issue when Form Authenticaion is used

Hi All,
Customer is using Apache 2.0.65 as a reverse proxy server. OAM has been integrated with OAS. A WebGate has been installed on OHS in infra.
When a protected resource (portal) is accessed, a login form appears. After entering the correct credentials, it does not go to the resource, instead gives displays some Header Variables on the Browser, instead of actual resource.
This happens only when a resource is protected with Form Authentication Scheme and while using with reverse proxy. The same Form Authentication scheme works without reverse proxy. With Basic LDAP Authentication, the same resource perfectly works even when reverse proxy is used.
Any suggestions?
Thanks in advance.
Regards,
Amol

Hi Amol,
Check the passthrough parameter in your form scheme. If this is set to yes, what you are asking OAM to do is to pass through to the form action instead of the URL the user originally requested. I know this still does not explain why things work when the reverse proxy is not used - but it might make sense if you actually have 2 form schemes and when you access the resource via the reverse proxy, the policy domain/policy in question actually invokes the scheme which has passthrough enabled. You could ascertain this via the access tester by trying the reverse-proxied URL and direct URL.
-Vinod

Reverse Proxy Filter for EP7?

Hi! on
https://websmp208.sap-ag.de/nw-ep-how-to,
we notice an article called:
"How to Configure the Reverse Proxy Filter for SAP Enterprise Portal 6.0 SP2"
Did anyone use the method there to resolve their problems?
If so, would you please share your experience?
We have a question about what code should be put in the web.xml.
Points guaranteed. Thanks!

It appears that the Light Portal Framework in EP 7.0 uses FQDN in the anchors (<A>) on the pages it sends back to the Client Browser (not relative URI's).
This could be a configuration setting somewhere that I missed, however, I would expect the Light Framework to be the best at making sure links are relative.
I would like to explore all options, from making our Reverse Proxy Server handle the filtering to making sure Portal sends back a valid link.
If the Reverse Proxy Filter is not available in EP 7.0, what can I do to replace it's functionality?
Mike

Wrong cert on reverse proxy setup for exchange

i have arr setup, i have runt he setup command as per the recommended sheet
ARRConfig config –cert “path
to the certificate file” –hostnames “host
names for Exchange Server”–targetserver
“server name of Exchange Server”
and this has worked and mail is accessable, the problem is that the cert is not matching for some reason
so i have a cert for remote.domain.co.uk and i have one for mail.domain.co.uk, i used the mail cert for the reverse proxy, i see it bound to the site BUT when i access the remote site i get the remote.domain.co.uk cert as presented, its as if the mail one
is being over ridden and i dont know were
any advise?

In the Exchange Shell can you run,
Get-ExchangeCertificate | select CertificateDomains, Services | FL
This should tell us if the cert is bound correctly on the Exchange Server.
In the Essentials Server, in IIS, do you have a Exchange Proxy website created?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Intel vPro with wired 802.1x issue with domain name

Hello guys,
this issue is may not related to SCCM directly, but intel forums are really poor so i´d like to ask here...
The Case: We are currently provisioning our vPro chips with SCCM SP2 R3 and almost everthing worked as expected (Provisioning OK, OOB Console OK, PowerControl OK even TLS and Kerberos are working. But there is an issue with the 802.1x authentication. It
seems the vPro chips are not using the correct domain name. Lets say our DNS domain name is
vpro.com and the NETBIOS Name is coprvro . There are no child or other domains. vPro chips are presenting now
vpro\COMPUTERNAME$iME instead of vpro.com oder corpvro
so the Radius Server (Windows Server 2008 R2 - NPS) is saying ReasonCode 7 "...domain is not existing...". AuthenticationType and EAP Type are correct. Usually user- and computeraccounts are using
corpvro as domain name.

Hi Dan,
thank you for your reply. I've already done this in the second place using the SDK and winrm ($8021XProfileInstance.GetProperty("Domain")). I've no idea were SCCM is getting this domain name from. Its cutting off the top level domain extension,
may be SCCM is assuming that this equals the NETBIOS domain name but that is not the case. This is only a guess, in detail I need to know in fact on what basis SCCM is choosing the domain name, then i can fix this...
Intels SCS putting the correct NETBIOS domain name in the amt config, used certificates are the same...

SJSWS 7.0 Reverse Proxy Issue

Hi,
I am new here as well as to SJSWS.
We are migrating an Apache reverse proxy to SJSWS 7.0 due to some organisational decisions.
My current RP configuration in Apache on computer1 is as follows and this works great:
<IfModule mod_proxy.c>
<Proxy >
Order deny,allow
Allow from all
</Proxy>
ProxyRequests Off
<Location /abc>
Order deny,allow
Allow from all
ProxyPass [http://computer2/portal]
ProxyPassReverse [http://computer2/portal]
ProxyPassReverseCookiePath /abc /portal
</Location>
</IfModule>
I am trying to configure the same on SJSWS as follows in <vs>-obj.conf :
<Object name="default">
NameTrans fn="map" from="/abc" name="reverse-proxy-/abc" to="http:/portal"
<Object ppath="http:">
Service fn="proxy-retrieve" method="*"*
</Object>
<Object name="reverse-proxy-/abc">
Route fn="set-origin-server" server=http://computer2
</Object>
This above config is not working and from the server logs on computer1 I can see that the subsequent GET requests are failing with example outputs as below:
[02/Jun/2010:12:09:05] warning (28415): for host xx.xx.xx.xx trying to GET /*xyz*/images/yyy.gif;jsessionid=A2E
D385AC9971ED4C4B8D8852F8AE392, send-file reports: HTTP4142: can't find /opt/app/sun/webserver7/https-computer1/docs/*xyz*/images/yyy.gif (File not found)
Seems like the origin server is redirecting to different directories within itself which my reverse proxy config in SJSWS is not able to handle.
Any inputs on what would be the equivalent configuration on SJSWS 7.0 for the config which is working flawlessly on Apache?
Edited by: esselle on Jun 1, 2010 8:14 PM
Edited by: esselle on Jun 1, 2010 8:15 PM

Hi,
The following seems to be working for me (configured on computer1):
NameTrans fn="map" from="/abc" name="reverse-proxy-/abc" to="http:/portal"
<Object ppath="http:*">
Service fn="proxy-retrieve" method="*"
</Object>
<Object name="reverse-proxy-/abc">
Route fn="set-origin-server" server="http://computer2"
</Object>It seems that you have <Object ppath="http:"> instead of <Object ppath="http:***">. Other than that, I can't see anything wrong with your setup.
If the above setup does not work:
Where did you get xyz from in GET /*xyz*/images/yyy.gif;jsessionid=A2E? Could you provide the access logs on both computer1 and computer2?

Windows Intergrated Authentication with reverse proxy issue with Safari

Hi All
I having a application which has Windows Integrated Authentication, for Internet users we are having a reverse proxy which has a IIS server which will authenticate using basic authentication then redirected to the actual application, every thing works as expected in IE and firefox but in safari there is a second login dialog box appears. When I did a packet capture using wireshark I noticed that in IE and FF the basic authentication which is carried forward to the actual application from IIS server but in Safari there is a NTLM negotiation in between because there is a 401 response so my application asks for on more login dialog. Dose any one knows why safari is behaving like this?
Thanks & Regards
Karthikeyan Vaithilingam

I found a related post https://discussions.apple.com/thread/3274071?start=0&tstart=0. There is an issue with basic authentication and Http Redirect.

Configuring Reverse Proxy Nginx for Messenger

We have updated to Messenger 3.0 and are looking to use the Mobile apps. We have a reserve proxy Nginx which we use for WebAccess and have tried to configure this for Messenger.
When I try to connect using a Mobile app (from the Internet) I can see a connection been made in the Messenger Agent logs and then get a failed to connect error:
10:36:12 B70 SPL Login failed [0xD130]: ::xxx.xxx.xxx.xxx - An invalid tag was discovered
My question is
Has anyone used nginx to reverse proxy Messenger successfully and if so how?
And if not, what configuration have they used?
Thanks in advance

johngallagher,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

How to reverse goods issue for delivery note by using IDoc

Hi all,
I would like to reverse goods issue and picking request for delivery note by using inbound IDoc.
I used message type SHPCON and IDoc type DEVLRY03 for posting goods issue in inbound processing and it's work but I couldn't find solution for posting reverse goods issue.
Pls let me know which IDoc type or any ways for posting goods issue reversal and cancelling picking request.
Thanks for your time.
Su R.

Hello,
          For this requirements we can actually follow two Approaches that I can think of. Here they are.
Approach 1
         Little Complex Approach. What we can do is to make use of the Same Function Module (Posting Program) IDOC_INPUT_DELVRY to do the Delivery Updates (Except reversing the Goods Issue). During this, we can make use of one of the Customer Functions available in the Enhancement V55K0001 and satisfy our Requirement.
Approach 2
        We can actually code a Custom Posting Program (Function Module) in which the first part will take care of updating the Delivery & if the PGI is done, then we can make use of the Function Module BAPI_GOODSMVT_CANCEL to reverse the PGI.
        I think the later Approach is much easier rather than going for the Standard Function Module (Posting Program), Exits and find a place where we have to find another Enhancement Spot / Enhancement where we can call the above FM to Cancel the Goods Movement.
Hope these inputs were helpful.
Thanks and Regards,
Venkat Phani Prasad Konduri

Apache reverse proxy setting for access to Backend

Hi experts,
we have set up apache reverse proxy to make available our NW portal (and SRM functions)over the internet.
Our settings look something like this:
ProxyRequests Off
<VirtualHost *:80>
     ServerName myportal.portalhosto.com
     ProxyPreserveHost On
     ProxyPass /irj/ http://myportal.portalhost.com:53200/irj/
     ProxyPass /webdynpro/ http://myportal.postalhost.com:53200/webdynpro/
     ProxyPassReverse /irj/ http://myportal.portalhost.com:53200/irj/
     ProxyPassReverse /webdynpro/ http://myportal.portalhost.com:53200/webdynpro/
     ErrorLog logs/myportal.portalhost.com-error.log
     CustomLog logs/myportal.portalhost.com-custom.log combined
RewriteEngine On
     RewriteRule ^/sap/(.*)$ http://mybackend.backendhost.com:8020/sap/$1 [P,NC]
</VirtualHost>
Problem:
when we access the portal from the internal network(either by using the internal URL or external URL) things work fine.
But we access the portal from internet, we are able to login to the portal and acess all webdynpro Java related applications.But when we try to acess the BSP/WD abap application running on a backend SRM system, we get 'host not found' message with the INTERNAL url of the SRM backend application displayed.
Do we need to expose the SRM backend to the outside world via reverse proxy as well?If yes,how?Do we need to change the system definitions in portal for that?
Any help in resolving this would be greatly appreciated.
regards,
Kiran

Hi,
Do we need to expose the SRM backend to the outside world via reverse proxy as well?If yes,how?Do we need to change the system definitions in portal for that?
Yes , you have to expose your backend system using reverse proxy ...
When user access the portal and when he clicks on BSP/WD , the URL get re-directed to backend system.
But , as your backend system is not expose on internet , you get an error as host not found.
So, to solve your problem you have to expose your backend system on internet. It is in general pratice to expose on internet.
Thanks
Anil

Reverse Proxy issue for domain name

Similar Messages

Maybe you are looking for