Reverse Proxy using TAM webseal - EP7.0 - CE7.1

Our scenario, has two SAP J2EE applications (SAP Portal frontend & CE) with SSO established using SAP Logon Tickets. When we test the SSO by logging into the Portal directly it works fine.
I had earlier raised the issue for not being able to get on to CE by logging through webseal. This part is working fine now.
Next we are trying to set the trust using https(secured layer) by exchanging SSL certs.
If i use https port, and get on to CE from webseal with CE federated on to Portal, on some of the images/gifs i am getting certificate prompt. I tried to implement SAP note 812901/903, but didnt help.
Please advice.
Regards,
Nitin

We are following up with SAP on this and looks like its a development issue in CE.
There are certain instances where the css URL is passed as a form value of hidden field variable which webseal is not able to read.
Regards,
Nitin

Similar Messages

Enterprise portal access using reverse proxy using Apache and webdispatcher

Hi Guys,
As requirement, we need to give solution to customer about Reverse proxy scenario. I am new to this part.
What we have think of to use Apache and Web dispatcher.
I tried to search documents and found some sdn links also but still i am not comfortable to go about.
Need suggestion and document if anyone has used so far.reverse proxy.
As basis person, we need to do all ( Apache installation, Apache configuration, Web dispatcher installation and configuration, integration with EP.)
It will helpful to me if i can get Apache installation, Apache configuration part and integration with EP, or web dispatcher, configuration etc.
Thanks,
Deepak

We used Netscaler for Reverse Proxy implementation and can assure you that network team performed most of the set ups. This was on EP 7.01.
From BASIS stand point it would be primarily Web Dispatcher Configuration.
Also refer the links I specified in another thread. There are several scenarios discussed there -
Re: Post values for userid and passowrd fields in logon page
http://wiki.sdn.sap.com/wiki/display/BSP/Using+Proxies
~ Dhanz

Configure reverse proxy using Apache 2.2.15

Dear Experts,
I am in the process of configuring reverse proxy for my portal so that ppl outside the network can access my servers.
We are on SUSE Linux 10 SP2, installed Apache 2.2.15 and started apache successfully.
When i run command ps -ef | grep httpd, i get list of processes that are running.
But when i open mozilla on the server where i installed apache and type http://myhost.domian.com:8080 it doesnt display any screen.
I still assume that my apache is running. Please correct me on the above.
Now i have configured my httpd.conf based on help.sap.com and various threads on sdn and it looks something like below
====================================================================================================
ProxyPass /irj http://myhost.mydomian.com:50100/irj/
ProxyPassReverse /irj http://myhost.mydomian.com:50100/irj/
ProxyPreserveHost On
#####################################r Reverse Proxy
ProxyRequests off
ProxyPreserveHost On
<VirtualHost 172.XXX.XX.XX:80>
#DocumentRoot Webserver doc root, eg "C:/.../htdocs"
#ServerName <http:// Domain Name eg www.domainA.com >
#ErrorLog logs/Domain.com-error_log
#CustomLog logs/Domain.com-access_log common
(Commented the above lines as i did not understand what i need them for.. please help on the above)
RewriteEngine On
RewriteLog logs/myhost_unsecured_rewrite.log
RewriteLogLevel 9
<Directory />
Options None
AllowOverride None
</Directory>
RewriteRule ^/(.*)$ http://myhost.mydomian.com:50100/$irj1/ NC,P
ProxyPassReverse /irj http://myhost.mydomian.com:50100/
</VirtualHost>
With the above configuration will i be able to acheive my goal of using this server as my reverse proxy and also for redirecting the host name.
Please help me on the above
Thanks and regards
Hunky

If you search for "reverse proxy apache" you'll find quite lots of resources (blogs, articles) here on the SDN.
You may start with
FEATURED EVENTS
Markus

Reverse Proxy using S1AS7 with libpassthrough.so

My second tier is not functionning properly when placed behind a S1AS7 with reverse proxy
Client ====== SunOne web server with Passthrough ====== .NET app server & web services.
The web server configuration (reverse proxy � libpassthrough.so) is configured and is working correctly when it comes to requesting normal pages, however a problem arises when the request is made either by:
1- Invoking a web service on the .Net tier, or
2- The .Net tier performs a server.transfer call within the same .net server (Page transfer)
Keep in mind that the .Net tier works fine when not accessed through the reverse proxy.
We tried to isolate the problem from different angles but came up short, the http server log shows that the request was made
192.168.2.7 - - [14/Jul/2004:14:10:56 +0300] "POST /wavedms2.0/TestWebService/TestService.asmx HTTP/1.1" 100 0
Although response 100 indicates that it is waiting for more, while the web service error shows the following:
The underlying connection was closed: An unexpected error occurred on a receive.
at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at TestWebService.oWebService.MyWebSvc.HelloWorld()
at TestWebService.Form1.button1_Click(Object sender, EventArgs e)
I appreciate any help you can provide us with a solution on this issue.

Thanks a million, yes it is exactly the same
Do you know if this release is available for download / purchase????

Can i setup a secure reverse proxy using sun one web proxy server and windows 2000?

I've tried this on IPlanet Proxy 3.6 and, after reading the documentation, realized that SSL is not supported on the Windows platform. So I'm asking if it is supported using Sun One Web Proxy Server

Hi,
Yes, What you say is right.
"The NT and Windows 2000 versions of iPlanet Web Proxy Server 3.6 do not support SSL".
Sun One Web Proxy Server is as same as iPlanet webproxy server.
May be in future relase of proxy server SSL will be supported in Win2000.
Regards,
Dakshin.
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support.

Reverse proxy using sun one webserver

can any body please tell me the steps to how to use
web server as a proxy server to Applicationserver

is this what you're looking for?
http://www.phptr.com/articles/article.asp?p=16953

Unable to set session in Oracle Portal useing reverse proxy

I have deployed a reverse proxy (using Oracle HTTP Server) in front of a Oracle Portal Install (version 10.1.2.0.2). The steps followed to set this up came from the following documents:
Steps mentioned in Section 9.2 Configuring a Reverse Proxy for OracleAS Portal and OracleAS Single Sign-On for a reverse proxy on a Oracle HTTP Server.
http://download-west.oracle.com/docs/cd/B14099_15/core.1012/b13998/variants.htm#ASTED005
Also performed steps mentioned in -> Section 5.3.7 - Step 7: Enable Session Binding on OracleAS Web Cache of the Oracle® Application Server Portal Configuration Guide 10g Release 2 (10.1.2) -- B14037-03.
My current (example names shown only)setup details are as follows:
Reverse Proxy for SSO server (running on internal.oracle.com:7777): proxy.oracle.com:7777
Reverse Proxy for Portal server (running on internal.oracle.com:7778): proxy.oracle.com:7778
With the above steps completed, I can successfully use the http://proxy.oracle.com:7777/pls/orasso for login into SSO without any issues.
Users get authenticated successfully.
I can also use http://proxy.oracle.com:7778/pls/portal for viewing pages on the portal fine . All self referencing links have also been successfully modified to point to proxy.oracle.com:7778.
However, an attempt to login in the portal is not successful. Clicking on the 'Login' link successfully redirects to the SSO login page (http://proxy.oracle.com:7777/<login-page>). However, after successful authentication, the success page fails to show up and the user gets shown the initial login portal home page again.
There are no error messages shown on the screen.But it seems that user session is failing to be initiated/set correctly, as shown by the log file (in $PORTAL_ORACLE_HOME/j2ee/OC4J_Portal/application-deployments/portal/OC4J_Portal_default_island_1/application.log ):
06/11/21 16:49:31 portal: [module=RepositoryServlet, ecid=83928411196,1] Repository Gateway: LWUser: PUBLIC, Cookie: oracle.uix=0^^GMT+10:00;
portal=9.0.3+en-au+us+AUSTRALIA+22BC75924EEAD8A2E040007F010019F7+8DAC5E3559C95F5E0090A6F56FFA58192CB0F437CA57A9102A6394F1EB7FAB5DEE3BFA12C65
91C0C009B6......
06/11/21 16:49:31 portal: [module=RepositoryServlet, ecid=83928411196,1] ERROR: Repository Gateway error: Database Error: ORA=20001 ORA-20001:
Unable to obtain session information from the cookie. Please close your browser and reconnect.
ORA-06512: at "PORTAL.WPG_SESSION", line 149
ORA-06512: at line 22
Any help with this will be appreciated.
Thanks.

Hi Chris,
The begin of the expection stack gives you the reason:
06/11/03 09:13:59 java.sql.SQLException: The method 'setSavepoint' cant be called when a global transaction is active
The reason is, that either the whole global transaction must be commited or rollbacked.
I don't know your actual configuration, but between the methods begin() and commit()/rollback() of the UserTransaction instance, OC4J/OracleAS uses a global transaction (= XA transaction) in your configuration. The state of a global transactions is completely under the control of the application server and several restrictions must be considered. One of them is, that you can't use the method setSavePoint/. E.g. you can't also call the method setAutoCommit(true) in this state, or change the transaction isolation level via setTransactionIsolation(newLevel).
This is NOT a limitation of the OC4J/OracleAS but is true for ALL application servers.
P.S. I can successfully set savepoints and rollback to savepoints in weblogic 9.0This means, that WebLogic 9.0 doesn't use a global transaction in this case.
Because I don't know your configurations (Oracle and WebLogic) I can't say, why the behave different in this situation.
Best,
Manfred

SMP 3.0 (using Agentry): Requirements for Reverse Proxy

All.
We are in the process of designing our landscape for SMP 3.0, where we will expose Agentry functionality, and are currently looking at the Reverse Proxy technology to use.
From the document
Common Requirements for Reverse Proxies - Landscape Planning and Design - SAP Library
it is stated that any reverse proxy used:
Does not remove any HTTP headers.
Sets a timeout period, if used, that is greater than the timeout used by the clients.
Is this all the requirements that must be fulfilled for a reverse proxy ?
We are looking into installing a common Reverse Proxy technology, that can handle reverse proxy requirements for multiple platforms.
Hence I need to specify the requirements, in relation to SMP, for this technology.
I hope someone can help.
Thanks.
Søren Hansen.

Thanks Bill and Steve.
I got it now - for Agentry support we need WebSockets.
What about everything else on SMP 3.0 ?
From this document:
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/200d7500-2605-3210-9d91-a24cfb6523ba?QuickLink=index&…
it is stated on page 4 that different technologies needs different platforms.
Application          Reverse Proxy
Native                 Apache
Hybrid                 Apache
Agentry               Nginx
MBO                   RelayServer
Is there no one Reverse Proxy platform that can act for all application types in front of SMP 3.0 ?
And what should the entire list of demands be ?
Søren Hansen

SAP Web Dispatcher & Reverse Proxy

Hello,
We are currently using Novell's iChain product for our reverse proxy (RP) to our EP7 Portal which in turn is connected to BW, CRM, & R/3. Can SAP's Web Dispatcher (WD) perform the same RP functions as iChain in this type of scenario?
For example, we have one iChain server which performs RP functions for EP7 which is also connected to BW, CRM, & R/3. We like to replace our iChain product and have been looking at WD. But, it doesn't look like a single WD instance can act as a RP for more than one system at a time. In other words, I setup a test WD system and pointed it at our EP7 system. It works fine for anything coming from EP7. But, for any iviews that point to BW, CRM, or R/3, it doesn't work, which makes sense since there doesn't seem to be anywhere I can define those systems in the WD. But could WD do this and I'm just not reading the documentation correctly? (Yes, I have been all over help.sap.com in regards to WD)
I did find the following SAP note, 740234, that discusses this to an extent, but it is mostly about load balancing across disparate systems, not RP functionality across disparate systems. Thus, I'm not sure this applies. Assuming this note is correct from a RP viewpoint, can I just run multiple WDs all on the same standalone system? Also, if that is the case, how is it that when I call a BW iView from the Portal, it knows to go through the other WD setup on that system?
Bottom line is, does/will SAP's WD perform the same functions as iChain or should we be looking elsewhere?
Hope that all made sense!
Thanks,
Tom

Hello Benny,
For the sake of simplicity, lets say I have a portal called 'ABC' and a BW system called 'XYZ'. So, to access the portal directly, without going through the iChain RP, I would enter http://abc.company.com/ but going through the RP, I would enter something like http://MyPortal.company.com/ and iChain knows it should direct the traffic to ABC.
In the portal, I have a XYZ defined in the System Landscape. Then in the portal, I create an iView that uses the BW system defined in the System Landscape.
Again, without going through the RP, if I click on the XYZ iView in the portal, it connects to XYZ to get whatever info it needs from XYZ and presents it back, through the portal. But, the URL behind that iView, goes to http://xyz.company.com. But, if I do all the same things, this time going through the RP, it understands that it needs to be the RP for both ABC and XYZ and acts accordingly.
Does that make more sense? Can WD also act in this fashion? As far as user management goes, that is done with LDAP.
Thanks,
Tom

IC WebClient - Apache Reverse Proxy

Hi,
We are working on CRM 5.0. I have configured the apache reverse proxy to work with EP7.0. All the iviews from the portal are working fine except the IC webclient. When the user clicks on the IC Webclient tab, it displays a blank window as 'Loading' and doesn't do anything. At the left bottom of the screen, i do see a javascript error. Double click on the error opens a window with the error description as 'Invalid argument' and the url is
http://crq.vm.com/sap(bD1lbiZjPTAxMCZkPW1pbiZpPTEmcz1TSUQlM2FBTk9OJTNhc2FwY3JxMDBfQ1JRXzAwJTNhdlEtSDRHeFU1R0d6WGtUZ0daTjE3cmtrWTZqSjVFUEZRSWljWWc4cS1BVFQ=)/bc/bsp/sap/ic_base/default.htm?sap-tray-type=PLAIN&sap-tray-padding=X&sap_ep_version=7%2e00%2e200707191011&sap_ep_baseurl=http%3a%2f%2fepq%2evm%2ecom%3a80%2firj%2fportal
Please let me know if anyone knows how to resolve this issue.
Thanks,
VSingh!!

Did you resolve this issue? There is this note.
Note 651435 - Cannot run applets on Sun JVM 1.4.x with proxy server

Error in reverse proxy

Hi,
I'm following the pdf to create a reverse proxy using Netweaver Studio. However, I receive errors in the java code.
"Implicit super constructor HttpServletRequestWrapper is undefined for default constructor. Must define an explicit constructor.
Implicit super constructor HttpServletResponseWrapper is undefined for default constructor. Must define an explicit constructor.
The constructor RequestWrapper(HttpServletRequest) is undefined.
The constructor ResponseWrapper(HttpServletRequest, HttpServletResponse) is undefined.
Any ideas?
Regards,
Jin Bae

Hi,
The ResponseWrapper inherits from HttpServletResponseWrapper
http://java.sun.com/j2ee/sdk_1.3/techdocs/api/javax/servlet/http/HttpServletResponseWrapper.html
which has one constructor, namely
HttpServletResponseWrapper(HttpServletResponse response)
So the correct code should be
ServletResponse sResponse = new ResponseWrapper((HttpServletResponse)response);
Cheers
Dagfinn

Reverse Proxy

Hi,
Does it make sense to use a reverse proxy in the scenario below ?
I am trying to access a web based internal application (ports not opened up to the outside world) through a reverse proxy using the Oracle HTTP server that is installed with OAS 10.1.2.
My aim would be that I would be able to access the web based application through my Portal from the outside world without having to open up the ports. The Portal is available to the outside world and the web based app runs on a difference machine.
Is this possible or am I taking an incorrect approach ?
Thanks,
Message was edited by:
user535862
Message was edited by:
user535862

You can use a reverse proxy in this scenario. Web Cache will also be able to fulfill that role.

Apache Reverse Proxy to 2 ITS Hosts

We have two systems that we want to hit from the internet via reverse proxy. One is an ECC 6.0 system and the other CRM 5.0. The ITS for these systems is the Integrated ITS:
ECC sytem:
http://ecc.system.com:8001/sap/bc/gui/its/sap/webgui
CRM sytem:
http://crm.system.com:8001/sap/bc/gui/its/sap/webgui
The issue is how would I reverse proxy to both ITS from the Apache proxy server

I am trying to configure Reverse proxy using Apache. My scenario is: EP is the from=ntend where users will login and then will call the ITS from ECC on portal iView. I am able to reach to portal and access it however, when I am trying to call ITS through Apache I am getting 404. This is because the URL(hostname as well) for ecc system is different. I have tried using ReWrite rules but bot able to resolve the issue. I ahave gone through SDN and tried most the configurations and scenarios. I guess I lack the understanding on url ReWriting rule. Kindly find the httpd file content pasted below and send in your comments.
httpd content
ServerName <IP of my Apache server:80>
CanonicalName
UseCanonicalName off
ProxyVia on
ProxyTimeout 600
ProxyRequests off
ProxyPreserveHost on
NameVirtualHost <IP of my Apache server:80>
<VirtualHost <IP of my Apache server:80>>
ServerName portal.mycompany.com:80
RewriteEngine On
#RewriteRule ^sap(.)/bc/gui/sap/its/webgui(.) http://eccserver.mycompany.com/sap$0 [L]
#ReWriteRule ^/(/public/.*)$ http://eccserver.mycompany.com/sap$1 [L]
##ReWriteRule ^/(sap/public.*)$ http://eccserver.mycompany.com/sap$1 [P]
ReWriteRule ^/sap(.*)$ http://eccserver.mycompany.com/sap$1 [P]
RewriteLog logs/rewrite.log
RewriteLogLevel 3
ProxyPass /irj http://portal.mycompany.com/irj
ProxyPassReverse /irj http://mydomain.mycompany.com/irj
ProxyPass /sap http://eccserver.mycompany.com:80/sap
ProxyPassReverse /sap http://mydomain.mycompany.com:80/sap
</VirtualHost>
Note: mydomain.mycompany.com is the url whcich hits Apache from external as well as internal network. Apache is in DMZ and my EP and ECC is in LAN.
Regards
Rahat

Problem on Setting up a Reverse Proxy on Web Proxy Server 4.0.1

After you setup a reverse proxy using Web Proxy Server 4.0.1, if you get the following error --
Proxy denies fulfilling the request
Your client is not allowed to access the requested object.You probably forget to add a regular mapping from: / to: http://http.site.com/. The information provided in 4.0.1 Administration guide is misleading. You will have to add it NOW manually. (Note: in 3.6 it will be added automaticly)
You will have to do the following step manually, what provided in the manual is misleading --
Sun Java� System Web Proxy Server 4 .0.1 Administration Guide 2005Q4
Chapter 14 Using a Reverse Proxy
"Setting up a Reverse Proxy"
5. To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional
mappings. To see the mappings, click the link called View/Edit Mappings.
Additional mappings would be in the following format:
from: /
to: http://http.site.com/

thanks, will verify and update the docs.
rahul.

DMZ with reverse proxy

Hi All,
I am trying to configure DMZ.
But I am having only one node for apache.
So I thought of configuring DMZ using Reverse Proxy with no External node.
But I am bit confused with configuration of Reverse Proxy using the apache shipped with E-business
My current archecture like:
Node 1 : Apache ,Forms and MWA
Node 2 : CM and DB
OS : AIX 5.3
Version : 11.5.10.2
DB : 10.2.0.4
1.Will there be 2 apache process running as applmgr on node1(one for external and other for internal)
2.Will there be 2 context files in node1 (one for external and other for internale)
3.How to configure 2 Server name for node1
Thanks in advance

Hi,
Did you review (Note: 438744.1 - Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - 11i)?
Regards,
Hussein

Reverse Proxy using TAM webseal - EP7.0 - CE7.1

Similar Messages

Maybe you are looking for