SSL and webcache on defaut https port

I have followed the note 338071.1 to configure Discoverer 10g (10.1.2) Plus/Viewer For HTTPS (SSL) Access.
Now I can access to the OEM in https, only if I put the port 4446
https://checlas01:4446/
If I use https://checlas01 the server return an error message (No Response from Application Web Server)
The port 443 is setted in the webcache to redirect website with port numer 4446 (As described in the howto)
What's wrong ?
Thx

When you try to access https://checlas01 then this assumes that there is something listening on port 80 for this. Try if https://checlas01:443 works, if so then your webcache is probable working as you set it up. To access https://checlas01, you will have to set up a virtual server which is accessible under port 80 and also add the site and the site to server mapping in the web cache.

Similar Messages

Mail port number won't hold. Received instructions from Comporium to change port number to 465, SSL checked and password required. Now port reverts to 110 when quitting mail and reopening.

OS X Yosemite on MacBook. Mail port number will not hold. Changed mail account info as instructed by Comporium, including changing port to 465, use SSL and password. Now the port reverts to 110 when Mail app is closed and reopened; the entered port number - 465 - will not hold.

OK folks, I think we have a winner.
I finally got frustrated so I sponsored a conference call with a Palm Level 3 tech support guy, the Telus rep and a Bell rep. We were on hold for a total of like 45 minutes as I chained the call along and finally got everyone on the same line.
So here's the deal: The setup has to be done manually as thepoet suggested. The incoming server is OK as imap and imap.telus.net with no encryption. The outgoing server has to be set to point to mail.1xbell.ca with NO authentication, port 25 and no encryption. The initial Bell tech support guy was quite close to the solution, just the wrong port number and the wrong sequence of setting it up.
I have been able to send successfully, but want to try a couple of more things before I declare it a complete success.
Thanks for your help Poet, much appreciate your persistance.

Webservice call failed during execution (SSL and certificates) on NetWeaver 7.30

Hey experts,
i need your help!
We make webservice calls to sap me with our own software.
We connect to our software via SSL and certificates e.g. https://host:50001/XMII/CM/POD/MEDialogsWeb.irpt
At the beginning the software runs without any problems and than we become the following message on all our webservice:
thats the webservice configurations
(configuration - connectivity - single service administration):
(configuration - security - authentication and single sign-on)
if we restart the software after the error display, the webservice call runs successfully again.
is it a timeout?
can anybody help us?
Thanks,
Markus
our system info:
NetWeaver 7.30 Java
SAP ME 6.0
software runs log looks as following
software doesn't runs log looks as following
security Log Entry
more info from security_00.0.log
#2.0 #2014 06 06 14:51:17:136#+0200#Warning#/System/Security/WS#
com.sap.ASJ.wssec.020142#BC-ESI-WS-JAV-RT#tc~sec~wssec~service#C0000A650AD826FF0000000100000BEC#3855850000000005#sap.com/me~ws#com.sap.engine.services.wssec.authentication#Guest#0##207092CAED7111E3A01A0000003AD5EA#23386e31ed7911e39d560000003ad5ea#23386e31ed7911e39d560000003ad5ea#0#Thread[HTTP Worker [@648881277],5,Dedicated_Application_Thread]#Plain##
Received unsupported callback: com.sap.engine.interfaces.security.auth.SetLogonTicketCallback
Received unsupported callback: com.sap.engine.lib.security.http.HttpSetterCallback
Read data of type username and value MEFLEX from wsse:Security header and set on module javax.security.auth.callback.NameCallback
Read data of type username and value from HTTP header and set on module javax.security.auth.callback.NameCallback
Read data of type password and value xxx from wsse:Security header and set on module javax.security.auth.callback.PasswordCallback
Read data of type password and value xxx from HTTP header and set on module javax.security.auth.callback.PasswordCallback
Authentication for web service ShopOrderService, configuration ShopOrderService using security policy BASIC*SSO2*_*_*ws failed: Cannot authenticate the user.. (See SAP Note 880896 for further info).

Hi,
the authentication for the second call is failing. Have you tried suggest log level from note 880896 - Web Service authentication failure? I would also try to use something like SoapUI to test if the issue is caused by your application or something wrong on SAP side. Also coparing messages for the first and second calls might give you answer.
Cheers

ABAP and Java HTTP Port same - PI 7.1 EHP1

Hi,
I have installed PI 7.1 EHP1 system.
I realize that both ABAP and Java HTTP Ports are same.
Is there any official note reg this or any info from SAP on the change.
icm/server_port_0 = PROT=HTTP,PORT=51500,TIMEOUT=60,PROCTIMEOUT=600
icm/HTTP/j2ee_0 = PREFIX=/,HOST=localhost,CONN=0-500,PORT=5$$00
Thanks,
Tanuj

Hi,
>>I realize that both ABAP and Java HTTP Ports are same.
the changed happened in 7.1 already as far as I remember
but I don't think it's documented anywhere except maybe the installation guide
Regards,
Michal Krawczyk

WWSAPI - Cannot connect to web service via SSL and HTTP proxy authentication with NTLM, errorCode 0x803d0016, HTTP status 407

Hi,
I built a web service client using WWSAPI. The connection works via SSL (without HTTP proxy) and it works with SSL and proxy with basic authentication as well. When I try to connect using a proxy with NTLM authentication, then I get the errorCode
0x803d0016, HTTP status "407 (0x197)", "Proxy Authentication Required".
In WireShark I see only one HTTP request to connect to the proxy with NTLM Message Type: NTLMSSP_NEGOTIATE. The HTTP Response returns Status 407 and the connection ist closed. Comparing this to Internet Explorer - the Connection is not closed and
a second request with NTLMSSP_AUTH is sent.
Why doesn't it make the complete NTLM handshake? Why wasn't sent the NTLMSSP_AUTH directly?
I oriented in the HttpCalculatorWithKerberosOverSslClientExample.
Using WS_HTTP_HEADER_AUTH_SECURITY_BINDING,
WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_SCHEME was set to WS_HTTP_HEADER_AUTH_SCHEME_NTLM, WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_TARGET to WS_HTTP_HEADER_AUTH_TARGET_PROXY. I tried WS_DEFAULT_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE but also WS_STRING_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE.
Any idea?
Thanks

Hi,
I built a web service client using WWSAPI. The connection works via SSL (without HTTP proxy) and it works with SSL and proxy with basic authentication as well. When I try to connect using a proxy with NTLM authentication, then I get the errorCode
0x803d0016, HTTP status "407 (0x197)", "Proxy Authentication Required".
In WireShark I see only one HTTP request to connect to the proxy with NTLM Message Type: NTLMSSP_NEGOTIATE. The HTTP Response returns Status 407 and the connection ist closed. Comparing this to Internet Explorer - the Connection is not closed and
a second request with NTLMSSP_AUTH is sent.
Why doesn't it make the complete NTLM handshake? Why wasn't sent the NTLMSSP_AUTH directly?
I oriented in the HttpCalculatorWithKerberosOverSslClientExample.
Using WS_HTTP_HEADER_AUTH_SECURITY_BINDING,
WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_SCHEME was set to WS_HTTP_HEADER_AUTH_SCHEME_NTLM, WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_TARGET to WS_HTTP_HEADER_AUTH_TARGET_PROXY. I tried WS_DEFAULT_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE but also WS_STRING_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE.
Any idea?
Thanks

Error handling problem with outbound idoc status 02 and XML HTTP Port

I set up an ALE scenario to send master data out of SAP via an XML HTTP port. All goes well until the idoc receives error 02.
It looks like idocs in this error status with the use of an XML HTTP port can not be reprocessed via the standard SAP techniques. Program RBDAGAIN takes them out of the list for reprocessing (even though the connection is back up and running).
Is there any solution to still use the standard ALE error handling ?

Hi Karin,
Looks like based on note 701597, you can only reprocess these idocs manually via a workitem. I qouted the relevant text below:
3. Error handling with status '02':
An HTTP IDoc in status '02' should not automatically be sent once again.
Up to now, the RBDAGAIN report was used to resend incorrect IDocs.
However, this report was adjusted and now deletes all IDocs in status 02
to be routed to a HTTP port from the list of selected IDocs. IDocs to a
HTTP port in status '02' should only be sent manually via a work item.
Regards:
Rex

Delete or disable ssl and https on exchange web url

Hi,
I disable by clear check box on Default Web Site --> SSL Settiings --> Require SSL
and also inseret my domain name example: http://mail.myexchange.com/owa in Exchange admin center Console --> Servers --> Virtual Directory --> owa
and also i change <add key="UseHttpsForWacUrl" value="true" /> to <add key="UseHttpsForWacUrl" value="false" /> in C:\Program Files\Microsoft\Exchange
Server\V15\ClientAccess\Owa\web
But, after this steps for removing https on my url i can use it. and after loggin in https mode i can delete https on my url manually but did't work good and i get this error when i want see my email body "Error: Your
request can't be completed right now. Please try again later."

Hi S.Ali,
Have you restarted IIS after changing all the settings?
If not, please try to restart iis and check again.
Best regards,
Niko Cheng
TechNet Community Support

Two http ports - one in 8080 and the other one in 3034 - How to remove 8080

Hi!
I have two http ports - one in 8080 and the other one in 3034 - How to remove 8080.
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<ip address>)(PORT=<port number>)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<hotname>)(PORT=3034))(Presentation=HTTP)(Session=RAW))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<hotname>)(PORT=2102))(Presentation=FTP)(Session=RAW))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=<hotname>)(PORT=8080))(Presentation=HTTP)(Session=RAW))
Services Summary...

You get check which is the current dedicated HTTP port by using DBMS_XDB.getHTTPPort(). There can be only HTTP port active per database (not taken into account the HTTPs one). If two or more exists than there is still a process claiming that port (in this case 8080). It will be cleaned up after one or more processes are not claiming that port again. New connections will be redirected to the new port.

Difference between the abap stack http port and the java http port

Hello,
Is there a difference if a call a webservice in the SAP PI via the abap http port or the java http port?
For abap it is:
http://pi.host.de:8035/sap/xi/engine?type=entry
For java:
http://pi.host.de:53500/XISOAPAdapter/MessageServlet?
Is it technical the same?
Which is your prefered port and why?
Thank you
Best regards,
Nils Kloth

Hi,
I found the blog
Using the SOAP inbound channel of the Integration Engine
So the main differences are:
Advantage
When you send SOAP messages directly to the Integration Server, you reduce the message load on the adapter engine. This can improve the performance.
Restrictions
The SOAP inbound channel of the Integration Server does not support attachments. SOAP messages with content type "multipart" are rejected.
Nils

SSL and 9IAS

I have a server that is a J2EE and Webcache installation.
I want to take the default cirtual host on port 4443 and do two things:
1) change the port to 443
2) have the host stop using the Wallet file and use a standard SSL Certificate key and file from
direcotries that I specify
What I have done:
-generated the key and self-signed cert using openssl.
-edited the httpd.conf file and located the virtual host in the SSL section and:
1) Commented out all the SSLWallet stuff
2) Added the SSLCertificateFile and SSLCertificateKeyFile paths and filenames
- Stopped the HTTP server from OEM website
- Started the HTTP server from OEM website
When I try to go to https://myhost:443/ I get "Page not found"
When I put the httpd.conf file back to the Wallet stuff and comment out my lines, it works again!
Any ideas?
Jason

Please explain further. I am having major problems with webcache with SSL.
Whenever I point to this default directory "D:\portal\webcache\wallets\default" SSL Portal works yet when I point to my directroy with my real certificates it fails.
Each directory has file called ewallet.p12 in it. I tried to rename one and put both within one directory. I have have the cwallet.sso file in the directory but I still can't seem to get it working.
Is the system default location where webcache is looking for the certicates or is the location that wallet manager is using?

Access to HTTPS port failed

Hi
Access to Https port failed after changing the Keystore to "Custom Identity and Trust". I have generated the identity and trust certificates and placed the path info with passphrase.
I have also set my SSL private key alias name to the key name generated during private key.
But still it doesn't work.
Any suggestions?
Thanks,
KR

Hi
Access to Https port failed after changing the Keystore to "Custom Identity and Trust". I have generated the identity and trust certificates and placed the path info with passphrase.
I have also set my SSL private key alias name to the key name generated during private key.
But still it doesn't work.
Any suggestions?
Thanks,
KR

HTTPS port not activated on non-central Advanced Adapter Engine

Hello,
we have upgraded our non-central adapter engine from XI 3.0 to 7.1 EHP1.
Before, we were using port 58201 (5<InstanceID>01) for HTTPS and it was working fine. On the new system, the port 58201 isn't active, which I've checked with 'telnet <host> 58201'.
On XI 3.0, the port could be configured in the Visual Admin -> SSL Provider, but I don't find the corresponding setting in NWA.
I've already checked miscellaneous SAP notes (856597, 891877,...), HowTo-Guides and Blogs, but didn't find any hint...
Any idea, where I could edit the HTTPS port in NWA of the non-central adapter engine?
Thanks,
Juergen

Hello,
I didn't get access to ExchangeProfile over URL http://<host>:<port>/exchangeProfile and didn't find the settings in NWA.
Reason was the missing CryptoLibrary as discribed on http://help.sap.com/saphelp_nwpi711/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
Regards,
Juergen

How to enable HTTPS Port in abap system

Hello All,
Hope all are doing great,can any one please tell me the procedure step by step how can i enable https port in my only abap system,is it required to enable ssl also for this?..
Regards,
Syed

Hi,
For enabling the HTTPS port you need to do alot many things
At first change the para meters in Rz10
icm/server_port_0 - PROT=HTTPS, PORT=1443, TIMEOUT=900
icm/HTTPS/verify_client - 1
ms/server_port_0 - PROT=HTTPS, PORT=1443
SE80 - Utilities > Settings > Internet Transaction Sevrer = HTTPS
and also check SMICM under Services HTTPS is not showing as Active
and still if you are facing any issue with the port check with the network team/firewall team whether any port is being blocked on the network/firewall.
Regards
Mohammed nizam

Unable to FInd HTTPS port in SMICM

Hi,
I'am trying to work on HTTPS .When i check on SMICM->Goto->Services i'am unable to find HTTPS service.
I did all this steps
1. From SAPGUI, run rz10
2. Add the parameter such as "PROT=HTTPS, PORT=443, TIMEOUT=9000" for icm/server_port_3.
You may use smcim->goto->parameters->display to check how many icm/server_port_<xx> already been defined and use next integer.
3. Save and activate the changes
4. Shutdown SAP system
5. go to c:\usr\sap\<sid>\SYS\profile, copy the changes from default.pfl to default.
6. Start SAP system.
but still i'am unable to find HTTPS service in SMICM.
Please guide me how to create this service.
With Regards,
Pradeep.B

ERROR => DlLoadLib()==DLENOACCESS - dlopen("/usr/sap/HRQ/SYS/exe/run/libsapcrypto.so") FAILED
.1: icman: fatal: /usr/sap/HRQ/SYS/exe/run/libsapcrypto.so: open failed: No such file or directory" [dlux_mt.c 445]
ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/HRQ/SYS/exe/run/libsapcrypto.so" [ssslsecu_mt. 387]
ERROR => Loading of SSL library failed NO SSL available!
=================================================
<<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND
ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]
ERROR => IcmHandleMonServMsg: IcmActivateService failed for 8443, 2(rc=-14) [icxxmsg_mt.c 1872]
Fri Apr 30 04:55:45 2010
Am getting the above error when activating HTTPS service in SMICM, please help

How to configure http ports in AS Java 7.1 EHP1 ?

Hi all,
how can I create a new http port on AS Java 7.1 EHP 1 ?
I can't find this in nwa.
In AS Java 6.40 I use Visual Admin - Dispatcher - Services - http provider and then I can create many ports
( like (Port:50000,Type:http)(Port:50001,Type:ssl)(Port:80,Type:http) )
Thanks
Sven

Hi all,
thanks a lot for the answers:
@Patrick Whitty:
Whit your answer I've found the right docs in nwce711 and now I can solve my problem.
Many thanks.
@Fan Yu:
Sorry, maybe my thread was misinterpretative. I've installed Sap Netweaver CE 7.1 EHP1
Also many thanks for your answers. Future I will describe much more better.
@rkandy:
We have this option on our 6.40 systems (I have also in my local installation)
In Visual Admin -> Cluster -> Dispatcher -> Http Provider -> Propertie "ports"
I can send you a screenshot.
Regards,
Sven

SSL and webcache on defaut https port

Similar Messages

Maybe you are looking for