Web Dispatcher - abort with a core

Hello all,
i have install a Web Dispatcher Version 7.00.7 for load balancing of a portal withe Central Instance and a Dialog Instance.
The Web Dispacther is coming up without problems. After nearly one day - the Web Dispatcher is down. In the share /usr/sap/W26/W00/work i found alwasy a core.
Have you an idea?
dev_webdisp:
trc file: "dev_webdisp", trc level: 1, release: "700"
sysno      00
sid        W26
systemid   324 (IBM RS/6000 with AIX)
relno      7000
patchlevel 0
patchno    49
intno      20050900
make:      multithreaded, ASCII, 64 bit, optimized
pid        3903658
[Thr 01] Fri Jan 19 14:08:40 2007
[Thr 01] *** WARNING => maximum number of sockets supported on this
host (8195) less than parameter icm/max_sockets (16384) [icxxrout_mt. 2737]
[Thr 01] started security log to file dev_icm_sec
[Thr 01] SAP Web Dispatcher running on: rcjus049.cja.roche.com
[Thr 01] MtxInit: 30001 0 2
[Thr 01] IcmInit: listening to admin port: 64999
[Thr 01] WARNING: MPI Pipe 2 still in use 0 0 1 1
[Thr 01] WARNING: MPI Pipe 0 still in use 0 0 1 1
[Thr 515] *** WARNING => HttpPlugInInit: Parameter icm/trust_client_with_issuer or icm/trust_client_with_subject not set => do not trust any intermediary
X.509 cert data will be removed from header [http_plgrt_m 670]
[Thr 515] HttpSubHandlerAdd: Added handler HttpRedirectHandler(slot=0, flags=4098) for /:0
[Thr 515] HttpExtractArchive: files from archive /usr/sap/W26/SYS/exe/run/wdispadmin.SAR in directory /usr/sap/W26/data/icmanroot are up to date
[Thr 515] HttpSubHandlerAdd: Added handler HttpAdminHandler(slot=1, flags=4101) for /sap/admin:0
[Thr 515] CsiInit(): Initializing the Content Scan Interface
[Thr 515]            IBM RS/6000 with AIX (mt,ascii,SAP_CHAR/size_t/void* = 8/64/64)
[Thr 515] CsiInit(): CSA_LIB = "/usr/sap/W26/SYS/exe/run/libsapcsa.o"
[Thr 515] HttpSubHandlerAdd: Added handler HttpAuthHandler(slot=2, flags=12293) for /:0
[Thr 515] HttpSubHandlerAdd: Added handler HttpWebDispHandler(slot=3, flags=28677) for /:0
[Thr 515] Started service 8100 for protocol HTTP on host "rcjus049.cja.roche.com"(on all adapters) (processing timeout=1200, keep_alive_timeout=30)
[Thr 01] IcmCreateWorkerThreads: created worker thread 0
[Thr 01] IcmCreateWorkerThreads: created worker thread 1
[Thr 01] IcmCreateWorkerThreads: created worker thread 99
[Thr 26473] IcmWatchDogThread: watchdog started
[Thr 12595] Sun Jan 21 17:05:04 2007
[Thr 12595] *** ERROR => NiPConnect: SiConnect failed for hdl 8 / sock 12
        (SI_ECONN_REFUSE; I4; ST; 194.147.45.40:8142) [nixxi.cpp    2454]
[Thr 12595] *** ERROR => Connection request from (-1/65535/0) to host: rcjus049.cja.roche.com, service: 8142 failed (NIECONN_REFUSED) [icxxconn_mt.
c 2731]
[Thr 12595] *** ERROR => IcmConnClientRqCreate() failed (rc=-8) [icrxx_mt.c   4885]
[Thr 12595] *** ERROR => Could not connect to SAP Message Server at rcjus049.cja.roche.com. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   2269]
[Thr 12595] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   2270]
[Thr 12595] *** ERROR => see also OSS note 552286 [icrxx_mt.c   2271]
[Thr 12852] Sun Jan 21 17:07:04 2007
[Thr 12852] *** ERROR => NiPConnect: SiConnect failed for hdl 8 / sock 12
        (SI_ECONN_REFUSE; I4; ST; 194.147.45.40:8142) [nixxi.cpp    2454]
[Thr 12852] *** ERROR => Connection request from (-1/65535/0) to host: rcjus049.cja.roche.com, service: 8142 failed (NIECONN_REFUSED) [icxxconn_mt.
c 2731]
[Thr 12852] *** ERROR => IcmConnClientRqCreate() failed (rc=-8) [icrxx_mt.c   4885]
[Thr 12852] *** ERROR => Could not connect to SAP Message Server at rcjus049.cja.roche.com. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   2269]
[Thr 12852] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   2270]
[Thr 12852] *** ERROR => see also OSS note 552286 [icrxx_mt.c   2271]
[Thr 13109] Sun Jan 21 17:09:04 2007
[Thr 13109] *** ERROR => NiPConnect: SiConnect failed for hdl 8 / sock 12
        (SI_ECONN_REFUSE; I4; ST; 194.147.45.40:8142) [nixxi.cpp    2454]
[Thr 13109] *** ERROR => Connection request from (-1/65535/0) to host: rcjus049.cja.roche.com, service: 8142 failed (NIECONN_REFUSED) [icxxconn_mt.
c 2731]
[Thr 13109] *** ERROR => IcmConnClientRqCreate() failed (rc=-8) [icrxx_mt.c   4885]
[Thr 13109] *** ERROR => Could not connect to SAP Message Server at rcjus049.cja.roche.com. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   2269]
[Thr 13109] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   2270]
[Thr 13109] *** ERROR => see also OSS note 552286 [icrxx_mt.c   2271]
[Thr 13366] Sun Jan 21 17:11:04 2007
[Thr 13366] *** ERROR => NiPConnect: SiConnect failed for hdl 8 / sock 12
        (SI_ECONN_REFUSE; I4; ST; 194.147.45.40:8142) [nixxi.cpp    2454]
[Thr 13366] *** ERROR => Connection request from (-1/65535/0) to host: rcjus049.cja.roche.com, service: 8142 failed (NIECONN_REFUSED) [icxxconn_mt.
c 2731]
[Thr 13366] *** ERROR => IcmConnClientRqCreate() failed (rc=-8) [icrxx_mt.c   4885]
[Thr 13366] *** ERROR => Could not connect to SAP Message Server at rcjus049.cja.roche.com. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   2269]
[Thr 13366] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   2270]
[Thr 13366] *** ERROR => see also OSS note 552286 [icrxx_mt.c   2271]
[Thr 13623] Sun Jan 21 17:13:04 2007
[Thr 13623] *** ERROR => NiPConnect: SiConnect failed for hdl 8 / sock 12
        (SI_ECONN_REFUSE; I4; ST; 194.147.45.40:8142) [nixxi.cpp    2454]
[Thr 13623] *** ERROR => Connection request from (-1/65535/0) to host: rcjus049.cja.roche.com, service: 8142 failed (NIECONN_REFUSED) [icxxconn_mt.
c 2731]
[Thr 13623] *** ERROR => IcmConnClientRqCreate() failed (rc=-8) [icrxx_mt.c   4885]
[Thr 13623] *** ERROR => Could not connect to SAP Message Server at rcjus049.cja.roche.com. URL=/msgserver/text/logon?version=1.2 [icrxx_mt.c   2269]
[Thr 13623] *** ERROR => rc=-1, HTTP response code: 0 [icrxx_mt.c   2270]
[Thr 13623] *** ERROR => see also OSS note 552286 [icrxx_mt.c   2271]
[Thr 13366] Mon Jan 22 12:20:39 2007
[Thr 13366] *** ERROR => PlugInHandleNetData: server: premature EOS (0/0) in request [http_plgrt_m 1927]
[Thr 14651] Mon Jan 22 12:20:57 2007
[Thr 14651] *** ERROR => illegal request version [http_plgrt_mt.c 4596]
[Thr 14651] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 14908] Mon Jan 22 12:20:58 2007
[Thr 14908] *** ERROR => Error in HTTP Request: 9 [http_plgrt_mt.c 4538]
[Thr 14908] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 15679] *** ERROR => Error in HTTP Request: 9 [http_plgrt_mt.c 4538]
[Thr 15679] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 15936] *** ERROR => illegal path specified [http_plgrt_mt.c 3743]
[Thr 16193] *** ERROR => host headerfield not set for HTTP/1.1 [http_plgrt_mt.c 4644]
[Thr 16193] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 17735] Mon Jan 22 12:20:59 2007
[Thr 17735] *** ERROR => illegal path specified [http_plgrt_mt.c 3743]
[Thr 18249] Mon Jan 22 12:21:00 2007
[Thr 18249] *** ERROR => illegal request version [http_plgrt_mt.c 4596]
[Thr 18249] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 18506] *** ERROR => illegal request version [http_plgrt_mt.c 4596]
[Thr 18506] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
[Thr 19020] *** ERROR => Error in HTTP Request: 9 [http_plgrt_mt.c 4538]
[Thr 19020] *** ERROR => PlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2136]
Thank you!!!

Mate,
Just found one note for you. Please chk it
https://websmp105.sap-ag.de/~form/handler?_APP=01100107900000000342&_EVENT=REDIR&_NNUM=824554&_NLANG=E
Its related to the error u got in logs
Cheers
Arun

Similar Messages

Cluster Web Dispatcher together with CI in MSCS?

I need to provide HA for Web Dispatcher by clustering in MSCS. My plan is to share the MSCS of the CI it is connecting to. The CI (ASCS and SCS) is already installed in cluster with all proper shared resources (disk, global share, services, ip, netname, etc.) My question is whether I should or need to create a separate cluster group for the WD or if it would be easier/better to install in same shared disk as CI? I have been referring to SAP Note 834184 regarding the manual install of the WD in MSCS and have run into an issue because of the global share of the CI. Currently the WD is installed on its own shared disk (with directory structure), and its own netname and IP. When starting it is trying to access the SAPMNT share of it's host, which is successful (as the hostnames and ip are really just virtual resources of the cluster), but the directory path it tries to access on the share is not correct because the share is really for the shared disk of the CI and not that of the WD.
Does anyone have a recommended method of clustering the WD in an existing SAP MSCS cluster? It seems that the Note referenced above was not written with this in mind. However, due to the very low resource needs of the WD, I think it would be fairly common to cluster it with an existing installation or the msg server it is serving. My next thought is to install the WD on the same shared disk and cluster group as the CI and allow it to fail over with the CI so it will access the proper sapmnt file share, but I'm not sure if this is the recommended or best practice for this type of scenario.
Thank you for any input on this and I would be happy to provide any futher details of my configuration.
thanks,
John

John,
First, lets clarify the confusion: CI is not where your ASCS and SCS are installed.
"The system consists of two instances: a Java central instance with SDM, and the Central Services instance"
http://help.sap.com/saphelp_nw04s/helpdata/en/43/1af03eae11e16be10000000a114084/frameset.htm
(A)SCS - "(ABAP) SAP Central Services", consists of Message Server and Enqueue Server, resides in a cluster group of MSCS
CI - "Central Instance" - Dispatcher, Server Processes and SDM. Not part of cluster group, resides on C: drive (your case).
Now to the point:
It is absolutely OK to install your Web Dispatcher on the cluster group of your (A)SCS.
You can use shared drive as a location for the Web Dispatcher and PFL file.
In this case you do not need to do step "6. Register the SAP Events DLL in registry" from note 834184.
During the failover, Web Dispatcher comes up properly on the target node.
Let me know if you need step by step instructions.
I can send you screenshots for the install.
Regards,
Slava

Web Dispatcher with Windows Intgrated Authentication

Hello,
We are setting up the relay of Browser ==> IISProxy ==> Web Dispatcher ==> Cluster. We plan to use Windows Integrated Authentication and terminate the SSL connection at the IIS. We are wondering how smoothly this will go as we have read differences in the order between IISProxy and WebDispatcher (in these forums) and have found nothing on the combination with SSL. I assume that the IISProxy will encrypt, authenticate, provide the cookie and then forward the request to the Web Dispatcher for further routing to the cluster.
Needless to say, has anyone done this successfully? Can anyone provide information, warnings, caveats, etc... so that we can decide to use the Web Dispatcher or another software-based NLB solution. We understand the technical benefits - especially in an SAP shop, but if there are richer features for authentication in latter releases we may consider putting it on hold and going with a known solution.
We have seen some appliances that can perform the SSL termination, 3rd party authentication, etc, etc,... are there any plans for the Web Dispatcher to be able to perform the authentication with windows (NTLM or Kerberos)?
All of the other features are grat and a breeze to work with however authentication on the MS domain is a must here and it may be the missing functionality.
Thanks and kind regards,
Judson

Hi Judson,
currently there is no plan to enhance web dispatcher into that direction. Instead we started to work together with network technology providers to offer the funtcionality of web dispatcher together with additional security and authentication stuff.
network is not our business, so there are no plans to boldly go into that direction. Because of that such combinations like authentication with wd are sometimes hard to do.
If you want a tip for the future I'd say, what you will see is boxes that have everything in there and two plugs for the internet and the sap network -everything else (firewalls, authentication, load balancing with automatic recognition of the sap cluster) would be in the box.
Regards,
Benny

Web Dispatcher Versions

I currently have 2 web dispatchers that are NW 701. All of my systems that we are looking to use web dispatcher(s) with are also NW701. I can't seem to find a PAM entry for web dispatcher. Is their any version requirements around web dispatcher and systems they connect to? I saw a sme article about web dispatcher 7.2 and using it with multiple network aliases to redirect users to multiple hosts. I.e. one webdispatcher could service both ECC and portal hosts. I believe to do the samething in web dispatcher 701 you have to use url prefixes, or run multiple web dispatchers.
Is Web dispatcher a case where it always makes sense to get the newest version when implementing? Or does it need to match the systems you connect to?
Thanks, Pat

Hi Olivier,
I aam trying to upgrade Web Dispatcher from 701 to 7.20 on Windows box. I downloaded the file "sapwebdisp_73-10007272.sar" from the marketplace. When I unpacked this SAR file it created "servicehttp" folder also I found "wdispadmin.SAR" I also unpacked this file then it created a folder called "admin". In the admin I found 4 folders called, icp, public, publicicp and publicincl.
Instead of icmadm.sar now it is only "wdispadmin.SAR".
Now I started the Web Dispatcher but the webadmin UI does not work correctly. Like I cannot put the web dispatcher in the maintenance mode, I cannot see this screen there is an error called
"unhandled exceptions: "
"ICP_StructValue: illegal struct reference: icm_info.uptime"
"ICP_StructValue: illegal struct reference: icm_serv_info.aclfile"
"ICP_StructValue: illegal struct reference: icm_user_info.locked"
"ICP_Value: Illegal type: 7"
I checked for any related notes, I found 1484856. In the note it said
The follwoing ICP files are not delivered in wdispadmin.sar.
- wdisp_add_system.icp
- icpdef.inc
Therefore the ICM/Webdispatcher Admin UI does not work correctly.
When I clicked the download it takes me to the page called "NO DATA AVAILABLE".
Did you have any of this errors? Meanwhile I have opened an ticket with SAP for this.
Please let me know if you have come across this error.
Thanks in Advance
Ramesh.

Urgent web dispatcher problem

Hello, dear experts!
We try to set up a new web dispatcher for SAP WAS cluster (6.40 PatchLevel 87289.311) which is all done accoding to the help info.
However we can't use it as everytime I hit the Web Disp URL I am getting this error:
500 Dispatching Error
Dispatching Error
Error:     -26
Version:     6040
Component:     HTTP_ROUTE
Date/Time:     Fri Oct 28 12:46:55 2005
Module:     http_route.c
Line:     2351
Server:     nrxqa8__00
Detail:     no valid destination server available for '!ALL' rc=13
     © 2001-2003, SAP AG
The web dispatcher profile we created is :
1. Profile generated by sapwebdisp bootstrap
SAPSYSTEMNAME = QA8
1. unique instance number
SAPSYSTEM = 03
1. Accesssability of Message Servers
rdisp/mshost = nrxqa8.NRXTOR.WORLD
ms/http_port = 3602
1. SAP Web Dispatcher Parameter
wdisp/auto_refresh = 120
wdisp/max_servers = 100
1. SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=55555
1. SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/wdisp/admin,DOCROOT=./admin
1. Description of the Resource
icm/min_threads         = 20
icm/max_threads         = 40
icm/max_conn            = 500
1. Communication Buffer
mpi/total_size_MB       = 100
mpi/buffer_size         = 65536
I really appreciate if you could help us with it... Any suggestions are welcome!
Thanks a lot!

Hello Yuri,
have you setup the web dispatcher profile with the command:
sapwebdisp -bootstrap
? It would have tested the connection to the message server. I think the message server port is wrong. If your instance numer is 02 then the default HTTP message server port is 8102 and not 3602. 3602 is the port of the SAP own protocol.
Regards
Gregor

Non-central adapter engine setup with web dispatcher

Our PI setup is working perfectly in our private zone, now the requirement is to expose our PI to public zone to do our B2B transactions. We have proposed a solution but I need your expert suggestion on this. Solution proposed
Public Zone -|Semi public zone| Semi private zone |----Private zone
|>>>Application gateway >>>>>>>>| Non-Central Advanced<==========>|------ PI 7.1
|>>>(For Inbound message) >>>>>>| Engine (For both Inbound and<=====>|------(IS, central AAE, IE)
|<<<<< Proxy<<<<<<<<<<<<<<<<<<|Outbound message and<==========>|
|<<<<<For outbound)<<<<<<<<<<<<|Load balancing for B2B)<=========>|
Non-central AAE will be in semi private DMZ. It will send/receive all B2B messages from/to semi public DMZ via Application gateway for inbound messages and proxy for outbound messages.
Then Non-central AAE will work with the PI central instance running in Private DMZ to receive and send messages.
My Questions:
1) Do we need a SAP web dispatcher to work in between (Application gateway, Proxy) and (Non-central AAE)   ?
    My understanding: SAP web dispatcher balances the load which will enhance the performance but it is not mandatory. Non-central AAE can work independently with Application gateway and Proxy to receive and send messages.
2) What is the configuration we need at non-central AAE to exchange messages with the application gateway and proxy?
Thanks
Amaresh

what is use of non central Adapter engine in Java server proxy?
The collaboration profile agreement service (CPA service) does not read the CPA cache from the Integration Directory.
You define the user that is to send the messages to the Integration Server in a service parameter. When the Integration Server receives the message with this user, it checks the user using the access control list. This check is not performed for the technical user XIAFUSER.
pls refer below link:
http://help.sap.com/saphelp_nw73/helpdata/en/48/d7fb415ba90783e10000000a42189d/frameset.htm

Problem with Web Dispatcher with Double Stack

We have the latest version of Web Dispatcher - 7.0 with latest patch.
I'm having a problem where I am trying to use the web dispatcher for load balancing in a double stack (ABAP/JAVA) system. The person who did the install pointed the installation to the wrong server (which I assume can be easily changed in the profile). However, on the page where it indicates to activate the SICF services he left the box unchecked (but I checked that necessary ones were activated per note 552286). I now get these kind of errors when pointing to the http message server on a different system (he installed it assuming it was just for portal (java):
[Thr 5] *** ERROR => ICP_StructValue: illegal struct reference: wdisp_host_info.capacityIsFi
xed [icpvalue_mt. 257]
[Thr 5] *** ERROR => caught ICP exception (eval): ICP_StructValue: illegal struct reference:
wdisp_host_info.capacityIsFixed [icpvalue_mt.cpp 257] [http_adm_mt. 1488]
I get the above error when I go to "monitor server" groups in the web dispatcher admin console.
Here is my profile:
SAPSYSTEMNAME = PW4
SAPSYSTEM = 01
INSTANCE_NAME = W01
DIR_CT_RUN = $(DIR_EXE_ROOT)/run
DIR_EXECUTABLE = $(DIR_CT_RUN)
Accesssability of Message Server
rdisp/mshost = <fully qualified hostname>
ms/http_port = 8101
Configuration for medium scenario
icm/max_conn = 500
icm/max_sockets = 1024
icm/req_queue_len = 500
icm/min_threads = 10
icm/max_threads = 50
mpi/total_size_MB = 80
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=81$$
Any insight is greatly appreciated!!

Hi,
I've never seen this error but some thing seems strange to me :
You use the same port (8101) for the listening port of the web dispatcher and the listening port of the message server of you back office system.
Is it really the case ?
Is PW4 the SID of you web disptcher ?
Is SAPSYSTEM = 01 the sysnr of your web dispatcher ?
I hope that the info of the web disptcher is not mixed up with the back office info ?
Regards,
Olivier

SAP Netweaver 7.0 Web Dispatcher HA Setup with Sun Cluster 3.2

Hi,
How to HA SAP web dispatcher, which is not mentioned in the guide 'Sun Cluster Data Service for SAP Web Application Server Guide for Solaris OS'.
Since I do not want to install central instance within the cluster, should I install two standalone web dispatcers within the two nodes, and then HA it? Or maybe just install it on the shared storage with CFS once?
And specifically, what kind of resource type should I use for it? SUNW.sapwebas?
Thanks in advance,
Stephen

Hi all.
I am having a similar issue with a Sun Cluster 3.2 and SAP 7.0
Scenrio:
Central Instance (not incluster) : Started on one node
Dialog Instance (not in cluster): Started on the other node
When I create the resource for SUNW.sap_as like
clrs create --g sap-rg -t SUNW.sap_as .....etc etc
in the /var/adm/messages I got lots of WAITING FOR DISPACHER TO COME UP....
Then after timeout it gives up.
Any clue? What does is try to connect or waiting for? I hve notest that it's something before the startup script....
TIA

SSL Re-encryption with Portal and Web Dispatcher: certificate expired

Hello,
I am trying to set up HTTPS connection to the Portal through SAP Web Dispatcher. We are using SSL Re-encryption. I think I got everything set up correctly. When trying to access through a Web browser the web dispatcher trace file shows error message 'certificate expired'. Looking at the Portal (Visual admin - Keystore) I am pretty sure it is the service-ssl with localhost. It is expired. Two questions:
- is it correct that it uses localhost or am I missing anything?
- How would I recreate the certificate? (I am sure it is somewhere in the Online documentation, but haven't found it yet). Can I do this while the Portal is productive without breaking the normal access (http) to the Portal. This is our Production portal.
Thanks,
Ingrid

Hi,
Go thru the contents of SAP Note,
685306 -Enabling SSL and renewing the J2EE certificate
And also the help contents in,
http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm
These might of some help to you !
Regards
Srinivasan T

Issues with our SSL connection to the Web dispatcher

HI Alle,
I having issues with our SSL connection to the Web dispatcher with SAP Web AS. Below is the error in the log files form dev_webdisp:
Started service 80 for protocol HTTP on host "wdpeht1"(on all adapters) (processing timeout=120, keep_alive_timeout=30)
[Thr 368] =================================================
[Thr 368] = SSL Initialization on PC with Windows NT
[Thr 368] =   (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
[Thr 368]   profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
[Thr 368]   profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 368] =   found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe
[Thr 368] =   current UserID: WDPEHT1\SAPServiceWDP
[Thr 368] =   found SECUDIR environment variable
[Thr 368] =   using SECUDIR=E:\usr\sap\WDP\W00\sec
[Thr 368] * ERROR =>   secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" not found! [ssslsecu.c   1354]
[Thr 368] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --
secude_error 4129 (0x00001021) = "The PSE does not exist"*
[Thr 368] >> -
Begin of Secude-SSL Errorstack -
>>
[Thr 368] ERROR in SSL_CTX_set_default_pse_by_name: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in ssl_set_pse: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in af_open: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in secsw_open: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in secsw_open_pse_or_extension: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in sec_get_PSEtype: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 368] << -
End of Secude-SSL Errorstack -
[Thr 368] * ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" [ssslxxi.c    2278]*
[Thr 368]* ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 368] =================================================
[Thr 368] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR*
[Thr 368] *** ERROR => IcmAddService: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   319]
[Thr 2128] IcmCreateWorkerThreads: created worker thread 0
Regards

Hi Olivier,
Thanks for replay,
The PSE does exist in my SEC "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" .
I did tried Again I get this error. I think I missing som parameter
= SSL Initialization on PC with Windows NT
[Thr 2292] =   (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
[Thr 2292]   profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
[Thr 2292]   profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 2292] =   found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe
[Thr 2292] =   current UserID: WDPEHT1\SAPServiceWDP
[Thr 2292] =   found SECUDIR environment variable
[Thr 2292] =   using SECUDIR=E:\usr\sap\WDP\W00\sec
[Thr 2292] -*ERROR =>   secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" not found! [ssslsecu.c   1354]
[Thr 2292] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --
secude_error 1281 (0x00000501) = "open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned"*-
[Thr 2292] >> -
Begin of Secude-SSL Errorstack -
>>
[Thr 2292] -*ERROR in SSL_CTX_set_default_pse_by_name: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"*-
-*ERROR in ssl_set_pse: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in af_open: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"*-
ERROR in secsw_open: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in secsw_open_pse_or_extension: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in sec_get_PSEtype: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in aux_read_PSEFile: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in aux_file2OctetString: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
[Thr 2292] << -
End of Secude-SSL Errorstack -
[Thr 2292] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" [ssslxxi.c    2278]
[Thr 2292] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 2292] =================================================
[Thr 2292] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR
[Thr 2292] *** ERROR => IcmAddService: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   319]
Her is my profile parameter for https.
h6*#Https parameters for Web dispatcher E:\usr\sap\WDP\W00\sec
#icm/server_port_0 = PROT=HTTPS,PORT=443$$
DIR_INSTANCE = E:\usr\sap\WDP\W00\sec
ssl/ssl_lib = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
ssl/server_pse = E:\usr\sap\WDP\W00\sec\SAPSSL.pse
wdisp/ssl_cred = E:\usr\sap\WDP\W00\sec\SAPSSL.pse
ssf/ssfapi_lib = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
sec/libsapsecu = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
ssf/name = SAPSECULIB
wdisp/ssl_encrypt = 0
icm/server_port_1=PROT=HTTPS, PORT=8400, TIMEOUT=120
###icm/server_port_1=PROT=HTTPS, PORT=44302, TIMEOUT=900 (old)
########icm/server_port_0 = PROT=HTTP,PORT=80, TIMEOUT=120
icm/HTTPS/verify_client=0
wdisp/add_client_protocol_header = true
wdisp/auto_refresh = 120
wdisp/max_servers = 100
wdisp/ssl_auth= 0
ms/https_port = 8400
wdisp/HTTP/use_pool_for_new_conn=1
wdisp/HTTPS/dest_logon_group = HTTPS
#wdisp/server_info_protocol = https
#wdisp/group_info_protocol = https
#wdisp/url_map_protocol = https
wdisp/ssl_ignore_host_mismatch = fals
icm/HTTPS/forward_ccert_as_header = true
icm/HTTPS/trust_client_with_issuer = CN = SAP CA,*
icm/HTTPS/trust_client_with_subject = CN = sapwebdisp,*h6
Regards

Remote Connection to SAP with SAP Web Dispatcher

Dear Experts,
i have installed a SAP Router + SAP ECC 6.0 IDES + SAP Portal 7.0 + SAP Solution Manager 7.0. The remote connection works.
SAP Router is in a DMZ
SAP ECC 6.0 IDES + SAP Portal 7.0 + SAP Solution Manager 7.0 are in another network only for SAP Systems
Fo security reason, i would like to install a SAP Webdispatcher with the SAP Router's Server.
I already:
have extracted the icmadmin.sar file
have executed the sapwebdisp -bootstrap command
have started the web dispatcher with sapwebdisp pf=sapwebdisp.pfl
have activated /sap/public/icman and /sap/public/icf_info/* services inthe SAP Solution Manager
As the saprouttab file for the saprouter, i would like to establish the connection to SAP withe the SAP WebDispatcher.
My questions are:
What are the parameters i have to put in the sapwebdisp.pfl file?
Do i have to create the PERMFILE and the AUTHFILE?
Any example of profil file? (another than the SAP Library example)
Thank you very much for your help in advance.
Best regards.
Pascal Tran.
PS: Here is the sapwebdisp.pfl file
Profile generated by sapwebdisp bootstrap
unique instance number
SAPSYSTEM = 50
add default directory settings
DIR_EXECUTABLE = .
DIR_INSTANCE = .
Accessibility of Message Servers
rdisp/mshost = <Solution_Manager_hostanme>
rdisp/msserv = sapms<Solution_Manager_SID>
ms/http_port = 81<Solution_Manager_Instance_Number>
SAP Web Dispatcher Parameter
wdisp/auto_refresh = 120
wdisp/max_servers = 100
wdisp/shm_attach_mode = 6
configuration for default scenario (medium size)
icm/max_conn      = 500
icm/max_sockets   = 1024
icm/req_queue_len = 500
icm/min_threads   = 10
icm/max_threads   = 50
mpi/total_size_MB = 80
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 500
wdisp/HTTPS/max_pooled_con = 500
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=8050
SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/wdisp/admin,DOCROOT=./admin,AUTHFILE=icmauth.txt
Hostname per default
icm/host_name_full = <SAP_Router_Hostname>

Hello,
The two important paramters are covered in your profile.
Accessibility of Message Servers
rdisp/mshost = <Solution_Manager_hostanme>
rdisp/msserv = sapms<Solution_Manager_SID>
ms/http_port = 81<Solution_Manager_Instance_Number>
And the port on which your webdispatcher listens from outside world.
icm/server_port_0 = PROT=HTTP,PORT=8050
For additional security you can use the https port also.
I dont think you need to maintain any other file manually.
I had configured web dispatcher but for 640 stack. It should be more or less the same.
An example file sapwebdisp.pfl
Profile generated by sapwebdisp bootstrap
unique instance number
SAPSYSTEM = 1
Accessibility of Message Servers
rdisp/mshost = <hostname>
ms/http_port = 8101
ms/https_port = 8005
SAP Web Dispatcher Parameter
wdisp/auto_refresh = 120
wdisp/max_servers = 100
wdisp/shm_attach_mode = 6
configuration for default scenario (medium size)
icm/max_conn      = 500
icm/max_sockets   = 1024
icm/req_queue_len = 500
icm/min_threads   = 10
icm/max_threads   = 50
mpi/total_size_MB = 80
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 500
wdisp/HTTPS/max_pooled_con = 500
wdisp/shm_attach_mode = 6
SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTPS,PORT=1443
icm/server_port_1 = PROT=HTTP,PORT=1081
icm/HTTPS/verify_client = 0
SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/wdisp/admin,DOCROOT=./admin
DIR_INSTANCE = C:\Secudir
ssl/ssl_lib = C:\Secudir\sapcrypto.dll
ssl/server_pse= C:\Secudir\SAPSSLS.pse
wdisp/ssl_cred = SAPSSLS.pse

Accessing portal server with virtual host via web dispatcher

Hi,
I have portal installed at http://hostname.com:50000. A web dispatcher is installed in front of it which uses port number 80 and redirects to http://hosname.com:50000.
so when i say http://hostname, my web dispatcher redirects to http://hostname.com:50000/ from where i can access my portal.
now I want to create an alias for my hostname, say when user types http://mydev, it should redirect to http://hostname.company.com thru webdispatcher.
so i created virtual host for my portal server . how to use this in my virtual hosts in my webdispatcher.
I have already gone throug this..
http://help.sap.com/saphelp_erp2005/helpdata/en/fe/cda776f2f64d5287c614b2f715c25f/frameset.htm
would be great if some one can help me in this regard.
Thank you
P.S: I dont want to create a DNS alias with name mydev, then i think virtual host concept doesnt make sense, atleast in java engines..which has different concept in SAP systems.

HI Jacob,
Thank you for the reply.. I am little bit confused.could you please clarify the followint to me.
My requirement is when user types "http://epdev", it should redirect to http://hostname.company.com:50000
1. To do that, according to what you said, I will create a DNS alias epdev to the IP address where my portal is hosted. so when the user types http://epdev, I have set up a parameter in web dispatcher profile to redirect to http://hostname.company.com:50000/.. so my requirement is fulfilled now..I hope this the correct proc for what I intended to achieve. am I right?
2. As said above, I am using web dispatcher only for redirection to a fully qualified name, as portal requires as fully qualified domain name. Is there a possibility other than web dispatcher for redirection.
3. if the above procedure works, I got a question like..what is the use of "virtual hosts".
How is it different from creating for instance, creating as many DNS aliases to IP address.
Although, it was explained at http://help.sap.com/saphelp_erp2005/helpdata/en/0b/fbf5a47928f84e8d0beba8371508e6/frameset.htm
I didnt clearly understand it.
I would really appreciate, if you could clarify these to me.
Thank you

Web Dispatcher - Current HTTP Sessions with decimals?

Hi,
looking at the statistics of our CurrentHTTPSessions of our three servers in the Web Dispatcher I was wondering how it is possible to get decimals (for example we have on one server 10,33 CurrentHTTPSessions)? As far as I understood the round-robin algorithm is used with sticky sessions but for my understanding decimals does not make sense.
I hope you can help me with this question.
Regards,
Timo

Hi Mercedes,
thank you very much for the quick response.
I guess for the productive environmentI will install 2 'old fashioned' Web Dispatchers because Note 908097 says that 7.20 is not released with SAP Release 7.00. But in a test environment I will try 7.20!
Regards
Martina

Error when configuring Web Dispatcher for SSL with Enterprise Portal

We are in the process of configuring the Web Dispatcher using SSL to connect to our Enterprise Portal (the Web Dispatcher will be in the DMZ). We have followed all of the help.sap.com guides and now have SSL listening on the EP side (port 8103). We are now receiving this strange certificate error when we start the Web Dispatcher:
[Thr 5332] Tue Mar 20 00:36:23 2007
[Thr 5332]   MatchTargetName("<FULLY QUALIFIED HOSTNAME>", "CN=XXX, OU=XXX, O=XXXX, C=XX") FAILS
[Thr 5332]   SSL socket: local=<IPADDRESS>:4742 peer=<IPADDRESS>:8103
[Thr 5332] <<- ERROR: SapSSLSessionStart(sssl_hdl=009D7670)==SSSLERR_SERVER_CERT_MISMATCH
[Thr 5332] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH [icxxconn.c 2005]
[Thr 5332] *** ERROR => IcmConnClientRqCreate() failed (rc=-14) [icrxx.c      4919]
[Thr 5332] *** ERROR => Could not connect to SAP Message Server at <FULLY QUALIFIED HOST NAME>. URL=/msgserver/text/logon?version=1.2 [icrxx.c      2301]
[Thr 5332] *** ERROR => rc=-1, HTTP response code: 0 [icrxx.c      2302]
[Thr 5332] *** ERROR => see also OSS note 552286 [icrxx.c      2303]
We have gone through the trouble shooting note 552286 as listed in the error above. Any assistance is appreciated.

Hello, did you receive any resolution for this problem? We are receiving a similar error and I am unsure of how to resolve.

Retrieving ServerHost and ServerPort in Server with Web Dispatcher

Hi,
I am using IWDRequest to get server host and port in my Web Dynpro DC.
This is the code which I am using for it.
IWDRequest req = WDProtocolAdapter.getProtocolAdapter().getRequestObject();
String l_str_host = req.getServerName();
int l_int_port = req.getServerPort();
In our NW landscape, some servers have Web Dispatcher for load balancing purpose. Hence in this case, what would I get in l_str_host, l_int_port ?
I need them to prepare KM URL to a specific location.
Thanks and regards,
Amey Mogare

Hi,
I finally managed to achieve it through following :-
IURLGeneratorService ug = (IURLGeneratorService)ResourceFactory.getInstance().getServiceFactory().getService(IServiceTypesConst.URLGENERATOR_SERVICE);
l_str_kmurl = ug.getAbsoluteUri(PathKey.CONTENT_ACCESS_PATH).toExternalForm()

Web Dispatcher - abort with a core

Similar Messages

Maybe you are looking for