Web proxy 3.6 SP5 installation steps

Hi there,
During iWPS installation, there is a step where we specify the LDAP server. This should be entered as ldap://<hostname>:<port>/<base dinstinguished name>
1. How can i know the base dinstinguished name. Is it the root dn (dc=acme,dc=com)?
2. the very next step is to enter the user ID and password of the SuiteSpot Administratorwho can access the directory server at ldap://<hostname>:<port>/<base dinstinguished name>.
To my surprise, the admin user was rejected saying that the userID and password are invalid (the exact response is ERROR:Invalid user ID and password. Please re-enter.
Press any key to continue.)
I had to create a user under dc=acme,dc=com and use this user instead of admin. The installation went fine. Why it didn't work with the admin user. I am sure that the password is right.
Thank you in advance

Hi,
You need to enter the Base Distinguished Name. (The Base Distinguished Name is the directory under which all relevant user and group information is stored.)
To answer the second question,
the user name password you enter should be a valid user which should already exist in the LDAP. When you enable ACLs, and everytime the proxy tries to access the ldap, it uses the username password supplied by you at the installation time. If you want to create users in the LDAP through proxy's admin interface, he username that you enter should have some admistrative previliges on the LDAP.
Regards,
Nagendra HK

Similar Messages

Why won't Web Proxy Admin Service start on Win Server 2008 installation?

Hi,
I've just installed Sun Web Proxy 4.0.13 on my Windows Server 2008 box. I cannot get "Sun Java System Web Proxy Server 4.0.13 Administration Server" to start, it fails with the following event messages:
In Application logs i get:
"+The description for Event ID 26 from source c__sun_proxyserver40_proxy-admserv_config cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.+
+If the event originated on another computer, the display information had to be saved with the event.+
+The following information was included with the event:+
+File C:\Sun\ProxyServer40\proxy-admserv\config/server.xml, line 8, column 8: Unknown element 'SERVER'+
+the message resource is present but the message is not found in the string/message table+"
...and....
"+The description for Event ID 26 from source c__sun_proxyserver40_proxy-admserv_config cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.+
+If the event originated on another computer, the display information had to be saved with the event.+
+The following information was included with the event:+
+File C:\Sun\ProxyServer40\proxy-admserv\config/server.xml, line 8, column 8: Unknown element 'SERVER'+
+the message resource is present but the message is not found in the string/message table+"
Any help would be greatly appreciated. I have JRE 6.0u18 installed, and pointed the install to use that directory for the JRE home.
Many thanks, Mark
P.S. the proxy server service starts fine, it's just the admin service that won't start....

Hello,
Could you please copy the model.mdf and modellog.ldf from
C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\Templates
To
C:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\DATA
Rebuilding the system databases you will lose lose logins, jobs, SSIS packages. You may have to restore or attach user databases.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Steps to enable Web Proxy for https

I have an S160 WSA and want to enable the Web service for http and https. I am using transparent mode with WCCP.
This is part of the router configuration:
ACL:
access-list 110 permit tcp 192.168.80.0 0.0.7.255 any eq 80
access-list 120 permit tcp 192.168.80.0 0.0.7.255 any eq 443
ip wccp 97 redirect-list 110
ip wccp 98 redirect-list 120
interface FastEthernet0/0.380
ip wccp 97 redirect in
ip wccp 98 redirect in
It is the same configuration for http and for https, but only http traffic is working. When I see the logs in the WSA, it looks like accepted connections for https.
In Security Services -> Web Proxy it is enabled, when I put the port 443, I get an https error in the end user laptop; when I dont, it keeps trying and I get a timeout.
I tried enabling https proxy but some sites (as gmail), wont work with self-generated certificates.
Would you please, list me the steps to enable Proxy services for https.
Thanks!!!
Sergio L.

Hi Sergio,
When WSA is configured as transparent proxy, it also accepts explitcit connections. So in order to test HTTPS proxy, you can configure client browser to explicitly use WSA as proxy and see if it is working before testing in transparent mode.
When WSA is used as HTTPS proxy, it uses its self-generated certificate to encrypt the connection between itself and the client browser. Since this certificate is not trusted by browser, it'll throw SSL certificate error when connecting via WSA. In order to get rid of this error, download the self-generated certificate from WSA and install it in your browser as a trusted certificate. That should resolve SSL issue with gmail also.
Hope this helps.
Thanks,
Chetan

Routing problem with Web Proxy Server SP5 on AIX

I downloaded Sun Java System Web Proxy Server 3.6 Service Pack 5 and loaded it onto an AIX v4.3.3 server. Everything is configured correctly, and the server and admin functions start clean.
This server has two interfaces. One is an INSIDE interface that points toward our network. The other is an OUTSIDE interface pointed toward the Internet. When a user uses the proxy server, he queries the INSIDE interface at port 8080. At that point, the proxy server should contact the destination web address using the OUTSIDE interface on port 80. However,
a firewall log shows that the request that should be coming from the OUTSIDE is really originating from the INSIDE.
My routing table looks OK, but I wanted to prove it. So on the proxy server, at command line, I ran a ping and traceroute to www.sun.com. The firewall log showed that the attempts were correctly coming from the OUTSIDE interface. Yet, at my PC, I try to go to the www.sun.com from a browser, and the log shows that it is coming from the INSIDE.
Does anyone know why the port 80 relays are going out the wrong way?
Thanks to all in advance.
Bill

This also happens on Solaris. Suspect they are performing raw IP connections - and not paying particular attention to the server routing tables.

Sun Java Web Proxy Server Routing to another Proxy Server

hello every body
i have installed Sun java web proxy server and we are get internet services from anotyher proxy server.
how route SOCKS (Ports) to another proxy server)
I mean 8080 web browsing is ok but my socks applicaiton like outlook is not working. how to Route my Sun Java Web proxy Server Socks Server to another Proxy Server.
Please reply
best regards
Aamir Mughal
[email protected]

Dear ahmad@bzu,
I suspect that your download is corrupted. Check the file size ( for me it shows up 89,328KB(and the installation went smooth). So a possible solution should be to download again and try the installation.

NW PI Post Installation steps

Hello All,
I have installed a dual stack PI system and performing post installation steps for PI AS Java. In configuration tasks After completing NetWeaver initial setup with skipped steps I was progressing to next step to configure NW PI - AS ABAP in All Configuration Tasks-->NW PI - AS ABAP (Basic Configuration for Idoc, Proxy Maintain) but I couldn't find this option.
I have updated system, patches, cim etc still I couldnt find the above option, Please advise where I went wrong.
Thanks
Sam

Hi,
What is the pi version?
The steps differs from version to version . Like 7.1 and 7.3 are not exactly same. Can you check in the installation guide for the pi specific post steps for your version .
Regards,
Amit.

XI Post installation steps

Hi,
I'm trying to get XI going at a project. The basis guys have installed the server but I have an idea none of the 'post installation steps' have been completed.
The symptoms are that when I start the Integration Builder (SXMB_IFR) the Windows 'File Explorer' is started and not IE. The Integration Web page is not displayed.
I quickly looked at the Configuration guide and I see none of the RFC destinations mentioned in the guide.
Is this the reason for the problem ?. I need to know exactly what totell the basis people to look at. They have never done an XI installation before so I'm almost sure they have not done these configuration steps.
Thanks
Andre

Hi Andre,
They should look at the intallation/configuration guides that SAP provides. These guides can be found at the service.sap.com and/or help.sap.com
In a nutshell you have to make sure they have configured:
SLD settings, these involves configuring RFC destinations, Maintain the SLD parameters in SLDAPICUST.
Register, Starting up the queues. Configure the role of the integration server in trx SXMB_ADM or SXMB_ADMIN.
Hope this helps.
Cheers,
Roberto
Message was edited by: Roberto Viana

Configuring authentication in web proxy server

We are using iPlanet Web Proxy Server 3.6 on WindowsNT 4.0
After installation of iplanet web proxy server 3.6, and making a request for internet access through browser it does not ask for authentication. There is no pop up window received for user name password to authenticate users.
Upon creating a group and then adding a few members (user1,user2,user3 etc.) to it, we configure rules to restrict user access to internet in the Global settings tab. After saving all the configuration and taking a restart of the proxy server, when we try to log on to internet from a
different client machine (browser) using an existing user id and password, it does not prompt us for user name and password even though the option "restrict access" in global setting is properly set.
My first question......
=>DOES iPlanet Web Proxy allow for such authentication pop up ??
=> If Yes, then kindly let us know where we have gone wrong in configuring the server.
We are NOT using any webserver or LDAP to authenticate users. No SSL is enabled.
Please suggest.

We are using iPlanet Web Proxy Server 3.6 on WindowsNT 4.0
After installation of iplanet web proxy server 3.6, and making a request for internet access through browser it does not ask for authentication. There is no pop up window received for user name password to authenticate users.
Upon creating a group and then adding a few members (user1,user2,user3 etc.) to it, we configure rules to restrict user access to internet in the Global settings tab. After saving all the configuration and taking a restart of the proxy server, when we try to log on to internet from a
different client machine (browser) using an existing user id and password, it does not prompt us for user name and password even though the option "restrict access" in global setting is properly set.
My first question......
=>DOES iPlanet Web Proxy allow for such authentication pop up ??
=> If Yes, then kindly let us know where we have gone wrong in configuring the server.
We are NOT using any webserver or LDAP to authenticate users. No SSL is enabled.
Please suggest.

IPlanet Web Proxy Server 3.6 SP 5 Persistent Connection doesn't work

I use iPlanet-Web-Proxy-Server/3.6-SP5 on Soloaris. and trying to use persistenet connection functions in forward proxy through setting keep alive to "ON". But I found this functions doesn't work at all. The following trace is the HTTP Header info i got from receiver.
1. The HTTP Header info without using Proxy Server
Request headers :
proxy-authorization: Basic YXBwLWVtcXVzZXI6MTIzNDU2Nzg=
connection: Keep-Alive
proxy-connection: Keep-Alive
server: IBM WebSphere MQ internet pass-thru V1.3.2
accept: application/octet-stream
host: 10.1.13.43:1414
user-agent: 10.1.72.254:1414
content-type: application/octet-stream
content-length: 132
accept-encoding: identity
2. The HTTP Header info using Proxy Server
Request headers :
server: IBM WebSphere MQ internet pass-thru V1.3.2
accept: application/octet-stream
host: 10.1.72.254:1414
user-agent: 10.1.72.254:1414
content-type: application/octet-stream
content-length: 132
accept-encoding: identity
date: Mon, 06 Sep 2004 18:04:12 GMT
forwarded: by http://iaccess.mor.cr:8085 (iPlanet-Web-Proxy-Server/3.6-SP5)
via: 1.1 S1PS,1.1 S1PS
I found Kepp-Alive information ( "connection: Keep-Alive" and " proxy-connection: Keep-Alive")
was taken out by proxy server.
Is a proxy server bug? Can I do something to make it work?
Regards,
songtao

Hi
This as per the HTTP/1.1 RFC (RFC2616)
The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
The Connection header has the following grammar:
Connection = "Connection" ":" 1#(connection-token)
connection-token = token
HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
Read the following at
http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
and
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
Regards
Nagendra HK

Problem on Setting up a Reverse Proxy on Web Proxy Server 4.0.1

After you setup a reverse proxy using Web Proxy Server 4.0.1, if you get the following error --
Proxy denies fulfilling the request
Your client is not allowed to access the requested object.You probably forget to add a regular mapping from: / to: http://http.site.com/. The information provided in 4.0.1 Administration guide is misleading. You will have to add it NOW manually. (Note: in 3.6 it will be added automaticly)
You will have to do the following step manually, what provided in the manual is misleading --
Sun Java� System Web Proxy Server 4 .0.1 Administration Guide 2005Q4
Chapter 14 Using a Reverse Proxy
"Setting up a Reverse Proxy"
5. To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional
mappings. To see the mappings, click the link called View/Edit Mappings.
Additional mappings would be in the following format:
from: /
to: http://http.site.com/

thanks, will verify and update the docs.
rahul.

Sun ONE Web Server 6.0 SP5 Java Stack Overflow?

We have a vanilla installation of Web Server 6.0 SP5, and consistently get the following error when using the admin server, choosing to manage a server, and choosing the Virtual Server Class tab.
Anyone seen this/solved it? Thanks.
failure ( 8650): Internal error: Unexpected error condition thrown (unknown exception,no description), stack: java.lang.StackOverflowError
at java.util.zip.ZipFile.getEntry(ZipFile.java:145)
at java.util.jar.JarFile.getEntry(JarFile.java:184)
at java.util.jar.JarFile.getJarEntry(JarFile.java:171)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:669)
...etc

Specifically, what are you looking for?
Does it work? Yes, I've been able to use 1.4.2 with 6.0. Just need to set the StackGuard as per the Release Notes for earlier (pre-1.4.2) J2SE's.

Why doesn't Web Proxy Server use default route?

After downloading Sun Java Web Proxy Server, I notice that the path to retrieve URLs from the internet does not go out the default route.
However my pings, traceroutes, telnets, etc. to the same URLs do go out to the default route correctly.
I have tried with both SP5 and SP6.
Thanks

I went to about:cache. It says 0 Kib offline cache.
I went to the two links, but I can't understand what to do. I know I have to allow some storage in order for the Flash based cams to run. I have the one I use the most set to allow 100 KB but is says there is 0 being used.
I'm attaching a few screen captures. There are many sites listed below where the last one is cut off. I don't even know what some of them are. I don't understand what to do. Sorry.
EDIT. I may have found the area that is causing the problem. See last screenshot of Website Storage Settings panel. For some reason, that is now on 0. I don't remember changing it to that or ever seeing this section before. Should I move it to some other number?
Another EDIT: I did move that slider over in the last screenshot, and I now have the cache and Clear works again. So you helped me solve this problem that was causing FF to crash all the time, I think. Thank you!
But now that I've seen that list of places storing things, I'm worrried about the ones I've never heard of and don't remember visiting. Is it a good idea to click Delete all sites or am I over-reacting to all this malware scare? Maybe I picked them up from Pinterest. I do have Sophos Antivirus running, so I don't think I have a problem at this time.

Post installation steps for PI 7.0

Hi,
Can anybody send me the Post installation steps for PI 7.0?
Thanks in advance..
~Kumar

Hello,
 
We did PI Installation recently and version is 7.1
 
Steps are as under...
 
 1. Basic PI installation
 2. System checks after basic installation
 a. SM50
 b. SM21
 c. ST22
 d. SM12
 e. SM13
 f. SM37
 3. Unlock the 001 client for cross-client changes temporarily and set system timezone (STZAC)
 4. Change 001 client settings back to no changes allowed.
 5. Create BASIS team member accounts in ABAP Stack and assign SAP_ALL.
 6. Set directory permission for \usr\sap\trans directory on Transport Domain Controller system.
 7. Import profiles (RZ10)
 8. Add the 4 following entries in to the instance profile and restart instance(RZ10)
 a. DIR_TRANS =
hostname.domain.ext\sapmnt\trans
 b. icm/host_name_full = hostname.domain.ext
 c. login/system_client = 100
 d. icm/server_port_0 = PROT=HTTP,PORT=5<sysno>00,TIMEOUT=1800,PROCTTIMEOUT=1800 {SAP Note 1107808}
 9. Configure TMS in transport domain controller{PI DEV} (STMS)
 a. Add virtual system
 b. STMS in newly installed system and configure proper transport domain
 c. In domain controller approve the new system (STMS -> SAP system -> Approve)
 10. Get maintenance certificate and SAP license from service marketplace and apply in to the new system {ABAP and JAVA} (slicense and NWA)
 11. Kernel Update JSPM
 a. JSPM update
 b. Kernel update
 c. BC-FES-IGS update
 12. Support pack installation ABAP
 a. SPAM update
 b. Support packs update
 13. Support pack installation JAVA
 a. Apply support pack stack
 b. Apply support pack patches
 i. After JVM installation Error occurs apply MS windows KB973544 {SAP Note 1367498}
 c. Restart JSPM and continue patch installation
 14. Client copy from client 001 to X00 using profile SAP_ALL
 15. Create logical system and assign it to new client (SALE)
 16. Change UME target in JAVA to client X00.
 a. Enter URL as http://hostname.domain.ext:port/nwa
 b. Management -> Infrastructure -> Destination
 c. Logon data TAB change client to X00
 d. Restart JAVA Instance
 17. Create following users
 a. PIAFUSER, PIRWBUSER, PIISUSER, PIDIRUSER, PIREPUSER and PIAPPLUSER on the target SLD and new system manually and assign role/group SAP_SLD_CONFIGURATOR to them. {SAP Note 1309239}
 b. PISUPER in new system and assign appropriate roles in ABAP and JAVA
 c. SLD_DS_<SID> and SLD_CL_<SID> on target SLD {Use source system master password}
 d. JCoRFC_<SID> in new system
 e. Sapadm user in new system
 18. Assign roles and groups to BASIS team on JAVA Stack
 19. Create PUBLIC logon group (SMLG)
 20. Configure SLD collector job as sapadm (RZ70)
 21. Run Configuration Wizard
 a. Enter URL as http://hostname.domain.ext:port/nwa
 b. Configuration management -> Scenarios -> Configuration Wizard
 c. Select Initial Configuration and click Start.
 22. Create the JCoRFC connection.
 a. Enter URL as http://hostname.domain.ext:port
 b. Web Dynpro -> Content administrator -> Maintain JCo destination
 c. Fill in information for the following 4 entries using client X00 and JCoRFC_<SID> as the user {Make sure you note the distinction between Metadata and Model destinations when you are creating the destination}
 i. WD_ALV_METADATA_DEST
 ii. WD_ALV_MODELDATA_DEST
 iii. WD_MODELDATA_DEST
 iv. WD_RFC_METADATA_DEST
(Use dictionary Meta Data for the Metadata connections, use Application Data for the Model Data connections.)
(Use the master password for EXQ)
 23. Repeat for the remaining 3 JCo RFC destinations.
 24. Run PI Full Qualified Host Name Wizard {SAP Note: 1320707}{Make sure you check the host names for integration server and SLD}
 25. Create RFC destination in to ERP target system (SM59)
 a. Give Name PI_INTEGRATIONSERVER
 b. Connection type H
 c. In Technical settings TAB provide
 i. Target host = hostname.domain.ext
 ii. Path Prefix = /sap/xi/engine/?type=entry
 iii. User information is blank
 26. Setting SXMB_ADM ERP target system
 a. Open Integration engine configuration
 b. Goto -> Change Global Configuration Data
 c. Role of Business system = Application System {This is optional}
 d. Provide RFC destination name in Corresponding Integ. Server = dest://PI_INTEGRATIONSERVER
 27. Schedule Standard Jobs as SAPADM in client X00.
 28. SICF service to activate
 a. /default_host/sap/public/bc/pictograms
 b. /default_host/sap/public/bc/webicons
 c. /default_host/sap/public/bc/its/designs
 d. /default_host/sap/public/bc/workflow
 e. /default_host/sap/bc/ccms
 f. /default_host/sap/bc/webdynpro/sap/CTS_BROWSER
 g. /default_host/sap/bc/webflow
 h. /default_host/sap/bc/workflow
 i. /default_host/sap/bc/workflow_xml
 j. /default_host/sap/bc/xmb
 k. /default_host/sap/bc/ping
 l. /default_host/sap/xi/wsdl_sr
 m. /default_host/sap/xi/wsdl_url
 n. /sap/bc/webdynpro/sap/appl_soap_management
 29. Adjusting JNLP Heap size
 a. Open the Exchange profile through the link u201Cadministrationu201D from the web page of the Process Integration tools.
 b. Under the folder u201CIntegration Builderu201D click on the variable u201Ccom.sap.aii.ib.clientjnlp.j2se.maxheapsizeu201D
 c. Value = 1024
 d. Save the change and restart the J2EE instance of PI so that the new value can take effect.
 30. Create RFC destination for Advanced Adaptor Engine in sender ERP system(SM59)
 a. RFC Destination = AAE_<SID>
 b. Connection type = G
 c. Target Host = Host Name of AAE Server {PI Server}
 d. Service No. u2013 HTTP port number of AAE Server
 e. Path Prefix = /XISOAPAdepter/MessageServlet?ximessage=true
 f. Under Logon & Security use PIAPPLUSER with PI target systemsu2019 master password.
 31. Create RFC destination <SID>_ALE in ERP Source system with user ERQALEUSER {Make sure you have this user created in new installed system}
 32. Install External Driver Configuration in Process Integration 7.1 Using JSPM {SAP NOTE: 1138877}
 
Please let me know if I am missing anything there...
 
Cheers,
 
Yogesh

Web Proxy "Service stops automatically"

Hello,
we use a SunONE Web Proxy Server 3.6 SP2 on a english WIndows 2000 SP3 (on Compaq DL 380 Dual P3 1,1 GHz).
Sometimes the service stops automatically, but i can resart it without a reboot. There are no messages or logfile entries.
Does anybody know, what the problem could be?
Thx
Marcus

Hi Marcus,
It's interesting to know that this problem also occurs under windows. I have suffered from this for some time now but not on every host that runs the proxy server (all Solaris 8/9 boxes running proxys from SP3 up to SP5) and only occasionally. It has just occured to me that every host that doesn�t have this problem shares a common configuration regarding the number of proxy server instances that it's running: one.
Are you running several instances on the same box? Please, let me know.
Thanks,
Rui

Self Signed Certificate for Web Proxy 4.0.2

Does anyone have instructions on how to create and install self signed Certificate for Web Proxy Server 4.0.2? My OS is RHEL 4.
Shed.

Unfortunately you will not be able to do that from the GUI.
You will have to use certutil frin proxy-install/bin/proxy/admin/bin/certutil
Make sure that your LD_LIBRARY_PATH includes proxy-install/bin/proxy/lib
(start -shell will give you a shell with all necessary paths set.)
create a file called password-file which contains your password to your cert database
your cert database resides in the alias directory of proxy installation.
certutil -S -s "CN=My Issuer" -n myissuer -x -t "C,C,C" -1 -2 -5 -m 1234
-f password-file -d certdir

Web proxy 3.6 SP5 installation steps

Similar Messages

Maybe you are looking for