Portal 7.3 & Web Dynpro iView, both accessed from Internet via Web Dispatch

[Former Member]

Hi guru,

I'd like to know the best (or the correct) way to configure the FQDN and required DNS setting to allow user access ABAP Web Dynpro iview from internet.

My setup here is very typical:

• One EP 7.3 in intranet, having "ep.internal.mycomp.com" as FQDN (given during installation)

• One SAP ECC in intranet, having "erp.internal.mycomp.com" as SAPLOCALHOSTFULL parameter

• One Web Dispatcher in DMZ, having "service.mycomp.com", and listen to 80 port (later added 8000 port for AS ABAP).

User access my portal by using http://service.mycomp.com/irj, no problem.

But problem raised during access WD4A iview, here are my problem and questions:

[Problem]

At the beginning, we found that the WD4A iView can only be accessed in intranet, not from internet. Eventhough we register "service.mycomp.com" in public DNS. After some http level analysis, I was shock that the WD4A iview is provided directly by AS ABAP which running this WD4A, EP does not play a "relay" role. (Don't believe the URL bar in your IE, use Tamper Data or HTTP live to check the HTTP requests, you will get it). Since we DO NOT have "erp.internal.mycomp.com" in public DNS, so the iview cannot be displayed. But I DON'T want direct access to my ERP box.

I don't know a way to get rid of the "erp.mycomp.com" request generated by EP. So I tried to overcome the problem by leveraging the same Web Dispatcher used by EP. And I did make the WDisp -> ERP WD4A work using WDisp's FQDN (ie. service.mycomp.com:8000, also keep original service.mycomp.com:80 to EP), but the iview in EP does not use this FQDN. It use the SAPLOCALHOSTFULL parameter configured in backend ERP. WDisp does not do any URL replacement for me.

[Question 1]

Is there any way to hide WD4A iview in EP (server to server communication only)?

[Question 2]

If I can only have "service.mycomp.com" entry in my public DNS, should I change the SAPLOCALHOSTFULL in ERP to "service.mycomp.com"? I doubt that it may cause a "loop" situation between WDisp and ERP ?

[Question 3]

Is it possible to access WD4A on ERP by two different FQDNs (one for public via WDisp, the other for internal access w/o WDisp) ? I know there is only one SAPLOCALHOSTFULL configuration.

Anyone have done such integration ? please share your configuraiton. Thanks

[former_member146669]

Hi Wei-Shang Ku,

I got the exactly the same case of you.

So can you finally be able to make it work by only 1 url and 1 port with the SAP webdispatcher?

e.g.

service.mycomp.com:80 

which can show Portal page, and when accessing the WD4A iView, it can also redirect to ABAP backend as well (but not calling directly the ABAP backend URL from user browser).

Known it is old post, hope you can see that...thanks.

Gary

[Former Member]

Gary，

Yes, we can use only WDisp for both EP and backend SAP ERP access.

The trick is use the URL path to distinguish the destination.

all request to /sap/* will go to ERP, and others go to EP.

[former_member146669]

Hay Wei-Shang Ku,

Many thanks to your prompt reply of this very old post I tried to ask!

for the /sap/* redirect, think it required to use icm/HTTP/redirect_<xx> parametet in WDISP profile. And i did applied below too to make default WDISP URL go to /irj  (Portal login page).

icm/HTTP/redirect_0 = PREFIX=/,TO=/irj

so for "all request to /sap/* will go to ERP":

icm/HTTP/redirect_0 = PREFIX=/sap/*,TO=/???  (how do you set the TO value here?)

May i have your WDISP profile setting for reference? Did you make use of parameter wdisp/system_0?

And here is my overall setting:

we only have "service.mycomp.com" entry in public DNS.

1. "service.mycomp.com" is WDISP URL mapped to 1 public IP (we used default http 80 port)

2. we want user can access JPortal & also backend ERP via WebDynpro iView in JPortal via

   service.mycomp.com  (only port only)

3. ERP system profile:

    SAPLOCALHOSTFULL = <ERPHOSTNAME>.mycomp.com (not in public DNS)

    icm/server_port_0 = PROT=HTTP,PORT=80$$,TIMEOUT=3600,PROCTIMEOUT=3600

4. Portal:
    ABAP WebDynpro iView setting -

   System  = XXX (where XXX is alias of system iView)
  System iView setting -

    Logical System Name = ERPCLNTXXX

    ITS host = <ERPHOSTNAME>.mycomp.com:8000

Thanks again your information, have headache of this issue for long times....

Gary

[Former Member]

Gary,

You should use wdisp/system_x  to do such dispatch.

In my env, here is the pattern:

wdisp/system_conflict_resolution = 1

wdisp/system_0 = SID=R3P,MSHOST=your.abap.fqdn,MSPORT=8100,SRCURL=/sap/

wdisp/system_1 = SID=EPP,MSHOST=your.portal.fqdn,MSPORT=8110,SRCURL=/

I also use icm/HTTP/redirect_0, but not for url-based dispatch, but redirecting all http to https.

My env has SSL termination on WebDispatcher and I force all incoming request turn to use https.

[former_member146669]

Thanks! Let me give a try and let you know.

[former_member146669]

Dear Wei-Shang Ku,

Unfortunately, still page display error of ABAP WebDnyrpo iView with the below SAP Webdispatcher profile parameter setting....

icm/server_port_0 = PROT=HTTPS, HOST=wdisp_hostname, PORT=443

icm/server_port_1 = PROT=HTTP, HOST=wdisp_hostname, PORT=80

wdisp/system_conflict_resolution = 1

wdisp/system_0 = SID=R3P,MSHOST=your.abap.fqdn,MSPORT=8100,SRCURL=/sap/

wdisp/system_1 = SID=EPP,MSHOST=your.portal.fqdn,MSPORT=8110,SRCURL=/

(no icm/HTTP/redirect_0 parameter used)

(no rdisp/mshost parameter used)

(no ms/http_port parameter used)

May I check with you the setting of Portal Landscape system iView as well?

I use value "your.abap.fqdn:8000" for ITS and WebAS hostname field. Do you?

And for ICM monitor checking (via SMICM) in ABAP ERP, i have below active service:

Log    Service Port    Host Name        Keep alive    Proc.Time

HTTP 8000                your.abap.fqdn  30                    30

Many thanks!

Regards

Gary

[former_member146669]

Dear Wei-Shang Ku,

Unfortunately, still page display error of ABAP WebDnyrpo iView with the below SAP Webdispatcher profile parameter setting....

icm/server_port_0 = PROT=HTTPS, HOST=wdisp_hostname, PORT=443

icm/server_port_1 = PROT=HTTP, HOST=wdisp_hostname, PORT=80

wdisp/system_conflict_resolution = 1

wdisp/system_0 = SID=R3P,MSHOST=your.abap.fqdn,MSPORT=8100,SRCURL=/sap/

wdisp/system_1 = SID=EPP,MSHOST=your.portal.fqdn,MSPORT=8110,SRCURL=/

(no icm/HTTP/redirect_0 parameter used)

(no rdisp/mshost parameter used)

(no ms/http_port parameter used)

May I check with you the setting of Portal Landscape system iView as well?

I use value "your.abap.fqdn:8000" for ITS and WebAS hostname field. Do you?

And for ICM monitor checking (via SMICM) in ABAP ERP, i have below active service:

Log    Service Port    Host Name        Keep alive    Proc.Time

HTTP 8000                your.abap.fqdn  30                    30

Many thanks!

Regards

Gary

[Former Member]

Gary,

I do not know what's your scenario.

Can you (via web dispatcher) access ABAP WEB AS ? (without EP involved)

Can you (via web dispatcher) access Java WEB AS ? (without ABAP related iView)

If both work, then it is not the issue on Web Dispatcher.

Now you may want to access an Remote iView which show a ABAP WebDynpro page on R3 but wrapped in an Java iView, right ?  If the above two test work well, then your problem could be System Alias settings on EP. If you have screenshot of error message, that will be great.

[former_member146669]

Dear Wei-Shang Ku,

Acutally i think my scenario is exactly the same as you. I have:

• One EP 7.0 in intranet, having "ep.internal.mycomp.com" as FQDN (given during installation)
• One SAP ECC in intranet, having "erp.internal.mycomp.com" as SAPLOCALHOSTFULL parameter
• One Web Dispatcher in DMZ, having "service.mycomp.com", and listen to 80/443 port

Can you (via web dispatcher) access ABAP WEB AS ? (without EP involved)  -Yes

Can you (via web dispatcher) access Java WEB AS ? (without ABAP related iView)  -Yes

Um...since i can access Portal and ERP Web interface for ESS function, i think the System alias is correct. Dont know if any tricky i need to pay attention.

So may I check with you the setting of Portal Landscape system iView as well, for ITS and WebAS hostname field. You use WDISP host or ERP ABAP host? I think it is one of the key point.

Someone said i should input WDISP address in ITS and WebAS  of system iview properties...but it will make both internal & external call of the iview via WDISP url...

The error page is simply "page cannot display"...because of unresovlable DNS name of ERP backend from outside.

Regards

Gary

[Former Member]

Gary,

After checking my system, in EP landscape (System Alias), I have the following pattern:

[Connector]

Application Host:  R3P.internal.mycorp.com

Gateway Host:     R3P.internal.mycorp.com

Gateway Service:  sapgw00  

SAP Client:          200

SAPSystemID:     R3P

SAP System #:     00

Server Port :         3200

System Type:       SAP_R3

[Information]

System Name:      SAP_R3P

[Internet Trasaction Server (ITS)]

ITS Description:  <Blank>

ITS Host Name:  R3P.internal.mycorp.com:8000

ITS Path:            <Empty>

ITS Protocol:      http

[User Management]

Logon Method:     UIDPW

User Mapping Fiedls:  <Blank>

User Mapping Type:   admin,user

[Web AS]

ICM host name: R3P.internal.mycorp.com:8000

ICM Protocol: http

ICM URL Prefix:  /sap/bc/webdynpro/sap

[former_member146669]

Hi Wei-Shang Ku,

"ICM URL Prefix:  /sap/bc/webdynpro/sap"  - seems it is something i have to set too..let me check

And for " One Web Dispatcher in DMZ, having "service.mycomp.com", and listen to 80 port (later added 8000 port for AS ABAP)."

what actually you have to do for "later added 8000 port for AS ABAP"?
i think it is done by : wdisp/system_0 = SID=R3P,MSHOST=your.abap.fqdn,MSPORT=8000,SRCURL=/sap/
is it right?

Many thanks for you help.

Gary

[Former Member]

I got these issues solved after changing the ICM Host configuration in iView.

[CCSAPCEPSA]

Please, what have you changed in the iview in the icm to access the webdynpro application from the internet?

Thanks and regards

[Former Member]

Make sure assign a value to "Logical System Name" (not in ICM).

One more thing is, my EP is running with SP05 now. But I'm not sure SP05 solve it or not.

Good luck !