on 01-18-2015 8:57 AM
Hi,
I am newbie to this SAP Web dispatcher config. We have installed SAP WD 7.42 on a standalone server using SWPM and now I am trying to configure it for the below scenario.
The requirement is simple like, the customers will be accessing via the url - https://shop.xxx.com. Internally this comes to the web dispatcher via a firewall and it should be routed to an ECC application url like /sap/bc/..../index.html.
I am planning to configuring like SSL termination at the web dispatcher and also to have HTTPS between web dispatcher and the ERP application.
This is what I have done so far:
Edited the instance profile of the web dispatcher profile (I have not created a separate profile like sapwebdisp.pfl - since I thought there is no need for it as web dispatcher itself installed as a separate instance. Please correct me if I am wrong on this)
First I am trying to establish a smooth working on the HTTP request and further change to HTTPS.
My profile file looks like,
SAPSYSTEMNAME = DXN
SAPSYSTEM = 01
INSTANCE_NAME = W01
DIR_CT_RUN = $(DIR_EXE_ROOT)$(DIR_SEP)$(OS_UNICODE)$(DIR_SEP)linuxx86_64
DIR_EXECUTABLE = $(DIR_CT_RUN)
DIR_PROFILE = $(DIR_INSTALL)/profile
_PF = $(DIR_PROFILE)/DXN_W01_parthowebd
SETENV_00 = DIR_LIBRARY=$(DIR_LIBRARY)
SETENV_01 = LD_LIBRARY_PATH=$(DIR_LIBRARY):%(LD_LIBRARY_PATH)
SETENV_02 = SHLIB_PATH=$(DIR_LIBRARY):%(SHLIB_PATH)
SETENV_03 = LIBPATH=$(DIR_LIBRARY):%(LIBPATH)
SETENV_04 = PATH=$(DIR_EXECUTABLE):%(PATH)
#-----------------------------------------------------------------------
# Accesssability of Message Server
#-----------------------------------------------------------------------
icm/HTTP/redirect_0 = PREFIX=/, FOR=parthowebd.parthoxxx.com:8120, FROM=*,TO=/sap/bc/sap/index.html, HOST=parthoerp, PROT=HTTP,PORT=8010
#-----------------------------------------------------------------------
# Configuration for medium scenario
#-----------------------------------------------------------------------
icm/max_conn = 500
icm/max_sockets = 1024
icm/req_queue_len = 500
icm/min_threads = 10
icm/max_threads = 50
mpi/total_size_MB = 80
# SSL Configuration: Location of the SAP Cryptographic Library
ssl/ssl_lib = $(DIR_EXECUTABLE)/libsapcrypto.so
#-----------------------------------------------------------------------
# SAP Web Dispatcher Ports
#-----------------------------------------------------------------------
icm/server_port_0 = PROT=HTTP,PORT=81$$, TIMEOUT=900
icm/server_port_1 = PROT=HTTPS, PORT=44300, TIMEOUT=900
icm/HTTPS/verify_client = 1
icm/HTTP/admin_0 = PREFIX=/sap/admin,DOCROOT=$(DIR_DATA)$(DIR_SEP)icmandir,AUTHFILE=$(icm/authfile),PORT=81$$
#-----------------------------------------------------------------------
# Start webdispatcher
#-----------------------------------------------------------------------
_WD = wd.sap$(SAPSYSTEMNAME)_$(INSTANCE_NAME)
Execute_00 = local rm -f $(_WD)
Execute_01 = local ln -s -f $(DIR_EXECUTABLE)/sapwebdisp$(FT_EXE) $(_WD)
Start_Program_00 = local $(_WD) pf=$(_PF)
SETENV_05 = SECUDIR=$(DIR_INSTANCE)/sec
With this I am able to get into the web admin console of web dispatcher - no problem in it.
Also, I am able to access the application url, but the icm/HTTP/redirect_0 parameter just redirects and the complete url of the message server and application is exposed to the customer, which I don't want to.
I am looking for a configuration where when the customer gives like https://shop.xxx.com, the url may change a little bit to like https://shop.xxx.com/index.html, with the application opening up.
I read a lot about the parameters like wdisp/system_x and redirect, but got more confused. Please help me with the right parameters I can use to achieve this.
I also have a question, if the application is using a internal web server (like IIS) for it pictures/images, do we need to configure that server also in web dispatcher? Please clarify.
Your earliest help is much appreciated.
Hi Nandha
Could you refer the SAP link
SAP Web Dispatcher Configuration Reference - User Interface Add-On for SAP NetWeaver - SAP Library
BR
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thanks for the reply Sriram.
I looked at the reference and modified my profile as below.
wdisp/system_0 = SID=PAD, MSHOST=parthoerp, MSPORT=8101, SRCSRV=*:8120, SRCURL=/sap/bc/sap/index.html
The result is, the connection to the backend server is green in the web admin console.
But I am able to access the application only by using the url,
http://<webdisp>:<webdispport>/sap/bc/sap/index.html
which I do not want to expose to the customers. Instead, I wanted the customers to see something like http(s)://shop.xxxx.com/index.html.
I am assuming this http(s)://shop.xxx.com/index.html should be mapped by the firewall team with a DNS to http://<webdisp>:<webdispport>/sap/bc/sap/index.html.
Is that right? Or, is there any other way we can achieve this within the web dispatcher like using url rewrite / filter rules etc.? I was reading this and not sure what is the right way.
Thanks..
Thanks Guys. With the inputs, I was able to fix my problem.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Nandha,
Now that your issue is resolved, be sure to mark the question as 'Answered' by selecting the button on the response that best solved it. If there are any other steps you took in addition that helped you to get there, you might want to mention them as well. This will help others with the same problem when searching the forums, when they find your question and can see how you resolved it.
For a more in-depth discussion about this, see .
Regards,
Matt
Hello Nandha,
In your case you can use a reverse proxy to fix the URL (like Apache, IIS and even the Firewall). It is also possible to use the Web Dispatcher to rewrite the URL when it arrives to the Web Dispatcher and before sending it to the AS, please take a look to the following URL:
Rewriting URLs - SAP Web Dispatcher - SAP Library
I think in your case the RegRewriteUrl sentence will be something like this:
RegRewriteUrl ^/index.html. /sap/bc/sap/index.html
The only thing I don't remember is if it shows always to the user the same URL or if it changes. There is a nice guide about how to configure the Web Dispatcher with SSL through the whole landscape:
Best regards.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
87 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.