How to…Configure SAP Webdispatcher as a reverse proxy
This how to guide describes configuring SAP Web Dispatcher as a reverse proxy for the SAP Enterprise Portal so that you can easily publish the SAP Portal over the Internet.
Step: 1
Copy the following 2 files to a directory on the host where you want to configure the Web dispatcher:
• sapwebdisp.exe • icmadmin.SAR
from the following location of the Portal Server:
drive:\usr\sap\SID\JCxx\exe The Uncar the file icmadmin.SAR, using SAPCAR tool. Step: 2 In the Command prompt go to the directory where you have copied the above 2 files and enter,
sapwebdisp -bootstrap
This will generate the profile file (sapwebdisp.pfl) for the first time usage.
Step: 3
After the PFL file is generated successfully as shown above, the URL to call:
http://HOST-FOR-WEBDISP:PORT/sap/wdisp/admin/default.html
User: icmadm
Password: XXXXXXX
The user name and password is generated during the configuration of the Webdispatcher for the first time.
Step: 4
You can access your portal now via following URL:
http://HOST-FOR-WEBDISP:PORT/irj
Step: 5
If you need to run your Webdispatcher again then use the following command from command prompt.
sapwebdisp pf=sapwebdisp.pfl
Check the process running in the Task manager:
Step: 6
You can also install the webdispatcher to run as a NT service. You need to first download ntscmgr.exe from Service Market Place and then use the following command to install the web dispatcher.
NOTE:
Check for the ntscmgr.exe file in the folder drive\usr\sap\SID\JCxx\exe\ folder before trying to download from the Service Market Place.
ntscmgr install SAPWebdispatcher -b drive:\usr\sap\SID\ JCxx\exe\sapwebdisp.exe -p service pf=sapwebdisp.pfl
Step: 7
If the above command somehow didn’t work properly, to fix this you need to do the following:
1. Edit the registry entry by running the program regedit. 2. Do a search for “SAPWebdispatcher” and change the ImagePath to where your sapwebdisp.exe is currently residing.
drive:\usr\sap\SID\JCxx\exe\sapwebdisp.exe service pf=sapwebdisp.pfl
Step: 8
The URL redirect:
If you want to access the portal using the URL http:// HOST-FOR-WEBDISP:PORT and you are using SAP Webdispatcher, then you need to redirect the above URL to http:// HOST-FOR-WEBDISP:PORT/irj/index.html. This can be achieved by editing the sapwebdisp.pfl file and adding the following parameter,
# SAP Web Dispatcher Web Administration
icm/HTTP/redirect_0 = PREFIX=/, TO=/irj/index.html
After doing this, restart the SAP Webdispatcher.
Step: 1
Copy the following 2 files to a directory on the host where you want to configure the Web dispatcher:
• sapwebdisp.exe • icmadmin.SAR
from the following location of the Portal Server:
drive:\usr\sap\SID\JCxx\exe The Uncar the file icmadmin.SAR, using SAPCAR tool. Step: 2 In the Command prompt go to the directory where you have copied the above 2 files and enter,
sapwebdisp -bootstrap
This will generate the profile file (sapwebdisp.pfl) for the first time usage.
Step: 3
After the PFL file is generated successfully as shown above, the URL to call:
http://HOST-FOR-WEBDISP:PORT/sap/wdisp/admin/default.html
User: icmadm
Password: XXXXXXX
The user name and password is generated during the configuration of the Webdispatcher for the first time.
Step: 4
You can access your portal now via following URL:
http://HOST-FOR-WEBDISP:PORT/irj
Step: 5
If you need to run your Webdispatcher again then use the following command from command prompt.
sapwebdisp pf=sapwebdisp.pfl
Check the process running in the Task manager:
Step: 6
You can also install the webdispatcher to run as a NT service. You need to first download ntscmgr.exe from Service Market Place and then use the following command to install the web dispatcher.
NOTE:
Check for the ntscmgr.exe file in the folder drive\usr\sap\SID\JCxx\exe\ folder before trying to download from the Service Market Place.
ntscmgr install SAPWebdispatcher -b drive:\usr\sap\SID\ JCxx\exe\sapwebdisp.exe -p service pf=sapwebdisp.pfl
Step: 7
If the above command somehow didn’t work properly, to fix this you need to do the following:
1. Edit the registry entry by running the program regedit. 2. Do a search for “SAPWebdispatcher” and change the ImagePath to where your sapwebdisp.exe is currently residing.
drive:\usr\sap\SID\JCxx\exe\sapwebdisp.exe service pf=sapwebdisp.pfl
Step: 8
The URL redirect:
If you want to access the portal using the URL http:// HOST-FOR-WEBDISP:PORT and you are using SAP Webdispatcher, then you need to redirect the above URL to http:// HOST-FOR-WEBDISP:PORT/irj/index.html. This can be achieved by editing the sapwebdisp.pfl file and adding the following parameter,
# SAP Web Dispatcher Web Administration
icm/HTTP/redirect_0 = PREFIX=/, TO=/irj/index.html
After doing this, restart the SAP Webdispatcher.
the content of your blog is somehow similarly as in the documentation and the webdisp notes but much easier to read and to follow.
Well done.
Juergen
Thanks for your contribution! However, when I'm trying to set up the Webdispatcher based on the steps provided in your weblog it seems some dll's are missing. I'm installing WebDisp on a seperate box (W2000)without any SAP software. When you start with sapwebdisp -bootstrap it returns the following message:
The following files must be in the path described by
the environment variable "PATH":
icuuc26.dll, icudt26l.dll, icuin26.dll [nlsui0.c 1458] pid = 1932
Are you sure step 1 doesn't contain any other activities?
Cheers!
Frodo
Yes, you are right. I have also came across the same situation what you are facing now. The missing DLLs. But if you can check your Portal server (drive:\WINNT\System32) you have all the above DLLs in this folder. Please copy these missing DLLs to the Web Dispatcher host. It will solve the issue.
Regards,
Debasis
I have installed the web dispatcher as per your blog. I had issues with port numbers first so I changed the sapwebdisp.pfl file and restarted the sapwebdispter. I am now getting the errors for the missing DLL's and cannot start the webdispatcher.
I can not copy these from my portal servers as my portal is running on UNIX.
Can you suggest anything?
Can you configure single-sign on with Windows Authentication in any way using the webdispatcher?
Regards,
Debasis
We are trying to get messages our of SAP XI which is inside our firewall and send a message via the AS2 adapter (HTTP/HTTPS)through the internal firewall through the DMZ (how to get it through the DMZ) to our outside partner. Now I thought I needed a Reverse Proxy to do this and I already have the SAp web dispatcher up and running on a server in the DMZ.
I thought that the SAP Web Dispatcher is only for HTTP/HTTPS traffic from the outside into your company? Are you using the reverse proxy for outbound messages?
Thanks in assisting my learning.
Deidre Logan
At the moment, I have configured the SAP Webdispatcher as a LB, since I am using the message servere port and host name to configure that. But for a full fledged reverse proxy you need to use SAP Webdispatcher with SPNego or any 3rd party reverse proxy server. Please refer SAP notes 886214 - End of Maintenance of IisProxy module - Jan, 2006.
what I see from the steps in the blog you set up the SAP Web Dispatcher as a load balancer not as a reverse proxy. The SAP Web Dispatcher can forward the requests and load balance, however the responses bypass the SAP Web Dispatcher entirely. The Web Dispatcher is not meant to be a full reverse proxy. I think this is an important distinction.
In the help (http://help.sap.com/saphelp_nw04/helpdata/en/e9/3bb7f8f6ea4e938ef0b9687cbb6c14/frameset.htm) under section "structure of the web dispatcher" it reads:
"The response from the application server does not pass via the Web dispatcher again to the client – it goes direct to the client (via a proxy, if the network is configured with one)."
Therefore it cannot be used as a full reverse proxy.
Regards,
Serge
You are right.
Regards,
Debasis
If you look into the SAP help for the SPNego module (introduced from SP15), you can achieve the NTLM functionality using SAP Webdispatcher.
SPNego:
http://help.sap.com/saphelp_nw04/helpdata/en/43/4bd58c6c5e5f34e10000000a1553f6/frameset.htm
I use your steps to use Webdispatcher as reverse proxy and redirect in HTTP and works fine. I Configure EP to support HTTP and HTTPS
http://portal.mydomain.com:50000/irj/portal
https://portal.mydomain.com:50001/irj/portal
# Profile generated by sapwebdisp bootstrap
# unique instance number
SAPSYSTEM = 0
# add default directory settings
DIR_EXECUTABLE = .
DIR_INSTANCE = .
# Accessibility of Message Servers
rdisp/mshost = portal.mydomain.com
ms/http_port = 8101
# SAP Web Dispatcher Parameter
wdisp/auto_refresh = 120
wdisp/max_servers = 100
#wdisp/ssl_encrypt = 2
wdisp/shm_attach_mode = 6
# configuration for large scenario
icm/max_conn = 16384
icm/max_sockets = 16384
icm/req_queue_len = 6000
icm/min_threads = 100
icm/max_threads = 250
mpi/total_size_MB = 500
mpi/max_pipes = 21000
#maximum number of concurrent connections to one server
wdisp/HTTP/max_pooled_con = 2000
wdisp/HTTPS/max_pooled_con = 2000
# SAP Web Dispatcher Ports
icm/server_port_0 = PROT=HTTP,PORT=80
# SAP Web Dispatcher Web Administration
icm/HTTP/admin_0 = PREFIX=/sap/wdisp/admin,DOCROOT=./admin,AUTHFILE=icmauth.txt
icm/HTTP/redirect_0 = PREFIX=/, TO=/irj/portal/index.html
Try using icm/HTTP/redirect_XX for redirecting the request between protocols. Debasis
Thanks for this web log. I was able to install web dispatcher on my laptop using the NetWeaver Sneak preview. Question for you, how should we change the profile file to include additional j2ee instances against which you want to load balance.
I've installed SAPWebDispatcher (note 834184), for EP 7 in a MSCS, right after this i tried to move group between the nodes and i noticed that the SCS instance has been damaged. (cannot start it manually - error 1053:the service didn't respond to the start or control request in a timely fashion)<br/><br/>I'm not sure for some parameters in the wd.pfl profile, in the note it's mentioned:<br/>SAPSYSTEMNAME=JEE<br/>INSTANCE_NAME=WD05<br/>SAPSYSTEM=06<br/>--
<br/>What should be the right values?<br/>SAPSYSTEMNAME should be the <SID> ?<br/>INSTANCE_NAME should be like above? or the name of one of the nodes ?<br/>--
<br/>Please advice, thank you , Avi
Thanks!}Kind Regards.
very nice blog.
Do you have experience with Double-Stack installations.
We got problems with the WebDispatcher not redirecting the Requests for the J2EE instance.
This is the link to the SDn Question?
SAP WebDispatcher with NW7.0 Double-Stack-ABAP/J2EE
I would appreciate every answer or hint!
Thanks.
Keep on the good work!
best regards.
Volker
Hi ...
Nice Blog, a bit more information regarding configuration of response headers and other stuff on web dispatcher would be a great add on. ...
could you suggest how to make changes to response headers in Web Dispatcher? I am trying to access a GW box in this kind of a scenario -
UI5App deployed on GW Box1 <--- > SAP WebDispatcher <---> GW Box2
I am getting Access-Control-Allow-Origin Error.
Thanks.
Hi to All Gurus
Do you know how to recovery ICM ADM password lost?
Erick Verbena
PROLAMSA