Skip to Content
Author's profile photo Kai-Christoph Mueller

Outbound httpS with HANA XS (part 1) – set up your HANA box to use SSL/TLS

Intro

Hi everyone, welcome to my first blog!

It’s the first one in a series, accompanying you on your journey with HANA. Starting with the basic setup of your HANA box to use in- and outbound HTTP calls via Secure Sockets Layer (SSL) / Transport Layer Security (TLS), the blogs will help you advance step by step until you end up designing and implementing a complete XS application that calls an external HTTPS service.

This is a rather advanced topic in the area of SAP HANA XS. Along the way, some of you may discover things you have not heard of before, such as .xsjs, .xshttpdest and trust stores. I will try to keep things as simple as possible and and will also keep trying to stimulate the appetites of XS newbies.  If you’re hungry and looking for a good point to start from, you can try walking the Road to HANA for Software Developers, until you reach the REST for your Models on the SAP HANA XS vista point.

So let’s get started with the encryption thing by first setting up your HANA box.

Prerequisites

Depending on your individual setup, you may need to get a larger or smaller number of files.  The basic requirement is to be able to download the SAP cryptographic library. For a more complex scenario involving a certification authority, you will also need the relevant root certificates.  In my example, I am simply leveraging the SAP infrastructure for this.

Files

I would have liked to provide all the necessary files in this blog.  Due to legal constraints, however, I’m unfortunately not allowed to do so. Nevertheless, it’s fairly easy to get them at:

OS access

You need to be able to copy files to and access the HANA box as <sid>adm.

So, who is going to sign for this?

If you want to use https, you will usually need to deal with certification authorities and public key infrastructures (if you are completely new to this topic, please refer to other resources to get started).  Another (easier and often cheaper) way is to sign the certificates on your own.  While the external signing ensures real security (and that nice green status color in your browser without the need to resort to any hacks), the self-signing may be what you are looking for if you want to get your development environment up and running as quickly as possible.

I am going to provide shortcuts for setting it up either way. Nevertheless, here is the official documentation in case you’re interested:

The easy way – self signing

You just want to set up your development box, but you don’t have certificates of a CA (Certification Authority) or your very own CA?  Or maybe you just want to get it done on the fast track?  If so, this is the right place for you!

The following script (also attached), will do all the work for you. Just set some parameters at the beginning, copy the above mentioned files (in section ‘Prerequisites’) to the working folder on your HANA host and relax after starting the script.

So here is what you need to do:

  • Create a working folder containing the following files
    • setUpSapCryptoSelfSigned.sh (main execution script, see below or attachment)
    • sapgenpse
    • libsapcrypto.so

              /wp-content/uploads/2013/11/libcrypto_328159.png

  • Edit the script and adapt the following parameters according to your needs
    • INSTANCE='<YOUR_HANA_SID>’
    • INSTNO='<YOUR_HANA_INST_NO>’
    • HOST='<YOUR_HANA_NETWORK_HOST_WITHOUT_DOMAIN>’
  • copy the folder to the HANA server, make the files readable and the script executable for <sid>adm
  • run the script as <sid>adm

This is what needs to be executed:

setUpSapCryptoSelfSigned.sh


#!/bin/bash
read -p 'You NEED to run this script as <sid>adm
&& you need to set the variables in the script
If this is not the case abort here (Ctrl+C)'
INSTANCE='<YOUR_HANA_SID>'
INSTNO='<YOUR_HANA_INST_NO>'
HOST='<YOUR_HANA_NETWORK_HOST_WITHOUT_DOMAIN>'
#example
#INSTANCE='TES'
#INSTNO='40'
#HOST='pall00539444a'
# bash does not provide DIR_SECURITY_LIB inside this subshell
DIR_SECURITY_LIB="/usr/sap/$INSTANCE/SYS/global/security/lib"
cp libsapcrypto.so $DIR_SECURITY_LIB
cp sapgenpse $DIR_SECURITY_LIB
mkdir $SECUDIR
# Create the trust store files
$DIR_SECURITY_LIB/sapgenpse gen_pse -p $SECUDIR/sapsrv.pse -x '' "CN=${HOST}"
$DIR_SECURITY_LIB/sapgenpse gen_pse -p $SECUDIR/sapcli.pse -x '' "CN=${HOST}"
$DIR_SECURITY_LIB/sapgenpse gen_pse -p $SECUDIR/SAPSSL.pse -x '' "CN=${HOST}"
echo "Please note that all of these PSE files are self signed. In a productive scenario you would have to sign them by a CA."
echo "Going to update Web dispatcher profile and restarting that process"
echo "
wdisp/ssl_encrypt = 0
ssl/ssl_lib = /usr/sap/$INSTANCE/SYS/global/security/lib/libsapcrypto.so
ssl/server_pse = SAPSSL.pse
icm/HTTPS/verify_client = 0
icm/HTTPS/forward_ccert_as_header = true
" >>  /usr/sap/$INSTANCE/HDB$INSTNO/$HOST/wdisp/sapwebdisp.pfl
kill -9 `pidof sapwebdisp_hdb`
kill -9 `pidof hdbxsengine`
echo "Now you may proceed with setting up your XS applications as described at
http://help.sap.com/hana/SAP_HANA_Developer_Guide_en.pdf
(Chapter 3.6 - maintaining application security)'
"
echo "You can check whether the https setup was successfull via
https://$HOST:43$INSTNO/sap/hana/xs/admin/
- you may need to wait a little bit for a restart of some processes
- you need the according roles
check: Go to the trust manager. If there is no error message on the bottom of the screen you are all setup."
# DEBUGGING
#
# Reset the system (pls adapt the wdisp.pfl on your own (not a must))
# rm -f $DIR_SECURITY_LIB/*; rm -f $SECUDIR/*; kill -9 `pidof sapwebdisp_hdb`; kill -9 `pidof hdbxsengine`
#
#  Troubleshooting SSL for HANA/XS
#
    # check the traces (dev_wdisp and xsengine) for errors (either via HANA Studio > Administration perspective > Diagnosis Files or in /usr/sap/<SID>/HDB<instno>/<host>/trace).
    # increase the trace-level for the HDB Web Dispatcher by adding icm/log_level = <level> (e.g. 2) to sapwebdisp.pfl in /usr/sap/<SID>/HDB<instno>/<host>/wdisp.
    # increase the trace level: In HANA Studio, Administration perspective > Trace Configuration, Edit Configuration for "Database Trace" and change XSENGINE to e.g. INFO.
#Troubleshooting SSL for HANA/XS
# In HANA Studio, open the Administration perspective for the HANA system and set the following configuration parameters in indexserver.ini, section communication:
# sslcryptoprivder = sapcrypto
# sslkeystore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse
# ssltruststore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse
# sslvalidatecertificate = false
# sslvalidatecertificate should be set to false, as most of the internal systems won't resolve the hostnames properly.


That’s it.

As the script already told you, you can check if https is working by opening the following URL in your browser (please mind the s in https and the changed port):

https://<yourHostName>:43<InstanceNumber>

You should now see something like:

using Firefox

/wp-content/uploads/2013/11/firefox_328142.png

using Chrome

/wp-content/uploads/2013/11/chrome_328143.png

After adding a security exception (via ‘I understand the risks’ or ‘Proceed anyway’ – depending on your browser) you most likely will discover the XS engine welcome screen:

XS.png

Don’t be surprised if your browser does not trust that  /wp-content/uploads/2013/11/https_328164.png  connection – you did sign the certificates yourself. If you don’t like this, just go on with the next (optional) sub-chapter.

In any case, inbound https should be up and running now.  🙂

Would you like to watch this whole process in a video?  Here you go:

Hacking that red status (optional)

If that red status annoys you, I can show you how to get rid of it.  But it is a hack of sorts, so just don’t tell anyone about it.  It does have some security drawbacks and it most likely has to be done for every user.

In a nutshell:

    Export the certificate via your browser and import it as a trusted root certificate.

Using Chrome, this can be done via:

Export

  • click the red symbol
  • tab: connection
  • ‘certificate information’
  • tab: Details
  • button: copy to file

24-10-2013 17-05-50.png  Import

/wp-content/uploads/2013/11/exp_328166.jpg

Depending on your cache settings, you should be able to just restart Chrome and see the green icon.

The delegated way – ask the CA to sign it

Ok, so you already have a connection to a CA, are not too happy about the red symbols in your browser and dislike the hack above due to its security drawbacks? Furthermore, you’re familiar with the whole security thing, or at least know someone who is and who owes you a favor?  Fine, so let’s go ahead and use that CA infrastructure to become more secure and make sure you’re really communicating with whom you think you should be!

The following script is an enhanced version of the script above. At least, it’s enhanced with regards to some setup aspects and the interactive signing question.

You will be asked to have your created certificates be signed by a CA while the script is running.  If you need to have an external CA sign them, then I recommend running the script steps manually. In general, this may be the safer option. I have only been looking at the SAP internal frontend, and I’m sure most frontends will look different and the certificate names might also be different. Anyway. I hope the basic steps can help you get the installation up and running.

Regarding the configuration described above, you will additionally have to perform the following steps:

  • have to copy the SAPNetCA.cer root certificate (or the root certificate, you plan to use) into your working folder

          /wp-content/uploads/2013/11/ca_328167.png

  • configure additional parameters at the beginning of the script:
    • INSTANCE='<YOUR_HANA_SID>’
    • SIDADM='<YOUR_HANA_SIDADM>’
    • INSTNO='<YOUR_HANA_INST_NO>’
    • HOST='<YOUR_HANA_NETWORK_HOST>’
    • DOMAIN='<YOUR_HANA_NETWORK_DOMAIN>’
    • ORG='<YOUR_CERTIFICATE_ORGNANIZATION>’
    • COUNTRY='<YOUR_CERTIFICATE_COUNTRY>’
  • leave the PIN unset (see the next sub chapter for details)
    • PIN=”

NOTE: if you are using root certificate other than SAPNetCA.cer, then you will need to adapt the script accordingly.

Once you’re done with all these steps, you can then go ahead and execute the ..CA.. script.

setUpSapCryptoCAsigned.sh


#!/bin/bash
read -p 'You NEED to run this script as <sid>adm
&& you need to set the variables in the script
If this is not the case abort here (Ctrl+C)'
#INSTANCE='<YOUR_HANA_SID>'
#SIDADM='<YOUR_HANA_SIDADM>'
#INSTNO='<YOUR_HANA_INST_NO>'
#HOST='<YOUR_HANA_NETWORK_HOST>'
#DOMAIN='<YOUR_HANA_NETWORK_DOMAIN>'
#ORG='<YOUR_CERTIFICATE_ORGNANIZATION>'
#COUNTRY='<YOUR_CERTIFICATE_COUNTRY>'
#example
#INSTANCE='TES'
#SIDADM='tesadm'
#INSTNO='40'
#HOST='pall00539444a'
#DOMAIN='pal.sap.corp'
#ORG='SAP'
#COUNTRY='DE'
# PIN does not increase security significantly and it's not possible to load the certificate into memory with one being set
PIN=''
# bash does not provide DIR_SECURITY_LIB inside this subshell
DIR_SECURITY_LIB="/usr/sap/$INSTANCE/SYS/global/security/lib"
cp libsapcrypto.so $DIR_SECURITY_LIB
cp sapgenpse $DIR_SECURITY_LIB
cp SAPNetCA.cer $DIR_SECURITY_LIB
mkdir $SECUDIR
##########################################
# sapssl
##########################################
# Create the SSL key pair and the certificate request in $SECUDIR
# This creates the Personal Security Environment (SAPSSL.pse) and the corresponding certificate request (SAPSSL.req).
$DIR_SECURITY_LIB/sapgenpse get_pse -p $SECUDIR/SAPSSL.pse -x $PIN -r $SECUDIR/SAPSSL.req "CN=${HOST}.${DOMAIN}, OU=${INSTANCE}, O=$ORG, C=$COUNTRY"
cat $SECUDIR/SAPSSL.req
read -p "
Now go to your signing CA (SAP also offers CA services where you can have test certificates signed instantly at
        http://service.sap.com/Trust
        https://websmp106.sap-ag.de/SSLTest
) and sign the certificate.
In the SAP in house case it works like this:
    - Go to https://secsrvtest.wdf.sap.corp/TCS/cgi-bin/secuWPCA.pl
    - paste the content from SAPSSL.req (printed above) to the text area
    - leave SAPNetCA as CA
    - select 'certify the cert. req.' as command
    - submit
    - Copy the resulting certificate from the output (everything including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----)
      to a new text file (here: SAPSSL.cert) and save it to '$SECUDIR'
      ( here: $SECUDIR/SAPSSL.cert ) .
    -> Hit <ENTER> when finished
"
#Import the certificate into the PSE:
$DIR_SECURITY_LIB/sapgenpse import_own_cert -c $SECUDIR/SAPSSL.cert -p $SECUDIR/SAPSSL.pse -x $PIN -r $DIR_SECURITY_LIB/SAPNetCA.cer
#Create a Credential File to enable access for HDB (which runs as <sid>adm) to the PSE: Use
$DIR_SECURITY_LIB/sapgenpse seclogin -p $SECUDIR/SAPSSL.pse -x $PIN -O $SIDADM
# and make the credentials file read only for <sid>adm
chmod 600 $SECUDIR/cred_v2
##########################################
# sapsrv
##########################################
$DIR_SECURITY_LIB/sapgenpse get_pse -p $SECUDIR/sapsrv.pse -x '' -r $SECUDIR/sapsrv.req "CN=${HOST}.${DOMAIN}, OU=${INSTANCE}, O=$ORG, C=$COUNTRY"
cat $SECUDIR/sapsrv.req
read -p "
Now go to your signing CA (SAP also offers CA services where you can have test certificates signed instantly at
        http://service.sap.com/Trust
        https://websmp106.sap-ag.de/SSLTest
) and sign the certificate.
In the SAP in house case it works like this:
    - Go to https://secsrvtest.wdf.sap.corp/TCS/cgi-bin/secuWPCA.pl
    - paste the content from sapsrv.req (printed above) to the text area
    - leave SAPNetCA as CA
    - select 'certify the cert. req.' as command
    - submit
    - Copy the resulting certificate from the output (everything including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----)
      to a new text file (sapsrv.cert) and save it to '$SECUDIR'
      ( $SECUDIR/sapsrv.cert ) .
    -> Hit <ENTER> when finished
"
#Import the certificate into the PSE:
$DIR_SECURITY_LIB/sapgenpse import_own_cert -c $SECUDIR/sapsrv.cert -p $SECUDIR/sapsrv.pse -r $DIR_SECURITY_LIB/SAPNetCA.cer
#Create a Credential File to enable access for HDB (which runs as <sid>adm) to the PSE: Use
$DIR_SECURITY_LIB/sapgenpse seclogin -p $SECUDIR/sapsrv.pse -x $PIN -O $SIDADM
##########################################
# sapcli.pse
##########################################
$DIR_SECURITY_LIB/sapgenpse gen_pse -p $SECUDIR/sapcli.pse -x '' "CN=${HOST}.${DOMAIN}, OU=${INSTANCE}, O=$ORG, C=$COUNTRY"
##########################################
# Configure the HDB Web Dispatcher for SSL
##########################################
echo "
wdisp/ssl_encrypt = 0
ssl/ssl_lib = /usr/sap/$INSTANCE/SYS/global/security/lib/libsapcrypto.so
ssl/server_pse = SAPSSL.pse
icm/HTTPS/verify_client = 0
icm/HTTPS/forward_ccert_as_header = true
" >>  /usr/sap/$INSTANCE/HDB$INSTNO/$HOST/wdisp/sapwebdisp.pfl
kill -9 `pidof sapwebdisp_hdb`
kill -9 `pidof hdbxsengine`
echo "Now you may proceed with setting up your XS applications as described at
http://help.sap.com/hana/SAP_HANA_Developer_Guide_en.pdf
(Chapter 3.6 - maintaining application security)'
"
echo "You can check whether the https setup was successfull via
https://$HOST$DOMAIN:43$INSTNO/sap/hana/xs/admin/
- you may need to wait a little bit for a restart of some processes
- you need the according roles
check: Go to the trust manager. If there is no error message on the bottom of the screen you are all setup."
# DEBUGGING
#
# Reset the system (pls adapt the wdisp.pfl on your own (not a must))
# rm -f $DIR_SECURITY_LIB/*; rm -f $SECUDIR/*; kill -9 `pidof sapwebdisp_hdb`; kill -9 `pidof hdbxsengine`
#
#  Troubleshooting SSL for HANA/XS
#
    # check the traces (dev_wdisp and xsengine) for errors (either via HANA Studio > Administration perspective > Diagnosis Files or in /usr/sap/<SID>/HDB<instno>/<host>/trace).
    # increase the trace-level for the HDB Web Dispatcher by adding icm/log_level = <level> (e.g. 2) to sapwebdisp.pfl in /usr/sap/<SID>/HDB<instno>/<host>/wdisp.
    # increase the trace level: In HANA Studio, Administration perspective > Trace Configuration, Edit Configuration for "Database Trace" and change XSENGINE to e.g. INFO.
#Troubleshooting SSL for HANA/XS
# In HANA Studio, open the Administration perspective for the HANA system and set the following configuration parameters in indexserver.ini, section communication:
# sslcryptoprivder = sapcrypto
# sslkeystore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse
# ssltruststore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse
# sslvalidatecertificate = false
# sslvalidatecertificate should be set to false, as most of the internal systems won't resolve the hostnames properly.


After following the interactive part of the script and making sure the whole process has executed successfully, you should see a green status on your https connection (assuming you have also installed the relevant root CA into your browser):

/wp-content/uploads/2013/11/xsg_328168.png

Do you prefer to see these steps in a video?  Here you go:

Using a PIN for the Trust Stores

Using a PIN for the Trust Stores is not a good idea. This is because the PIN mechanism works on file system level and once the Trust Store gets loaded into memory it is not possible to unlock a Trust Store anymore. As there furthermore is no great benefit in enhanced security I highly recommend not to set one at all.

Check the installation

To finally verify that you have not only successfully installed SSL but also maintained the trust store relations in the correct way, you should do the following:

If you do not see this:

/wp-content/uploads/2013/11/not_328169.png

Then everything is fine 🙂

Debugging

If you have issues running the script, you can find more information on how to wipe the stuff you just did at the end of each script. You’ll also find some hints on how to set trace levels for analyzing more hard-to-find issues.  Then, of course, there’s also the official documentation….

Last words

So that was easy, wasn’t it? 😉

Honestly, I really hope things worked out for you as smoothly as they did for me. The CA signing setup is not an easy thing to do and remote support might be very hard (are you happy providing me with your <sid>adm user?).  Nevertheless, I’m happy to help in any way that I can.

Ready to use this setup?

Check out the followup blog available at:

Outbound httpS with HANA XS (part 2) – set up the trust relation

DISCLAIMER:

Please be aware that several processes will be restarted during the script execution (the hard way).  This might disturb others also working on the same box.

These scripts have run smoothly wherever they were tested. Nevertheless, you should be aware of what you are doing and are fully responsible for any side effects to your own system. Good luck! 😉

Assigned Tags

      34 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Former Member
      Former Member

      I configure SSL as steps in HANA administration guide, it seems all things go well.

      But when I opened XS trust manger view, I can see message "No valid SAP Crytpto configuration", do you have any suggestion?

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi

      which admin guide did you use? I had issues with the SP6 guide and that's why I created these Posts.

      I would suggest you try to follow the steps as described right here.

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      Thank you for this detailed guide. I am trying to follow it, however, the $SECUDIR variable seems to be undefined. Could you please tell me which should be its value?

      Best regards,

      Florian

      Author's profile photo Aleh Litasau
      Aleh Litasau

      Hi,

      /usr/sap/<SID>/HDB<instance_nr>/<hostname>/sec/

      You have to create sec dir

      Author's profile photo Former Member
      Former Member

      After successfully enabling SSL (I can now access https://fqn.host:4300/sap/hana/xs/admin/), I still see in the XS Admin's Trust Manager the "No valid SAP Crypto configuration" message. Any advice on how to fix/debug this?

      Thank you

      Author's profile photo Former Member
      Former Member

      Please run script metioned in this blog.

      Author's profile photo Former Member
      Former Member

      I have already ran the script, after setting $LD_LIBRARY_PATH and $SECUDIR variables.

      Author's profile photo Aleh Litasau
      Aleh Litasau

      Something wrong with configuration, you should check sap hana trace dev_webdisp first.

      Author's profile photo Former Member
      Former Member

      Everything looks OK in dev_webdisp trace file as the following line is present:

      = Success -- SapCryptoLib SSL ready!

      Also, the PSE file seems to be correctly loaded and, as I said earlier, I can successfully access the XS Admin XSJS application using HTTPS.

      I have also added the following parameters in HANA Studio, but I still get the "No valid SAP Crypto configuration" message

      # sslcryptoprivder = sapcrypto

      # sslkeystore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse

      # ssltruststore = /usr/sap/<SID>/HDB<instno>/<host>/sec/SAPSSL.pse

      # sslvalidatecertificate = false

      Any other ideas?

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Did you restart the instance?

      Was there a problem logged to the console while the script was running?

      Author's profile photo Former Member
      Former Member

      There was no problem logged when I ran the script.

      I restarted only the following two processes: kill -9 `pidof sapwebdisp_hdb`; kill -9 `pidof hdbxsengine` as mentioned in the script. Should I have also restarted something else?

      Author's profile photo Former Member
      Former Member

      The warning message disappeared after I did a full system restart. Thank you for the hint.

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi

      usually a restart of the processes is enough. I guess the UI had caches the message.

      Merry Christmas

      Author's profile photo Former Member
      Former Member

      Thanks a lot for this blog. This was very helpful. 🙂

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi all,

      this is the change log to the update today:

      - removed the use of a PIN for the trust stores

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      Hey, anybody any idea what this might be:

      The hostname in the "CN=" part of the      myhost  31007   xsengine         33783   XsIpConnection  Error     IPConnection.cpp(158)                                      

        Server's Certificate does not match the hostname that was passed in via SapSSLSetTargetHostname()

      I applied a SAP Note but without success.

      HANA XS Social Media API Call (Twitter, Facebook) HTTP Traffic

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi David

      to my knowledge Twitter and Facebook both only support OAuth. So you'll have to wait until HANA supports this one as well.

      If this is not the case the error message seems to describe the issue pretty good to me. What I understand is: Your certification chain is not correct.

      Please read the Blog and you'll end up with a running github scenario.

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      You just made my day! I switched from IP target host to dns and it worked, which came to my mind because you said the cert chain is invaled.

      For oauth I reused some "code",  so I get a xsjslib which did the oauth part.

      Thanks.

      David

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hey David

      happy to hear it is working and thanks for the flowers 🙂

      Did you use any publicly available lib to do the OAuth handling?

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      Hello,

      no it is not a public libary. I hope there will be an official sap approach in the near future for oauth inside hana xs applications.

      greetings

      david

      Author's profile photo Former Member
      Former Member

      Hello,

           I have tried to follow the above steps of self signing. Also I tried with the following guide http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/00b45687-0613-3110-7183-de49e84a35b0?QuickLink=index&… But could not get the https running. When i restarted the web dispatcher service, I got some errors in trace files saying

      *** ERROR =>  secussl_Create_SSL_CTX():  PSE "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse": unable to use! [ssslsecu.c  1896]

      [Thr 140624459200256] secussl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --

      [Thr 140624459200256]  secude_error 1824 (0x00000720) = "Wrong or Missing PIN for PSE"

      [Thr 140624459200256] >> ---------- Begin of Secude-SSL Errorstack ---------- >>

      [Thr 140624459200256] ERROR in SSL_CTX_set_default_pse_by_name: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse"

      [Thr 140624459200256] ERROR in ssl_set_pse: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse"

      [Thr 140624459200256] ERROR in af_open: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse"

      [Thr 140624459200256] ERROR in secsw_open: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse"

      [Thr 140624459200256] ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse"

      [Thr 140624459200256] << ---------- End of Secude-SSL Errorstack ----------

      [Thr 140624459200256] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential

        for "/usr/sap/HA0/HDB00/inblrllssc29/sec/SAPSSL.pse" [ssslxxi.c 2721]

      [Thr 140624459200256] *** ERROR => Initialization of SSL library failed -- NO SSL available!

      [Thr 140624459200256] =================================================

      [Thr 140624459200256]

      [Thr 140624459200256] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR

      [Thr 140624459200256] *** ERROR => IcmServInitSSL: SapSSLInit (rc=-40):

      Please help!!!

      Thanks & Regards,

      Mahendra

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi Mahendra,

      please remove the erroneous files and run the self signing script as described above.

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      has anybody tried to make this work on revision 72?

      Author's profile photo Former Member
      Former Member

      I'm trying to get this to work on revision 72, but i can't seem to get rid of the "No valid SAP Crypto configuration" message in the XS Engine Trust Manager.

      The WebDispatcher is running https without problems, but the XS Engine doesn't seem to get it (yet). The entire HANA has been restarted a number of times since the config, so that's not the solution.

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi,

      are you sure you completely followed the script?

      Especially the

      1. $DIR_SECURITY_LIB/sapgenpse gen_pse -p $SECUDIR/sapcli.pse -x '' "CN=${HOST}.${DOMAIN}, OU=${INSTANCE}, O=$ORG, C=$COUNTRY"

      part?


      Best regards

      Kai-Christoph

      Author's profile photo Former Member
      Former Member

      No, I did not. My problem seemed to consist of two parts:

      1. I had named my PSE's different, but the XS Engine seems to look specifically for a file called sapsrv.pse a(although the WebDispatcher picks it up just fine).

      2. I had PSE's with a PIN on it, and this is something HANA also does not like.

      I'm rebuilding it now, but I seem to have a problem getting the CR's signed. I used the SAP Trust Center Services for that, but the SSL test certificate part does not seem to have been migrated to the new TCS website. I'll keep you advised of my progress.....

      Update 23-07:

      I've created PINless PSE's on the HANA side called sapsrv.pse and sapcli.pse (self-signed as the TCS service for test certificates seems to have been discontinued). This works to some extend, as the error message in the Trust Manager is gone and I can create stores successfully. What still doesn't work though is access from the Fiori Launchapd to the XS Engine. We've installed a WebDispatcher to handle all traffic to the Fiori frontend, backend and XS Engine, and I can see all three systems in de WebDispatchers admin pages. A call from the Launchpad (Embedded Search) to the XS Engine will result in a popup for logon on the XS Engine.

      Author's profile photo Former Member
      Former Member

      I got the following error

      ERROR in unix_dlopen(): dlopen("libsapcrypto.so") FAILED:

        "libsapcrypto.so: cannot open shared object file: No such file or directory"

      Loading of shared library "libsapcrypto.so" failed!

      You might need to define the shared library search path LD_LIBRARY_PATH

      I'm using this script on sp9. Can someone help me with that

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi Levent,

      I could not reproduce your issue.

      SP9 comes with a self signed configuration by default. For the CA case the script worked for me as well -> You need to adapt small things like the process name of the web dispatcher, but this isn't the issue you describe.

      SP9 comes with the common crypto lib. This one is located at $DIR_EXECUTABLE.

      I hope this helps!

      If not, please be more specific on your issue.

      Thanks and best regards

      kc

      Author's profile photo Former Member
      Former Member

      i got the same error on sp8

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi Levent,

      I wrote the Post using SP7. A lot of people got it working on SP8 and SP9.

      I am happy to help, but as I do not know what your issue is:

      Please provide a detailed description on how to reproduce your issue.

      Also include your revision build version and anything which might help.

      Thank you and best regards

      Kai

      Author's profile photo Former Member
      Former Member

      Hi Kai-Christoph,

      I'm experiencing issues as well when i want to setup SSL on SP9.

      I modified the script accordingly replacing the webdisp process with the new hdbwebdisspatcher , but the problem i have is that the hdbwebdispatcher disappear and is not started again after the kill -9  and i don't know how to restart it.

      eve na HDB stop + HDB start does not change anything

      what commad shall i use to restart the hdbwebdispatcher ?

      many thanks

      Denis

      Author's profile photo Kai-Christoph Mueller
      Kai-Christoph Mueller
      Blog Post Author

      Hi Denis,

      the web dispatcher is started by the HANA daemon automatically whenever the daemon recognizes one of the processes stopped operating.

      If there is an issue with the startup of the web dispatcher, you need to look into it's log/trace file located at
      /usr/sap/<INST>/HDB<INSTno>/<HOST>/trace

      -> webdispatcher_.....trc

      Best regards

      kc

      Author's profile photo Former Member
      Former Member

      here is the output i found in the alert file , and in the trace file.

      what's going on ? how do i fix this ?

      thanks ,

      best

      Denis

      more webdispatcher_alert_vhcalhdbdb.trc

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431538 e webdispatcher    webdispatcher.cpp(00485) : Trying to create webdispatcher.ini. Error: File already exists!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431683 e webdispatcher    webdispatcher.cpp(00101) : Exception during startup!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431689 e webdispatcher    webdispatcher.cpp(00102) : exception  1: no.306101  (spine/webdispatcher/webdispatcher.cpp:486)

          Profile migration failed! Configuration already migrated!

      exception throw location:

      1: 0x00007f355baf6fa2 in WebDispatcher::WebDispatcherService::migrateProfile()+0x130 at webdispatcher.cpp:486 (hdbwebdispatcher)

      2: 0x00007f355baf86d9 in WebDispatcher::WebDispatcherService::handleConfigurationDuringStartup()+0x5 at webdispatcher.cpp:227 (hdbwebdispatcher)

      3: 0x00007f355baf91ef in WebDispatcher::WebDispatcherService::startup()+0x2b at webdispatcher.cpp:90 (hdbwebdispatcher)

      4: 0x00007f355bb0a4a3 in nlsui_main+0x930 at TrexService.cpp:681 (hdbwebdispatcher)

      5: 0x00007f35599d1083 in System::mainWrapper(int, char**, char**)+0x30 at IsInMain.cpp:202 (libhdbbasis.so)

      6: 0x00007f35579cfc16 in __libc_start_main+0xe2 (libc.so.6)

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.440091 e webdispatcher    webdispatcher.cpp(00103) : Web Dispatcher could not been started!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720644 e webdispatcher    webdispatcherlib.cpp(00036) : Closing shared library failed:

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738796 e webdispatcher    webdispatcher.cpp(00485) : Trying to create webdispatcher.ini. Error: File already exists!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738956 e webdispatcher    webdispatcher.cpp(00101) : Exception during startup!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738960 e webdispatcher    webdispatcher.cpp(00102) : exception  1: no.306101  (spine/webdispatcher/webdispatcher.cpp:486)

          Profile migration failed! Configuration already migrated!

      exception throw location:

      1: 0x00007fb6061effa2 in WebDispatcher::WebDispatcherService::migrateProfile()+0x130 at webdispatcher.cpp:486 (hdbwebdispatcher)

      2: 0x00007fb6061f16d9 in WebDispatcher::WebDispatcherService::handleConfigurationDuringStartup()+0x5 at webdispatcher.cpp:227 (hdbwebdispatcher)

      3: 0x00007fb6061f21ef in WebDispatcher::WebDispatcherService::startup()+0x2b at webdispatcher.cpp:90 (hdbwebdispatcher)

      4: 0x00007fb6062034a3 in nlsui_main+0x930 at TrexService.cpp:681 (hdbwebdispatcher)

      5: 0x00007fb6040ca083 in System::mainWrapper(int, char**, char**)+0x30 at IsInMain.cpp:202 (libhdbbasis.so)

      6: 0x00007fb6020c8c16 in __libc_start_main+0xe2 (libc.so.6)

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.747226 e webdispatcher    webdispatcher.cpp(00103) : Web Dispatcher could not been started!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739815 e webdispatcher    webdispatcherlib.cpp(00036) : Closing shared library failed:

      sid-hdb:/usr/sap/HDB/HDB00/vhcalhdbdb/trace>

      and in the trace file :

      more webdispatcher_vhcalhdbdb.30006.000.trc

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258648 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258708 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258720 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258730 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258732 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258733 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.258736 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.268735 w Environment      Environment.cpp(00295) : Changing environment set SSL_WITH_OPENSSL=0

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.289023 i webdispatcher    webdispatcher.cpp(00481) : A file named sapwebdisp.pfl has been detected. Configuration has to be migrate

      d to webdispatcher.ini before first startup!

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.289178 i webdispatcher    webdispatcherprofilemigrator.h(00090) : Profile Migration: Backup of sapwebdisp.pfl saved to wdisp/sapweb

      disp_pfl_has_been_migrated_to_webdispatcher_ini.

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.289554 i webdispatcher    webdispatcherprofilemigrator.h(00094) : Profile Migration: Content of sapwebdisp.pfl migrated to webdispa

      tcher.ini.

      [12732]{-1}[-1/-1] 2015-04-06 19:47:55.334888 i webdispatcher    webdispatcher.cpp(00357) : Generated profile:

      # This profile has been generated from webdispatcher.ini.

      # Do not change this file! The Web Dispatcher has to be configured in webdispatcher.ini!

      # Use the HANA Studio to configure the Web Dispatcher!

      SAPSYSTEM=00

      SAPSYSTEMNAME=HDB

      DIR_INSTANCE=/usr/sap/HDB/HDB00/vhcalhdbdb

      DIR_EXECUTABLE=/usr/sap/HDB/HDB00/exe

      icm/HTTP/hdb_0=TRUE

      wdisp/add_client_protocol_header=1

      wdisp/HTTP/use_pool_for_new_conn=1

      icm/max_sockets=($(icm/max_conn) * 2)

      icm/req_queue_len=6000

      icm/min_threads=10

      icm/max_threads=500

      mpi/total_size_MB=(min(0.06 * $(icm/max_conn) + 50, 2000))

      mpi/max_pipes=($(icm/max_conn) * 2)

      wdisp/HTTP/max_pooled_con=($(icm/max_conn))

      wdisp/HTTPS/max_pooled_con=0

      wdisp/add_xforwardedfor_header=true

      icm/HTTPS/forward_ccert_as_header=true

      icm/HTTP/max_request_size_KB=-1

      wdisp/use_heap_for_mpis=true

      wdisp/HTTP/esid_support=false

      wdisp/HTTP/jsessionid_tab_support =false

      ipc/sem_mon_off=true

      icm/ccms_monitoring=false

      wdisp/system_0=SID=$(SAPSYSTEMNAME), EXTSRV=http://localhost:3$(SAPSYSTEM)08, SRCURL=/

      icm/security_log=LOGFILE=$(DIR_INSTANCE)/trace/dev_icm_sec,MAXSIZEKB=500

      icm/max_conn=2000

      icm/server_port_0=PROT=HTTP,PORT=80$(SAPSYSTEM),PROCTIMEOUT=600

      icm/server_port_1=PROT=HTTPS,PORT=43$(SAPSYSTEM),PROCTIMEOUT=600

      icm/HTTP/admin_0=PREFIX=/sap/hana/xs/wdisp/admin,DOCROOT=$(DIR_INSTANCE)/wdisp/admin,AUTHFILE=backend

      [12732]{-1}[-1/-1] 2015-04-06 19:47:58.669105 w Environment      Environment.cpp(00295) : Changing environment set IMSLERRPATH=/usr/sap/HDB/HDB00/exe//

      [12732]{-1}[-1/-1] 2015-04-06 19:47:58.669128 w Environment      Environment.cpp(00295) : Changing environment set IMSLSERRPATH=/usr/sap/HDB/HDB00/exe//

      [12732]{-1}[-1/-1] 2015-04-06 19:47:58.881384 i webdispatcher    webdispatcher.cpp(00453) : Developer Trace will be written to: /usr/sap/HDB/HDB00/vhcalhdbdb/trace/webdis

      patcher_vhcalhdbdb.30006_dev_webdisp

      [12732]{-1}[-1/-1] 2015-04-06 19:47:58.882375 i webdispatcher    webdispatcher.cpp(00098) : Service startup

      [12747]{-1}[-1/-1] 2015-04-06 19:47:58.882572 i webdispatcher    webdispatcher.cpp(00661) : Starting Web Dispatcher with following arguments: hdbwebdispatcher pf=/usr/sap

      /HDB/HDB00/vhcalhdbdb/tmp/temp_sapwebdisp_do_not_change.pfl -f /usr/sap/HDB/HDB00/vhcalhdbdb/trace/webdispatcher_vhcalhdbdb.30006_dev_webdisp

      [12747]{-1}[-1/-1] 2015-04-06 19:48:02.160016 i webdispatcher    webdispatcher.cpp(00531) : Web Dispatcher Initialization successful

      [12732]{-1}[-1/-1] 2015-04-06 19:48:02.161437 i webdispatcher    webdispatcher.cpp(00175) : Notified Daemon about startup

      [12732]{-1}[-1/-1] 2015-04-06 19:48:02.178062 i webdispatcher    webdispatcher.cpp(00170) : Notified Nameserver about startup

      [12732]{-1}[-1/-1] 2015-04-06 19:48:02.178073 i webdispatcher    webdispatcher.cpp(00116) : Service started

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401434 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401491 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401503 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401516 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401518 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401521 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.401523 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.411449 w Environment      Environment.cpp(00295) : Changing environment set SSL_WITH_OPENSSL=0

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431517 i webdispatcher    webdispatcher.cpp(00481) : A file named sapwebdisp.pfl has been detected. Configuration has to be migrate

      d to webdispatcher.ini before first startup!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431538 e webdispatcher    webdispatcher.cpp(00485) : Trying to create webdispatcher.ini. Error: File already exists!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431683 e webdispatcher    webdispatcher.cpp(00101) : Exception during startup!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.431689 e webdispatcher    webdispatcher.cpp(00102) : exception  1: no.306101  (spine/webdispatcher/webdispatcher.cpp:486)

          Profile migration failed! Configuration already migrated!

      exception throw location:

      1: 0x00007f355baf6fa2 in WebDispatcher::WebDispatcherService::migrateProfile()+0x130 at webdispatcher.cpp:486 (hdbwebdispatcher)

      2: 0x00007f355baf86d9 in WebDispatcher::WebDispatcherService::handleConfigurationDuringStartup()+0x5 at webdispatcher.cpp:227 (hdbwebdispatcher)

      3: 0x00007f355baf91ef in WebDispatcher::WebDispatcherService::startup()+0x2b at webdispatcher.cpp:90 (hdbwebdispatcher)

      4: 0x00007f355bb0a4a3 in nlsui_main+0x930 at TrexService.cpp:681 (hdbwebdispatcher)

      5: 0x00007f35599d1083 in System::mainWrapper(int, char**, char**)+0x30 at IsInMain.cpp:202 (libhdbbasis.so)

      6: 0x00007f35579cfc16 in __libc_start_main+0xe2 (libc.so.6)

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.440091 e webdispatcher    webdispatcher.cpp(00103) : Web Dispatcher could not been started!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.440100 i webdispatcher    webdispatcher.cpp(00191) : Trigger service stop!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:44.440133 i Service_Shutdown TrexService.cpp(00781) : Preparing for shutting service down

      [24009]{-1}[-1/-1] 2015-04-07 16:32:47.504768 w Environment      Environment.cpp(00295) : Changing environment set IMSLERRPATH=/usr/sap/HDB/HDB00/exe//

      [24009]{-1}[-1/-1] 2015-04-07 16:32:47.504799 w Environment      Environment.cpp(00295) : Changing environment set IMSLSERRPATH=/usr/sap/HDB/HDB00/exe//

      [24009]{-1}[-1/-1] 2015-04-07 16:32:47.712890 i webdispatcher    webdispatcher.cpp(00181) : Notified Nameserver about shutdown preparation

      [24009]{-1}[-1/-1] 2015-04-07 16:32:47.712899 i webdispatcher    webdispatcher.cpp(00147) : Web Dispatcher Shutdown initiated!

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713089 i Service_Shutdown TrexService.cpp(00840) : Disabling signal handler

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713100 i Service_Shutdown TrexService.cpp(00852) : Stopping self watchdog

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713102 i Service_Shutdown TrexService.cpp(00864) : Stopping request dispatcher

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713104 i Service_Shutdown TrexService.cpp(00871) : Stopping responder

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713111 i Service_Shutdown TrexService.cpp(00878) : Stopping channel waiter

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713122 i Service_Shutdown TrexService.cpp(00883) : Shutting service down

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713125 i webdispatcher    webdispatcher.cpp(00151) : Waiting for Web Dispatcher Shutdown ...

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713635 i webdispatcher    webdispatcher.cpp(00187) : Notified Nameserver about shutdown

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713643 i Service_Shutdown TrexService.cpp(00888) : Stopping threads

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.713711 i Service_Shutdown TrexService.cpp(00893) : Stopping communication

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720602 i Service_Shutdown TrexService.cpp(00900) : Deleting console

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720608 i Service_Shutdown TrexService.cpp(00908) : Deleting self watchdog

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720610 i Service_Shutdown TrexService.cpp(00916) : Deleting request dispatcher

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720612 i Service_Shutdown TrexService.cpp(00924) : Deleting responder

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720631 i Service_Shutdown TrexService.cpp(00932) : Deleting service

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720644 e webdispatcher    webdispatcherlib.cpp(00036) : Closing shared library failed:

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720650 i Service_Shutdown TrexService.cpp(00939) : Deleting threads

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720652 i Service_Shutdown TrexService.cpp(00945) : Deleting pools

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720659 i Service_Shutdown TrexService.cpp(00955) : Deleting configuration

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720661 i Service_Shutdown TrexService.cpp(00959) : Removing pidfile

      [23999]{-1}[-1/-1] 2015-04-07 16:32:47.720916 i Service_Shutdown TrexService.cpp(00996) : System down

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705363 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705440 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705454 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705464 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705466 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705467 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.705469 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.717170 w Environment      Environment.cpp(00295) : Changing environment set SSL_WITH_OPENSSL=0

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738767 i webdispatcher    webdispatcher.cpp(00481) : A file named sapwebdisp.pfl has been detected. Configuration has to be migrate

      d to webdispatcher.ini before first startup!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738796 e webdispatcher    webdispatcher.cpp(00485) : Trying to create webdispatcher.ini. Error: File already exists!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738956 e webdispatcher    webdispatcher.cpp(00101) : Exception during startup!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.738960 e webdispatcher    webdispatcher.cpp(00102) : exception  1: no.306101  (spine/webdispatcher/webdispatcher.cpp:486)

          Profile migration failed! Configuration already migrated!

      exception throw location:

      1: 0x00007fb6061effa2 in WebDispatcher::WebDispatcherService::migrateProfile()+0x130 at webdispatcher.cpp:486 (hdbwebdispatcher)

      2: 0x00007fb6061f16d9 in WebDispatcher::WebDispatcherService::handleConfigurationDuringStartup()+0x5 at webdispatcher.cpp:227 (hdbwebdispatcher)

      3: 0x00007fb6061f21ef in WebDispatcher::WebDispatcherService::startup()+0x2b at webdispatcher.cpp:90 (hdbwebdispatcher)

      4: 0x00007fb6062034a3 in nlsui_main+0x930 at TrexService.cpp:681 (hdbwebdispatcher)

      5: 0x00007fb6040ca083 in System::mainWrapper(int, char**, char**)+0x30 at IsInMain.cpp:202 (libhdbbasis.so)

      6: 0x00007fb6020c8c16 in __libc_start_main+0xe2 (libc.so.6)

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.747226 e webdispatcher    webdispatcher.cpp(00103) : Web Dispatcher could not been started!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.747235 i webdispatcher    webdispatcher.cpp(00191) : Trigger service stop!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:05.747349 i Service_Shutdown TrexService.cpp(00781) : Preparing for shutting service down

      [26489]{-1}[-1/-1] 2015-04-07 16:53:09.512488 w Environment      Environment.cpp(00295) : Changing environment set IMSLERRPATH=/usr/sap/HDB/HDB00/exe//

      [26489]{-1}[-1/-1] 2015-04-07 16:53:09.512518 w Environment      Environment.cpp(00295) : Changing environment set IMSLSERRPATH=/usr/sap/HDB/HDB00/exe//

      [26489]{-1}[-1/-1] 2015-04-07 16:53:09.730193 i webdispatcher    webdispatcher.cpp(00181) : Notified Nameserver about shutdown preparation

      [26489]{-1}[-1/-1] 2015-04-07 16:53:09.730204 i webdispatcher    webdispatcher.cpp(00147) : Web Dispatcher Shutdown initiated!

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730378 i Service_Shutdown TrexService.cpp(00840) : Disabling signal handler

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730390 i Service_Shutdown TrexService.cpp(00852) : Stopping self watchdog

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730392 i Service_Shutdown TrexService.cpp(00864) : Stopping request dispatcher

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730394 i Service_Shutdown TrexService.cpp(00871) : Stopping responder

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730402 i Service_Shutdown TrexService.cpp(00878) : Stopping channel waiter

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730410 i Service_Shutdown TrexService.cpp(00883) : Shutting service down

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.730413 i webdispatcher    webdispatcher.cpp(00151) : Waiting for Web Dispatcher Shutdown ...

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.731134 i webdispatcher    webdispatcher.cpp(00187) : Notified Nameserver about shutdown

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.731142 i Service_Shutdown TrexService.cpp(00888) : Stopping threads

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.732029 i Service_Shutdown TrexService.cpp(00893) : Stopping communication

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739761 i Service_Shutdown TrexService.cpp(00900) : Deleting console

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739774 i Service_Shutdown TrexService.cpp(00908) : Deleting self watchdog

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739776 i Service_Shutdown TrexService.cpp(00916) : Deleting request dispatcher

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739778 i Service_Shutdown TrexService.cpp(00924) : Deleting responder

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739800 i Service_Shutdown TrexService.cpp(00932) : Deleting service

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739815 e webdispatcher    webdispatcherlib.cpp(00036) : Closing shared library failed:

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739821 i Service_Shutdown TrexService.cpp(00939) : Deleting threads

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739823 i Service_Shutdown TrexService.cpp(00945) : Deleting pools

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739832 i Service_Shutdown TrexService.cpp(00955) : Deleting configuration

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.739833 i Service_Shutdown TrexService.cpp(00959) : Removing pidfile

      [26464]{-1}[-1/-1] 2015-04-07 16:53:09.740087 i Service_Shutdown TrexService.cpp(00996) : System down

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096549 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096662 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096681 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096698 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096702 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096706 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096709 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096713 e Configuration    ConfigStoreManager.cpp(00693) : Configuration directory does not exist.

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.096716 e Configuration    ConfigStoreManager.cpp(00693) : Configuration directory does not exist.

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.107401 w Environment      Environment.cpp(00295) : Changing environment set SSL_WITH_OPENSSL=0

      [27346]{-1}[-1/-1] 2015-04-07 17:06:02.180637 i webdispatcher    webdispatcher.cpp(00357) : Generated profile:

      # This profile has been generated from webdispatcher.ini.

      # Do not change this file! The Web Dispatcher has to be configured in webdispatcher.ini!

      # Use the HANA Studio to configure the Web Dispatcher!

      SAPSYSTEM=00

      SAPSYSTEMNAME=HDB

      DIR_INSTANCE=/usr/sap/HDB/HDB00/vhcalhdbdb

      DIR_EXECUTABLE=/usr/sap/HDB/HDB00/exe

      icm/HTTP/hdb_0=TRUE

      wdisp/add_client_protocol_header=1

      wdisp/HTTP/use_pool_for_new_conn=1

      icm/max_sockets=($(icm/max_conn) * 2)

      icm/req_queue_len=6000

      icm/min_threads=10

      icm/max_threads=500

      mpi/total_size_MB=(min(0.06 * $(icm/max_conn) + 50, 2000))

      mpi/max_pipes=($(icm/max_conn) * 2)

      wdisp/HTTP/max_pooled_con=($(icm/max_conn))

      wdisp/HTTPS/max_pooled_con=0

      wdisp/add_xforwardedfor_header=true

      icm/HTTP/max_request_size_KB=-1

      wdisp/use_heap_for_mpis=true

      wdisp/HTTP/esid_support=false

      wdisp/HTTP/jsessionid_tab_support =false

      ipc/sem_mon_off=true

      icm/ccms_monitoring=false

      wdisp/system_0=SID=$(SAPSYSTEMNAME), EXTSRV=http://localhost:3$(SAPSYSTEM)08, SRCURL=/

      icm/security_log=LOGFILE=$(DIR_INSTANCE)/trace/dev_icm_sec,MAXSIZEKB=500

      icm/max_conn=2000

      icm/server_port_0=PROT=HTTP,PORT=80$(SAPSYSTEM),PROCTIMEOUT=600

      icm/server_port_1=PROT=HTTPS,PORT=43$(SAPSYSTEM),PROCTIMEOUT=600

      icm/HTTP/admin_0=PREFIX=/sap/hana/xs/wdisp/admin,DOCROOT=$(DIR_INSTANCE)/wdisp/admin,AUTHFILE=backend

      wdisp/ssl_encrypt=0

      ssl/ssl_lib=/usr/sap/HDB/SYS/global/security/lib/libsapcrypto.so

      ssl/server_pse=SAPSSL.pse

      icm/HTTPS/verify_client=1

      icm/HTTPS/forward_ccert_as_header=true

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.422832 w Environment      Environment.cpp(00295) : Changing environment set IMSLERRPATH=/usr/sap/HDB/HDB00/exe//

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.422858 w Environment      Environment.cpp(00295) : Changing environment set IMSLSERRPATH=/usr/sap/HDB/HDB00/exe//

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.638325 i webdispatcher    webdispatcher.cpp(00453) : Developer Trace will be written to: /usr/sap/HDB/HDB00/vhcalhdbdb/trace/webdis

      patcher_vhcalhdbdb.30006_dev_webdisp

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.639408 i webdispatcher    webdispatcher.cpp(00098) : Service startup

      [27353]{-1}[-1/-1] 2015-04-07 17:06:05.639702 i webdispatcher    webdispatcher.cpp(00661) : Starting Web Dispatcher with following arguments: hdbwebdispatcher pf=/usr/sap

      /HDB/HDB00/vhcalhdbdb/tmp/temp_sapwebdisp_do_not_change.pfl -f /usr/sap/HDB/HDB00/vhcalhdbdb/trace/webdispatcher_vhcalhdbdb.30006_dev_webdisp

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.719226 w Environment      Environment.cpp(00268) : Changing environment set LINES=42

      [27346]{-1}[-1/-1] 2015-04-07 17:06:05.719252 w Environment      Environment.cpp(00268) : Changing environment set COLUMNS=117

      [27353]{-1}[-1/-1] 2015-04-07 17:06:08.843471 i webdispatcher    webdispatcher.cpp(00531) : Web Dispatcher Initialization successful

      [27346]{-1}[-1/-1] 2015-04-07 17:06:08.844535 i webdispatcher    webdispatcher.cpp(00175) : Notified Daemon about startup

      [27346]{-1}[-1/-1] 2015-04-07 17:06:08.847503 i webdispatcher    webdispatcher.cpp(00170) : Notified Nameserver about startup

      [27346]{-1}[-1/-1] 2015-04-07 17:06:08.847510 i webdispatcher    webdispatcher.cpp(00116) : Service started

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544500 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544563 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544575 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544594 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544596 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544604 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544606 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544615 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [27980]{-1}[-1/-1] 2015-04-07 17:11:46.544617 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 27980'

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831454 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831511 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831522 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831532 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831534 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831536 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831538 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831541 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [30297]{-1}[-1/-1] 2015-04-07 17:27:21.831543 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 30297'

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054846 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054902 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054913 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054927 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054929 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054931 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054933 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054938 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [31419]{-1}[-1/-1] 2015-04-07 17:46:19.054939 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 31419'

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319309 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319365 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319376 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319390 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319392 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319394 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319396 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319401 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [32050]{-1}[-1/-1] 2015-04-07 17:56:29.319402 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 32050'

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041804 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041880 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041896 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041913 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041916 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041921 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041924 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041931 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [32089]{-1}[-1/-1] 2015-04-07 17:57:44.041934 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 32089'

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520265 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520320 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520333 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520345 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520347 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520350 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520352 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520356 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [32127]{-1}[-1/-1] 2015-04-07 17:58:22.520358 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 32127'

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025335 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel),

      build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45)

      4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025391 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025402 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025413 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025415 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025417 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025419 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025422 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandHan

      dle

      [750]{-1}[-1/-1] 2015-04-07 18:10:22.025424 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 750'

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780243 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780298 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780310 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780323 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780325 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780328 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780329 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780334 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [16795]{-1}[-1/-1] 2015-04-08 07:35:36.780336 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 16795'

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.916922 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.916978 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.916989 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917002 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917004 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917007 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917009 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917013 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [18742]{-1}[-1/-1] 2015-04-08 08:03:34.917015 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 18742'

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621045 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621101 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621111 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621125 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621126 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621129 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621131 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621136 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [18944]{-1}[-1/-1] 2015-04-08 08:08:41.621137 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 18944'

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711750 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711804 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711815 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711828 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711830 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711833 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711835 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711839 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [18958]{-1}[-1/-1] 2015-04-08 08:08:53.711841 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 18958'

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534434 i Basis            TraceStream.cpp(00467) : ==== Starting hdbwebdispatcher, version 1.00.090.00.1416514886 (fa/newdb100_rel)

      , build linuxx86_64 5c1aab7f333c2f0fd1620f48fc8fd981243681c3 2014-11-20 21:28:41 ld7272.wdf.sap.corp gcc (SAP release 20140516, based on SUSE gcc47-4.7.2_20130108-0.15.45

      ) 4.7.2 20130108 [gcc-4_7-branch revision 195014]

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534490 i Basis            TraceStream.cpp(00469) : MaxOpenFiles: 1048576

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534501 i Basis            TraceStream.cpp(00472) : Server Mode: L2 Delta

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534512 i Basis            ProcessorInfo.cpp(00713) : Using GDT segment limit to determine current CPU ID

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534513 i Basis            Timer.cpp(00650) : Using RDTSC for HR timer

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534515 i Memory           AllocatorImpl.cpp(01326) : Allocators activated

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534517 i Memory           AllocatorImpl.cpp(01342) : Using big block segment size 134217728

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534522 w Basis            ChannelListener.cpp(00101) : Unable to create socket for name: hdbwebdispatcher_SHDB_I00_ExternalCommandH

      andle

      [19717]{-1}[-1/-1] 2015-04-08 08:17:36.534523 w Basis            ChannelListener.cpp(00101) : Application for this process will only work with 'hdbcons -p 19717'

      sid-hdb:/usr/sap/HDB/HDB00/vhcalhdbdb/trace>

      Author's profile photo Daniel Benavides
      Daniel Benavides

      nice, very good explained