Technical Articles
Check the ICF nodes in Tx SICF: At least one nodeis inactive.
Today I wanted to prepare a system for some automatic upgrade tests of SAP Gateway addons. For this I had to develop and activate some demo services.
Here I stumbled across an issue because I wasn’t able to test the services in the SAP Gateway Client where I always got the following error message.
Check the ICF nodes in Tx SICF: At least one nodeis inactive.
The typo “nodeis” is taken from the original error message ?.
Since it took me some time to solve this issue I thought that this deserves to be documented in a blog.
Error analysis
I checked and found that the node was active in SICF.
However the port number was zero. (This I did not find immediately …)
http://myserver.com:0/sap/opu/odata/sap/ZUPGTEST_GENIL_SRV/?$format=xml
This can also be checked via transaction SMICM –> Goto Services
Reason and Solution
The technical reason is described in the SAP Online Documentation that you find when searching for “port 0” and similar words.
https://help.sap.com/doc/saphelp_nw751abap/7.51.0/en-US/c0/fb25665548424b824cdf6efcfcca30/frameset.htm
” … the value 0 for PORTS means that no port is opened for inbound connections for the specified protocol. For security reasons, ports for inbound connections must be explicitly configured.”
The solution is to set the following profile parameters in the instance profile
icm/server_port_2 PROT=SMTP, PORT=25000, PROCTIMEOUT=300, TIMEOUT=300 icm/server_port_1 PROT=HTTPS, PORT=44300, PROCTIMEOUT=300, TIMEOUT=300 icm/server_port_0 PROT=HTTP, PORT=50000, PROCTIMEOUT=300, TIMEOUT=300
so that inbound communication is enabled for http, https and smtp (email).
Not all three parameters are thus required.
But if you want to use https you have to activate the port icm/server_port_1.
The port icm/server_port_2 is only required if emails have to be sent from your ABAP server.
The only thing that is left that I will check whether we can change this error message ?.
Nice tip!
Thanks for sharing!
Great hint. One question though. Should only this parameter: "icm/server_port_0 PROT=HTTP, PORT=50000, PROCTIMEOUT=300, TIMEOUT=300" be added, or the other 2 specifically aswell?
Again, thanks for sharing!
Not all are required. But if you want to use https you have to activate the port icm/server_port_1.
The port icm/server_port_2 is only required if emails have to be sent from your ABAP server.
I'll update this in the text.
Thanks for the quick reply! I thought so, just wanted to be sure. 🙂
This blog is a good aside to this one. -> https://blogs.sap.com/2014/02/05/how-to-activate-and-define-http-https-smtp-ports-in-any-sap-r3-system/.