ITS 6.20 - Error 403 - Access Forbidden

[Former Member]

I've installed SAP ITS 6.20 onto my webserver.

It was a basic installation (combined Agate/Wgate), installed as user itsadm.

Apache runs as user apache.

My Web Server document root is /rootweb/WWW.

I installed ITS with Root Doc Directory /rootweb/WWW/its.

When I try and access itsping using:

http://<my webserver>/scripts/wgate/itsping/!

I get the error

Access forbidden!

You don't have permission to access the requested object. It is either read-protected or not readable by the server.

If you think this is a server error, please contact the webmaster.

Error 403

I've had a look around but can't find anything obviusly wrong.

Running on Linux_x86_64, SLES10.

[Former Member]

Hi

These are my install options selected:

Installation Directory: /usr/sap/its/6.20
Installation Type:  Typical
Single Respectively Dual Host:  Single Host
Virtual Instance name:  IT1
Instance Number: 41
SAP System ID:  DTD
Webserver Executable:  /usr/sbin/httpd2-prefork
Path to httpd.conf:  /etc/apache2
ITS Webserver Instance:  Apache   (this is the only option, so maybe the problem?)

Values in ItsRegistryWGATE.xml:

<value name="DocumentRoot" type="text">/rootweb/WWW/its/</value>
<value name="Host" type="text">_default_</value>
<value name="Port" type="text"/>
<value name="ScriptPath" type="text">/scripts/wgate</value>
<value name="InstanceName" type="text">IT1</value>

[Former Member]

OK, problem solved.

A few things were incorrect.

The installation files under rootweb/WWW/its seemed to be incorrect i.e. created an additional folder level.

I found this out via logfiles in /var/log/apache2/.

Also I had the following missing in httpd.conf:

<Location /scripts/wgate>
    SetHandler sap-its-wgate-handler
    Order deny,allow
    Allow from all
</Location>

Now that above part probably needs further tuning, but it does the trick for now.

Also my registry file /usr/sap/its/6.20/config/ItsRegistryWGATE.xml was incorrect.

Wherever it needed a webserver name/host it had the wrong info so I added the correct webserver name as the host.

I then stopped/restarted apache2 and ITS, and it now works.

[former_member194364]

Glad to hear you resolved the issue.

Am just interested in knowing - did you create a folder called

"htdocsIT1" or "IT1" under:

rootweb/WWW/its/

and then also change the

<value name="DocumentRoot"

in the ITSRegistryWgate.XML to this new folder name (along with the webserver name/host name change)?

[Former Member]

No, there is no folder called IT1 under /rootweb/WWW or subdirectory of it.

IT1 folder appears under /usr/sap/its/6.20/.

My DocumentRoot remains /rootweb/WWW/its.

And maybe because SLES10 apache config is different, I have to modify the XML file with the correct webserver name.

Thanks for your help, it prompted me to look urther.

[former_member194364]

What are the entrys in the error.log on the Apache Server?

Is the port that you are using defined in the httpd.conf file?

It should look like the following if you have setup a virtual host for say port 81:

<VirtualHost *:81>

ServerName <my webserver>

DocumentRoot /rootweb/www/<instance name>

<directory /rootweb/www/<instance name>>

Options Indexes FollowSymLinks MultiViews Includes

AllowOverride None

Order Deny,Allow

allow from all

</directory>

</VirtualHost>

Do you also get the same error when calling:

http://<my webserver>/scripts/wgate/webgui/!

[Former Member]

Thanks for the reply.

I haven't set up any Virtual Host. Didn't think I needed to.

I don't want to use Virtual Hosts.

My httpd.conf file is fairly minimal, everything else is loaded via files in /etc/apache2/conf.d/.

This is what ITS added to httpd.conf:

LoadModule wgate_module "/usr/sap/its/6.20/programs/apwgate22x.so"
WGateConfigFile "/etc/apache2/wgate.conf"

This is what's in wgate.conf:

registryname     WGATE_APACHE_IT1
registrypath     /usr/sap/its/6.20/config

You mentioned /rootweb/WWW/<instance name>.

Under /rootweb/WWW is directory its i.e. /rootweb/WWW/its.

Then under that there is no Instance Name mentioned.

The Instance Name only appears under /usr/sap/its/6.20 directory structure.

[former_member194364]

When you installed your ITS instance - lets call it "ABC" did you bind it to a Web Server Host during the install phase? I presume it would have been <mywebserver>:<port="80"> in the dropdown if that is the only host site that is defined in httpd.conf?

What are the entrys in the ITSRegistryWgate.XML for

<value name="DocumentRoot" type="text">

and

<value name="ServerName"type="text">

for the ITS <key name="Instances">

<key name="ABC">

and are the "value names" under <key name="Url1"> correct for

<value name=""Host" type="text>

<value name="Port" type="text">

<value name="ScriptPath" type="text">

<value name="InstanceName"type="text">ABC</value>