Error in ADS Configuration: ABAP stack

[former_member182205]

Hi,

we have installed sap ep, dual stack that is java as well as abap stack are installed on the same machine. I have done configuration for the sap interactive form in webdynpro side that is on java stack and its working fine , and now i am configuring ADS into ABAP stack as well.

When I try to run a report: FP_TEST_00 , in trancation SA38 into ABAP stack of portal I am getting this error:

ADS: SOAP Runtime Exception: CSoapExceptionTransport :(100101), I have checked my printer also, its configured properly.

Wat could be the reason for this..

[former_member311580]

Hello Rahul,

If you go to tcode SM59, "Http connections to External Server", double click on ADS, you will see in which Java system the ADS is running

ADSUser is used for logging onto the JAVA side. There are two cases:

1. The JAVA has own user management >> The ADSUser has to exist in the JAVA UME database

2. The JAVA is connected to one specific ABAP client. The ADSUSer has to exist and be configured in this abap client. ume.r3.connection.master.client contains the client in this case.

Check which situation is applied in your case.

Please check if the ADSUser is locked, reset the password and change it at the ADS destination.

regards,

Rafael

[former_member182205]

Hi, rafel.

I have got the exact point where I am getting the error.

Actually I have blocked my HTTP port of my portal , i went to visual admin, under dispatcher--> HTTP provider , I removed 50000 value under http, so that portal is not accessible with http url, we are acccessing our portal using default https port using url

https://xyz:50001/irj/portal (xyz = portal host),

Now I went to abap stack of portal and under sm59, I have created a http destination with name ADS, in that i have put service no. = 50001(portal default https port) under technical settings, and when I try to run the report FP_TEST_00 in transaction SA38, its giving me error.

I went back to VA, and i have set 50000 value in http port (in dispatcher--> HTTP provider ), and then i have put service no. = 50000 under technical settings in SM59,and when I try to run the report FP_TEST_00 in transaction SA38, its working fine, no error.

Now my problem is I want to run those reports in SA38, without setting 50000 port value in VA under dispatcher--> HTTP provider , as I want to block HTTP port, but as of now only If I set port value to 50000 in VA reports working fine.

How to solve this issue..

[markus_doehr2]

> Now I went to abap stack of portal and under sm59, I have created a http destination with name ADS, in that i have put service no. = 50001(portal default https port) under technical settings, and when I try to run the report FP_TEST_00 in transaction SA38, its giving me error.

So you already have HTTPS configured on the Java side?

> I went back to VA, and i have set 50000 value in http port (in dispatcher--> HTTP provider ), and then i have put service no. = 50000 under technical settings in SM59,and when I try to run the report FP_TEST_00 in transaction SA38, its working fine, no error.

> Now my problem is I want to run those reports in SA38, without setting 50000 port value in VA under dispatcher--> HTTP provider , as I want to block HTTP port, but as of now only If I set port value to 50000 in VA reports working fine.

You have to change the ADS destination in SM59 to use https.

Markus

[former_member182205]

Hi Markus,

Please let me know, even if i change the ADS destination in SM59 to use https (As per your suggestion).

Do i have to put 50000 as the value in service no. under technical settings in sm59 OR i have to put 50001 as the value in service no. under technical settings .

As I have already told, I have removed 50000 port value in VA so that user can access portal only through default portal https port 50001.

[former_member227283]

Hi,

To work ADS on abap stack you have to check the ADS RFC on abap stack as well as you have to define destination service for Abap in Java visual admin

Refer to page no :- 21 and 22

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/30a9630b-4f89-2a10-6fab-e311b3ffd...

Thanks

Anil

[former_member182205]

Hi Anil,

I have got the exact point where I am getting the error.

Actually I have blocked my HTTP port of my portal , i went to visual admin, under dispatcher--> HTTP provider , I removed 50000 value under http, so that portal is not accessible with http url, we are acccessing our portal using default https port using url

https://xyz:50001/irj/portal (xyz = portal host),

Now I went to abap stack of portal and under sm59, I have created a http destination with name ADS, in that i have put service no. = 50001(portal default https port) under technical settings, and when I try to run the report FP_TEST_00 in transaction SA38, its giving me error.

I went back to VA, and i have set 50000 value in http port (in dispatcher--> HTTP provider ), and then i have put service no. = 50000 under technical settings in SM59,and when I try to run the report FP_TEST_00 in transaction SA38, its working fine, no error.

Now my problem is I want to run those reports in SA38, without setting 50000 port value in VA under dispatcher--> HTTP provider , as I want to block HTTP port, but as of now only If I set port value to 50000 in VA reports working fine.

How to solve this issue..

[former_member227283]

Hi Rahul,

After changing the port in SM59 did u done connection test.

If yes, what result you get there.

Thanks

Anil

[former_member182205]

Yes i have done the test connection After changing the port in SM59 .

when I put 50000 as the value in service no. under technical settings in sm59 and do test connection, i am getting the following output under test Result tab in :

Status HTTP Response 302

Status Text Found

Duration Test Call 169 ms

when I put 50001 as the value in service no. under technical settings in sm59 and do test connection, i am not getting the output which I get for 50000 (as shown above), instead i just get green color tick mark at the bottom of the sap screen when ever I do test connection.

[former_member227283]

Hi Rahul,

Yes , you have to make entry of HTTPS service in SM59.

Let us know the connection test result

Thanks

Anil

[former_member182205]

Hi Anil,

Yes i have done the test connection After changing the port in SM59 . This are the TEST RESULT

when I put 50000 as the value in service no. under technical settings in sm59 and do test connection, i am getting the following output under test Result tab in :

Status HTTP Response 302

Status Text Found

Duration Test Call 169 ms

when I put 50001 as the value in service no. under technical settings in sm59 and do test connection, i am not getting the output which I get for 50000 (as shown above), instead i just get green color tick mark at the bottom of the sap screen when ever I do test connection.

So you saying i have to put 50001 as the service no. in sm59, but thats giving error when i try to run report in SA38.

[former_member227283]

Hi Rahul,

It mean basic configuration pending for working ADS on HTTPS protocol.

Pl refer the ADS configuration guide for e.g page no 18 in below link which will give you basic idea for configuration of ADS on HTTPS protocol.

http://help.sap.com/saphelp_nw04/helpdata/en/17/6a15383d2945868938ecb0617156c0/frameset.htm

Thanks

Anil

[former_member182205]

Hi Anil,

for configuring https in ABAP stack of portal, i have added some profile parameters in RZ10 transaction, and in one of the profile parameter icm/server_port_2 I have given this value PROT=HTTPS,PORT=443,TIMEOUT=180 . I have restarted the portal server

Than i went to the transaction SMICM --> Goto --> Services. And when I select HTTPS and click on Service --> Activate, it is giving the following error:

Operation failed (rc=1)

Message no. ICM006

than I went back to rz10 and change the port value from 443 to 50001 and again resterd the portal server and again went to the transaction SMICM --> Goto --> Services. And when I select HTTPS and click on Service --> Activate, it still giving the following error:

Operation failed (rc=1)

Message no. ICM006

What could be the problem

[markus_doehr2]

> Operation failed (rc=1)

> Message no. ICM006

Please check the trace files (in SMICM).

Markus

[former_member182205]

TRACE FILE OUTPUT:

-

---

trc file: "dev_icm", trc level: 1, release: "700"

-

---

sysno 00

sid EPD

systemid 390 (AMD/Intel x86_64 with Linux)

relno 7000

patchlevel 0

patchno 140

intno 20050900

make: multithreaded, Unicode, 64 bit, optimized

pid 17500

[Thr 47913668427856] started security log to file dev_icm_sec

[Thr 47913668427856] SigISetDefaultAction : default handling for signal 17

[Thr 47913668427856] ICM running on: epdsrv.spmcil.com

[Thr 47913668427856] MtxInit: 30001 0 2

[Thr 47913668427856] IcmInit: listening to admin port: 64999

[Thr 47913668427856] DpSysAdmExtCreate: ABAP is active

[Thr 47913668427856] DpSysAdmExtCreate: VMC (JAVA VM in WP) is not active

[Thr 47913668427856] Thu Jun 17 17:33:57 2010

[Thr 47913668427856] DpShMCreate: sizeof(wp_adm) 25160 (1480)

[Thr 47913668427856] DpShMCreate: sizeof(tm_adm) 5748600 (28600)

[Thr 47913668427856] DpShMCreate: sizeof(wp_ca_adm) 28800 (96)

[Thr 47913668427856] DpShMCreate: sizeof(appc_ca_adm) 9600 (96)

[Thr 47913668427856] DpCommTableSize: max/headSize/ftSize/tableSize=500/8/548056/548064

[Thr 47913668427856] DpShMCreate: sizeof(comm_adm) 548064 (1088)

[Thr 47913668427856] DpSlockTableSize: max/headSize/ftSize/fiSize/tableSize=0/0/0/0/0

[Thr 47913668427856] DpShMCreate: sizeof(slock_adm) 0 (104)

[Thr 47913668427856] DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0

[Thr 47913668427856] DpShMCreate: sizeof(file_adm) 0 (72)

[Thr 47913668427856] DpShMCreate: sizeof(vmc_adm) 0 (2008)

[Thr 47913668427856] DpShMCreate: sizeof(wall_adm) (40056/36728/80/192)

[Thr 47913668427856] DpShMCreate: sizeof(gw_adm) 48

[Thr 47913668427856] DpShMCreate: SHM_DP_ADM_KEY (addr: 0x2b93ce519000, size: 6446000)

[Thr 47913668427856] DpShMCreate: allocated sys_adm at 0x2b93ce519000

[Thr 47913668427856] DpShMCreate: allocated wp_adm at 0x2b93ce51b1b8

[Thr 47913668427856] DpShMCreate: allocated tm_adm_list at 0x2b93ce521400

[Thr 47913668427856] DpShMCreate: allocated tm_adm at 0x2b93ce521460

[Thr 47913668427856] DpShMCreate: allocated wp_ca_adm at 0x2b93cea9cbd8

[Thr 47913668427856] DpShMCreate: allocated appc_ca_adm at 0x2b93ceaa3c58

[Thr 47913668427856] DpShMCreate: allocated comm_adm at 0x2b93ceaa61d8

[Thr 47913668427856] DpShMCreate: system runs without slock table

[Thr 47913668427856] DpShMCreate: system runs without file table

[Thr 47913668427856] DpShMCreate: allocated vmc_adm_list at 0x2b93ceb2beb8

[Thr 47913668427856] DpShMCreate: allocated gw_adm at 0x2b93ceb2bf38

[Thr 47913668427856] DpShMCreate: system runs without vmc_adm

[Thr 47913668427856] DpShMCreate: allocated ca_info at 0x2b93ceb2bf68

[Thr 47913668427856] CCMS: AlInitGlobals : alert/use_sema_lock = TRUE.

[Thr 1104062784] IcmProxyWatchDog: proxy watchdog started

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 0

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 1

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 2

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 3

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 4

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 5

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 6

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 7

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 8

[Thr 47913668427856] IcmCreateWorkerThreads: created worker thread 9

[Thr 1119308096] IcmWatchDogThread: watchdog started

[Thr 1129797952] *** WARNING => HttpPlugInInit: Parameter icm/HTTPS/trust_client_with_issuer or icm/HTTPS/trust_client_with_subject not set => do not trust any intermediary

X.509 cert data will be removed from header [http_plg_mt. 719]

[Thr 1129797952] ISC: created 400 MB disk cache.

[Thr 1129797952] ISC: created 50 MB memory cache.

[Thr 1129797952] HttpSubHandlerAdd: Added handler HttpCacheHandler(slot=0, flags=12293) for /:0

[Thr 1129797952] HttpExtractArchive: files from archive /usr/sap/EPD/DVEBMGS00/exe/icmadmin.SAR in directory /usr/sap/EPD/DVEBMGS00/data/icmanroot are up to date

[Thr 1129797952] HttpSubHandlerAdd: Added handler HttpAdminHandler(slot=1, flags=4101) for /sap/admin:0

[Thr 1129797952] CsiInit(): Initializing the Content Scan Interface

[Thr 1129797952] AMD/Intel x86_64 with Linux (mt,unicode,SAP_CHAR/size_t/void* = 16/64/64)

[Thr 1129797952] CsiInit(): CSA_LIB = "/usr/sap/EPD/DVEBMGS00/exe/libsapcsa.so"

[Thr 1129797952] HttpSubHandlerAdd: Added handler HttpAuthHandler(slot=2, flags=12293) for /:0

[Thr 1129797952] HttpSubHandlerAdd: Added handler HttpSAPR3Handler(slot=3, flags=4101) for /:0

[Thr 1129797952] HttpSubHandlerAdd: Added handler HttpJ2EEHandler(slot=4, flags=1077253) for /:0

[Thr 1129797952] Started service 8000 for protocol HTTP on host "epdsrv.spmcil.com"(on all adapters) (processing timeout=60, keep_alive_timeout=30)

[Thr 1129797952] =================================================

[Thr 1129797952] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1129797952] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1129797952] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1129797952] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1129797952] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1129797952] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1129797952] =================================================

[Thr 1129797952] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1129797952] *** ERROR => IcmAddService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 319]

[Thr 1129797952] IcmNetCheck: network check passed without detecting problems

[Thr 47913668427856] Thu Jun 17 17:34:23 2010

[Thr 47913668427856] HttpSAPR3SetParam: switch j2ee http port from to: 50000

[Thr 47913668427856] HttpSAPR3SetParam: switch j2ee https port from to: 50001

[Thr 47913668427856] Thu Jun 17 17:34:56 2010

[Thr 47913668427856] HttpSAPR3SetParam: Switched j2ee status to: 1

[Thr 1108818240] Thu Jun 17 17:35:29 2010

[Thr 1108818240] =================================================

[Thr 1108818240] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1108818240] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1108818240] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1108818240] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1108818240] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1108818240] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1108818240] =================================================

[Thr 1108818240] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1108818240] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1108818240] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[Thr 1104591168] Thu Jun 17 17:36:06 2010

[Thr 1104591168] =================================================

[Thr 1104591168] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1104591168] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1104591168] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1104591168] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1104591168] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1104591168] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1104591168] =================================================

[Thr 1104591168] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1104591168] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1104591168] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[Thr 1105119552] Thu Jun 17 17:36:12 2010

[Thr 1105119552] Deactivated service 8000 for protocol HTTP on host: "epdsrv.spmcil.com"(on all adapters) (timeout=30)

[Thr 1106704704] Thu Jun 17 17:36:16 2010

[Thr 1106704704] Reactivated service 8000 for protocol HTTP on host: "epdsrv.spmcil.com"(on all adapters) (timeout=30)

[Thr 1108818240] Thu Jun 17 17:36:21 2010

[Thr 1108818240] =================================================

[Thr 1108818240] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1108818240] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1108818240] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1108818240] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1108818240] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1108818240] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1108818240] =================================================

[Thr 1108818240] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1108818240] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1108818240] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[Thr 1108289856] Thu Jun 17 17:36:24 2010

[Thr 1108289856] =================================================

[Thr 1108289856] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1108289856] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1108289856] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1108289856] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1108289856] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1108289856] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1108289856] =================================================

[Thr 1108289856] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1108289856] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1108289856] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[Thr 1105647936] Thu Jun 17 17:38:18 2010

[Thr 1105647936] =================================================

[Thr 1105647936] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1105647936] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1105647936] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1105647936] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1105647936] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1105647936] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1105647936] =================================================

[Thr 1105647936] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1105647936] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1105647936] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[Thr 1108289856] Thu Jun 17 17:45:14 2010

[Thr 1108289856] =================================================

[Thr 1108289856] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1108289856] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1108289856] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

resulting Filename = "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst"

[Thr 1108289856] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

[Thr 1108289856] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

[Thr 1108289856] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1108289856] =================================================

[Thr 1108289856] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_LIB_NOT_FOUND

[Thr 1108289856] *** ERROR => IcmIActivateService: SapSSLInit (rc=-1): SSSLERR_LIB_NOT_FOUND [icxxserv_mt. 737]

[Thr 1108289856] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) [icxxmsg_mt.c 1872]

[former_member227283]

Hi Rahul,

2 things need to modify.

1. file sapcrypto.lst is not unix flavor file it is windows flavor , you have to download linux cyptographic from SAP SMP which , linux crypto will have SO format for e.g libsapcrypto.so

2. Another thing change the location of file, keep the file in kernel folder and then set the parameter of kernel folder location.

Thanks

Anil

[former_member182205]

Hi Anil,

We have added the following profile parameter in transaction rz10

DIR_INSTANCE = /usr/sap/EPD/DVEBMGS00

icm/server_port_2 = PROT=HTTPS,PORT=50001,TIMEOUT=180

sec/dsakeylengthdefault = 1024

ssf/ssfapi_lib = /usr/sap/EPD/SYS/exe/run/linux-x86_64-

glibc2.3/libsapcrypto.so

sec/libsapsecu = /usr/sap/EPD/SYS/exe/run/linux-x86_64-

glibc2.3/libsapcrypto.so

ssl/ssl_lib = /usr/sap/EPD/SYS/exe/run/linux-x86_64-

glibc2.3/libsapcrypto.so

ssf/name = SAPSECULIB

we have installed sapcryptography file from sap service market place,

and the file name is 90000115.CAR. we have uncar that file and copied

libsapcrypto.so in the path /usr/sap/EPD/SYS/exe/run/linux-x86_64-

glibc2.3/libsapcrypto.so

we have restared the server also.

after doing all this when we go to SMICM transactiuon and try to

activate the https, its giving the error "Operation failed (rc=1)

Message no. ICM006".

[markus_doehr2]

> [Thr 1108289856] *** ERROR => DlLoadLib: dlopen()= /usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst: file too short -> DLENOACCESS (0,Success) [dlux_mt.c 314]

> [Thr 1108289856] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/EPD/SYS/exe/uc/linuxx86_64/linux-x86_64-glibc2.3/sapcrypto.lst" [ssslsecu_mt. 387]

make sure the user <sid>adm has access to that directory and that the file "sapcrypto.lst" is existing.

Markus

[former_member182205]

Hi mark ,

I went to STRUST transaction and i have created the node that is in transaction STRUST I have selected the System PSE node and click on create and a sub node with green color indication is created.

like wise I have clicked on create button on all the nodes available in the left pane in transaction STRUST, and in all the Nodes a sub node with green color indication is created.

and than I went to transaction SMICM and try to activate https service, its still giving error Operation failed (rc=1)

Message no. ICM006

I have seen the trace fiel also, and this is the trace file output.

Thr 1099946304 Wed Jun 23 11:04:45 2010

Thr 1099946304 =================================================

Thr 1099946304 = SSL Initialization on AMD/Intel x86_64 with Linux

Thr 1099946304 = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

Thr 1099946304 profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

resulting Filename = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

Thr 1099946304 = found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe

Thr 1099946304 = current UserID: "epdadm", env-var USER="epdadm"

Thr 1099946304 = using SECUDIR=/usr/sap/EPD/DVEBMGS00/sec

Thr 1099946304 *** ERROR => secudessl_Create_SSL_CTX(): PSE "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse" not found! [ssslsecu_m

Thr 1099946304 secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed

secude_error 4129 (0x00001021) = "The PSE does not exist"

Thr 1099946304 >> Begin of Secude-SSL Errorstack >>

Thr 1099946304 *** ERROR => secudessl_Create_SSL_CTX(): PSE "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse" not found! [ssslsecu_m

Thr 1099946304 secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed

secude_error 4129 (0x00001021) = "The PSE does not exist"

Thr 1099946304 >> Begin of Secude-SSL Errorstack >>

Thr 1099946304 ERROR in SSL_CTX_set_default_pse_by_name: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SA

ERROR in ssl_set_pse: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse"

ERROR in af_open: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse"

ERROR in secsw_open: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse"

ERROR in secsw_open_pse_or_extension: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse"

ERROR in sec_get_PSEtype: (4129/0x1021) The PSE does not exist : "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse"

Thr 1099946304 << End of Secude-SSL Errorstack

Thr 1099946304 *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential

for "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLS.pse" http://ssslxxi_mt.c 2278

Thr 1099946304 *** ERROR => Initialization of SSL library failed NO SSL available!

Thr 1099946304 =================================================

Thr 1099946304 <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR

Thr 1099946304 *** ERROR => IcmIActivateService: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR http://icxxserv_mt. 737

Thr 1099946304 *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-14) http://icxxmsg_mt.c 1872

Thr 1099417920 Wed Jun 23 11:12:22 2010

Thr 1099417920 =================================================

Thr 1099417920 = SSL Initialization on AMD/Intel x86_64 with Linux

Thr 1099417920 = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

Thr 1099417920 profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

resulting Filename = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

Thr 1099417920 = found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe

Thr 1099417920 = current UserID: "epdadm", env-var USER="epdadm"

Thr 1099417920 = using SECUDIR=/usr/sap/EPD/DVEBMGS00/sec

Thr 1099417920 = Success SapCryptoLib SSL ready!

Thr 1099417920 =================================================

Thr 1099417920 *** ERROR => NiIBindSocket: SiBind failed for hdl 7 / sock 24

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:50001) http://nixxi.cpp 3227

Thr 1099417920 *** ERROR => IcmBindService: NiBuf2Listen failed for host epdsrv.spmcil.com:50001 (rc=-4): NIESERV_USED [icxxse

Thr 1099417920 *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-1) http://icxxmsg_mt.c 1872

[former_member182205]

user EPDadm has all the access, no issues with the access. recent trace file output is mentioned below. I guess sap crypto file is installed properly but it seems there is some other issues.

please see the recent trace file below

[Thr 1099417920] Wed Jun 23 11:12:22 2010

[Thr 1099417920] =================================================

[Thr 1099417920] = SSL Initialization on AMD/Intel x86_64 with Linux

[Thr 1099417920] = (700_REL,Jan 23 2008,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 1099417920] profile param "ssl/ssl_lib" = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

resulting Filename = "/usr/sap/EPD/SYS/exe/run/linux-x86_64-glibc2.3/libsapcrypto.so"

[Thr 1099417920] = found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe

[Thr 1099417920] = current UserID: "epdadm", env-var USER="epdadm"

[Thr 1099417920] = using SECUDIR=/usr/sap/EPD/DVEBMGS00/sec

[Thr 1099417920] = Success SapCryptoLib SSL ready!

[Thr 1099417920] =================================================

[Thr 1099417920] *** ERROR => NiIBindSocket: SiBind failed for hdl 7 / sock 24

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:50001) [nixxi.cpp 3227]

[Thr 1099417920] *** ERROR => IcmBindService: NiBuf2Listen failed for host epdsrv.spmcil.com:50001 (rc=-4): NIESERV_USED [icxxse

[Thr 1099417920] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-1) [icxxmsg_mt.c 1872]

[Thr 1087985984] Wed Jun 23 11:19:43 2010

[Thr 1087985984] *** ERROR => NiIBindSocket: SiBind failed for hdl 7 / sock 24

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:50001) [nixxi.cpp 3227]

[Thr 1087985984] *** ERROR => IcmBindService: NiBuf2Listen failed for host epdsrv.spmcil.com:50001 (rc=-4): NIESERV_USED [icxxse

[Thr 1087985984] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-1) [icxxmsg_mt.c 1872]

[Thr 1101003072] Wed Jun 23 11:30:39 2010

[Thr 1101003072] *** ERROR => NiIBindSocket: SiBind failed for hdl 7 / sock 24

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:50001) [nixxi.cpp 3227]

[Thr 1101003072] *** ERROR => IcmBindService: NiBuf2Listen failed for host epdsrv.spmcil.com:50001 (rc=-4): NIESERV_USED [icxxse

[Thr 1101003072] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-1) [icxxmsg_mt.c 1872]

[Thr 1087457600] Wed Jun 23 11:40:50 2010

[Thr 1087457600] *** ERROR => NiIBindSocket: SiBind failed for hdl 7 / sock 24

(SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:50001) [nixxi.cpp 3227]

[Thr 1087457600] *** ERROR => IcmBindService: NiBuf2Listen failed for host epdsrv.spmcil.com:50001 (rc=-4): NIESERV_USED [icxxse

[Thr 1087457600] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 50001, 2(rc=-1) [icxxmsg_mt.c 1872]

[former_member182205]

Hi markus,

I have changed the port from 50001 to 443 in the profile parameter in RZ10. I have restarted the server also.

Now when i try to activate https in SMICM transaction its giving error and when i go to trace file and checked its showing this error:

[Thr 1080281408] *** ERROR => NiIBindSocket: SiBind failed for hdl 8 / sock 24

(SI_EADDR_NAVAIL/13; I4; ST; 0.0.0.0:443) [nixxi.cpp 3227]

[Thr 1080281408] *** ERROR => IcmBindService: You might not have the permissions to bind the service: epds.spm.com

[Thr 1080281408] *** ERROR => IcmBindService: NiBuf2Listen failed for host epds.spm.com:443 (rc=-16): NIEMYHOST

[Thr 1080281408] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 443, 2(rc=-1) [icxxmsg_mt.c 1872]

what could be the possible reason, what permission is missing..

[markus_doehr2]

> Now when i try to activate https in SMICM transaction its giving error and when i go to trace file and checked its showing this error:

>

> [Thr 1080281408] *** ERROR => NiIBindSocket: SiBind failed for hdl 8 / sock 24

> (SI_EADDR_NAVAIL/13; I4; ST; 0.0.0.0:443) [nixxi.cpp 3227]

> [Thr 1080281408] *** ERROR => IcmBindService: You might not have the permissions to bind the service: epds.spm.com

> [Thr 1080281408] *** ERROR => IcmBindService: NiBuf2Listen failed for host epds.spm.com:443 (rc=-16): NIEMYHOST

> [Thr 1080281408] *** ERROR => IcmHandleMonServMsg: IcmActivateService failed for 443, 2(rc=-1) [icxxmsg_mt.c 1872]

this happens because to bind() ports < 1024 the program has to be run as root.

Please stop the server, exeucte

./saproot.sh <SID>

in your kernel directory and try again.

Markus

[former_member182205]

Hi markus,

I have changed the https port to 8001 in the profile parameter in RZ10 transaction that is now my profile parameter looks like :

icm/server_port_2 PROT=HTTPS,PORT=8001,TIMEOUT=180

I have restarted the server and try to activate https service in SMICM transaction. This time I got success, HTTPS service got activated, i tried to access default BSP page (https://xyz.mycompany.com:8001/sap/bc/bsp/sap/it00/default.htm) to check whether HTTPS is activated properly or not and that page is coming up properly thats shows https service is activated properly in my ABAP stack of portal. Issue was port, i think 8001 port is by default https port in WAS ABAP.

But my problem is. I am configuring ADS into my portal. MY portal is dual stack thats is java+ ABAP installed on same machine.

MY ADS is installed on java stack. I have created RFC destination in SM59 in abap stack of portal.

my https port for java stack is 50001 that is we are accessing portal with the url: https://xyz.compzny.com:50001/irj/portal

xyz = my portal host name.

but in ABAP stack of portal i have configured https with 8001 port. now in SM59 transaction i have created a rfc destination with name ADS under HTTP Connection to External Server node and in that destination when i go to Logon& Security TAB and change SSL to Active and put SSL client certificate to anonymous or default and in Technical Settings TAB when i put port as 50001 (we have to put port of the java stack as ADS in installed on java stack) and save it and test it its giving me error

ICM_HTTP_SSL_ERROR

Message no. SR000

Why I am getting this error ??

Also when i change the port to 50000 in Technical Settings TAB and make SSL inactive in Logon& Security TAB in SM59 transaction and test the connection its coming proper, no error, testing is successful. So why I am not getting success in testing for 50001 port and SSL. please let me know.

50000 is my portal HTTP port

50001 is my portal HTTPS port

8000 is my HTTP port of ABAP stack of portal

8001 is my HTTPs port of ABAP stack of portal

Trace file output:

Thr 1089341760 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

Thr 1089341760 session uses PSE file "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLWSSE.pse"

Thr 1089341760 SecudeSSL_SessionStart: SSL_connect() failed

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

Thr 1089341760 >> Begin of Secude-SSL Errorstack >>

Thr 1089341760 ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (101/0x0065) Certificate expired (notbefore=031002072500Z, notafter=051002072500Z, now=10062310

ERROR in af_check_validity_of_Certificate: (101/0x0065) Certificate expired (notbefore=031002072500Z, notafter=051002072500Z, no

Thr 1089341760 << End of Secude-SSL Errorstack

Thr 1089341760 SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

Thr 1089341760 SSL NI-sock: local=192.168.0.22:59505 peer=192.168.0.22:50001

Thr 1089341760 <<- ERROR: SapSSLSessionStart(sssl_hdl=0x24309c0)==SSSLERR_SSL_CONNECT

Thr 1089341760 *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt

Edited by: Rahul Pradhan on Jun 23, 2010 12:33 PM

[former_member182205]

Hi Anil ,

I have changed the https port to 8001 in the profile parameter in RZ10 transaction that is now my profile parameter looks like :

icm/server_port_2 PROT=HTTPS,PORT=8001,TIMEOUT=180

I have restarted the server and try to activate https service in SMICM transaction. This time I got success, HTTPS service got activated, i tried to access default BSP page (https://xyz.mycompany.com:8001/sap/bc/bsp/sap/it00/default.htm) to check whether HTTPS is activated properly or not and that page is coming up properly thats shows https service is activated properly in my ABAP stack of portal. Issue was port, i think 8001 port is by default https port in WAS ABAP.

But my problem is. I am configuring ADS into my portal. MY portal is dual stack thats is java+ ABAP installed on same machine.

MY ADS is installed on java stack. I have created RFC destination in SM59 in abap stack of portal.

my https port for java stack is 50001 that is we are accessing portal with the url: https://xyz.compzny.com:50001/irj/portal

xyz = my portal host name.

but in ABAP stack of portal i have configured https with 8001 port. now in SM59 transaction i have created a rfc destination with name ADS under HTTP Connection to External Server node and in that destination when i go to Logon& Security TAB and change SSL to Active and put SSL client certificate to anonymous or default and in Technical Settings TAB when i put port as 50001 (we have to put port of the java stack as ADS in installed on java stack) and save it and test it its giving me error

ICM_HTTP_SSL_ERROR

Message no. SR000

Why I am getting this error ??

Also when i change the port to 50000 in Technical Settings TAB and make SSL inactive in Logon& Security TAB in SM59 transaction and test the connection its coming proper, no error, testing is successful. So why I am not getting success in testing for 50001 port and SSL. please let me know.

50000 is my portal HTTP port

50001 is my portal HTTPS port

8000 is my HTTP port of ABAP stack of portal

8001 is my HTTPs port of ABAP stack of portal

Trace file output:

[Thr 1089341760] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

[Thr 1089341760] session uses PSE file "/usr/sap/EPD/DVEBMGS00/sec/SAPSSLWSSE.pse"

[Thr 1089341760] SecudeSSL_SessionStart: SSL_connect() failed

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

[Thr 1089341760] >> Begin of Secude-SSL Errorstack >>

[Thr 1089341760] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (101/0x0065) Certificate expired (notbefore=031002072500Z, notafter=051002072500Z, now=10062310

ERROR in af_check_validity_of_Certificate: (101/0x0065) Certificate expired (notbefore=031002072500Z, notafter=051002072500Z, no

[Thr 1089341760] << End of Secude-SSL Errorstack

[Thr 1089341760] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

[Thr 1089341760] SSL NI-sock: local=192.168.0.22:59505 peer=192.168.0.22:50001

[Thr 1089341760] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x24309c0)==SSSLERR_SSL_CONNECT

[Thr 1089341760] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt

Edited by: Rahul Pradhan on Jun 23, 2010 12:32 PM