SRM system access via Reverse Proxy on Apache

[Former Member]

Dear Team,

I am accessing the SAP Portal NW2004s EhP2 in the intranet and it is working fine.

When I access it via intranet, where the reverse proxy is configured using Apache I am able to access the portal on http but when accessing any of the standard SRM content, it throws a "page cannot be displayed error".

I am accessing the portal via internet using the URL : http://etender.abc.co.in/irj/portal where as all my servers EP,SRM and ECC are on a abcdev.com environment, is this the right approach or do I have to change my domain name while accessing the portal externally.

Also, in SICF, the services default_host/sap/public/bc/its/mimes and /default_host/sap/bc/gui/sap/its/webgui is activated for all the backend systems.

When I test webgui service, I am getting the logon screen but when testing mime, it throws an error.(Could this be a reason for failure).

I have published services SYSTEM WEBGUI SHUFFLER in Internet services of SE80 and also ensured that the transaction SIAC_PUBLISH_ALL_INTERNAL tcode was run to publish the services.

In my system object in the portal, for ITS connection, I have maintained the host as the host of the proxy server.

Also, have a look at the virtual host entry in the Apache server.

<VirtualHost etenderdev.abc.co.in:80>
   ServerAdmin webmaster@MDCLINUXVIRT
   ServerName etenderdev.abc.co.in
   DocumentRoot /var/www/html/6
   ProxyRequests On
   ProxyPreserveHost On
   RequestHeader set ClientProtocol http
   ReWriteEngine on
   RewriteLogLevel 9
   ProxyPass /irj <a href="http://dqesap1.abcdev.com:50200/irj" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj</a>
   ProxyPassReverse /irj <a href="http://dqesap1.abcdev.com:50200/irj" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj</a>
   ProxyPass /irj/portal <a href="http://dqesap1.abcdev.com:50200/irj/portal" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj/portal</a>
   ProxyPassReverse /irj/portal <a href="http://dqesap1.abcdev.com:50200/irj/portal" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj/portal</a>
   ProxyPass /irj/servlet <a href="http://dqesap1.abcdev.com:50200/irj/servlet" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj/servlet</a>
   ProxyPassReverse /irj/servlet <a href="http://dqesap1.abcdev.com:50200/irj/servlet" TARGET="test_blank">http://dqesap1.abcdev.com:50200/irj/servlet</a>
   ProxyPass /logon <a href="http://dqesap1.abcdev.com:50200/logon" TARGET="test_blank">http://dqesap1.abcdev.com:50200/logon</a>
   ProxyPassReverse /logon <a href="http://dqesap1.abcdev.com:50200/logon" TARGET="test_blank">http://dqesap1.abcdev.com:50200/logon</a>
   ProxyPass /webdynpro <a href="http://dqesap1.abcdev.com:50200/webdynpro" TARGET="test_blank">http://dqesap1.abcdev.com:50200/webdynpro</a>
   ProxyPassReverse /webdynpro <a href="http://dqesap1.abcdev.com:50200/webdynpro" TARGET="test_blank">http://dqesap1.abcdev.com:50200/webdynpro</a>
   ProxyPass /srm7/ <a href="http://dqesap02.abcdev.com:8004/srm7/" TARGET="test_blank">http://dqesap02.abcdev.com:8004/srm7/</a>
   ProxyPassReverse /srm7/ <a href="http://dqesap02.abcdev.com:8004/srm7/" TARGET="test_blank">http://dqesap02.abcdev.com:8004/srm7/</a>
   ProxyPass /ecc6 <a href="http://dqesap02.abcdev.com:8000/ecc6" TARGET="test_blank">http://dqesap02.abcdev.com:8000/ecc6</a>
   ProxyPassReverse /ecc6 <a href="http://dqesap02.abcdev.com:8000/ecc6" TARGET="test_blank">http://dqesap02.abcdev.com:8000/ecc6</a>
ErrorLog logs/portal.domain.com-error_log
CustomLog logs/portal.domain.com-access_log common
RewriteLog logs/portal.domain_unsecured_rewrite.log
</VirtualHost>

Please note that dqesap1=EP server, dqesap02=SRM and dqesap03=ECC.

I am not too sure as to how to use the Rewrite statements, as the ones, that I have tried are not working.

Can you please throw some light on the configuration or any pointers would be great.

Thanks and regards,

Sushil Parmar

Edited by: SushilParmar on Sep 13, 2011 1:55 PM

[former_member194364]

Hi Sushil,

The following might be a useful SDN thread for you:

[Apache Reverse Proxy to 2 ITS Hosts |;

Shows how the rewrite rules are written.

You say above:

"

When I test webgui service, I am getting the logon screen but when testing mime, it throws an error.(Could this be a reason for failure)."

Dont worry about this - this is not a useful test if I understand correctly what you did here. Did you try and right click on MIME when viewing it in transaction SICF and then you select "Test Service" from the Context menu? If YES then this is not a useful test. If the WEBGUI works correctly i.e in that it shows images and icons correctly, then WEBGUI's MIME's are being accessed correctly.

Regards,

Oisin