Integrated ITS in Reverse Proxy scenario - HTTPS logon

[Former Member]

Hi folks,

I have the following question to clarify my understanding about HTTPS, an Apache as reverse proxy and the integrated ITS of WAS 7.0:

We have an Apache as reverse proxy with several IPs and external virtual hostnames.

The different external virtual hosts are redirected to our internal hostnames and the answers are rewritten and send back to the client.

We also have HTTPS between client and Apache, HTTP between Apache and the systems.

Everything is working fine in my opinion, the URLs are generated correctly, images are displayed, etc...

But: e.g. the integrated ITS logon screen is still displaying the error "No switch to HTTPs occured..."

I thought the HTTP header variable "RequestProtocol" which we set to HTTPS must be evaluated by the SAP system correctly, otherwise URL generation would fail....

So why is the logon still complaining about "no https....."?

Is the only option to avoid this message to disable the warnings in transaction SICF for each ICF node/ service??

Or will table HTTPURLLOC help us out here?

Thanks for your ideas,

Michael

[Former Member]

Hi Michael-

We have the exact problem , Did you get it work ? If so , could you please share what was done to make it working.

My environment is , We have Apache 2 and Web Dispatcher 7 that route http traffic to EP7 portals which is connected to ECC 6.0 backend. For ESS transactions like Bank information and Personal information , we are getting "no switch to https occured ; It's not secure to send password ". I have checked our Integrated ITS webgui service in SICF and it's activated.

Pl Help.

regards

Venu

[Former Member]

Hi Venu,

I had to manually switch off the warning messages.

Check <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/49/53f23f6fb9f206e10000000a1550b0/frameset.htm">this SAP Help article</a> for further information.

You have to mark the "Do Not Display Warnings" setting in the <i>webgui </i>service (or any other you may use).

Hth,

Michael

[former_member316351]

Hello Michael,

Are you also setting the ~http_https header to on?

Edgar

[Former Member]

Hello Edgar,

no, we are not setting this parameter.

Using the Business Package for CRM for example would mean to modifiy about 100 iViews - waste of time.

ITS should be able to handle the requests with the help of the request header variable and there we go...

Michael