Remote access to the NetWeaver Administrator is forbidden

[former_member261631]

Hi All,

I have implemented SAP NetWeaver Portal 7.3 EhP1. After installing I am trying to access SAP NetWeaver Administrator through URL :

http://<Portal_Host_name>:50000/nwa

but getting below mention message :::

403   Forbidden
		SAP NetWeaver Application Server

  Error: Remote access to the NetWeaver Administrator is forbidden. See SAP Note 1451753 for details.

I have referred the mention SAP Note 1451753, but no getting clearly where exactly icm_filter_rules.txt to be placed in the root access of the Portal 7.31 server.

Also no idea where actually the DEFAULT.PFL is located and how to make the required entries as mentioned.

1) add entry in default profile : icm/HTTP/mod_0 = PREFIX=/,FILE=$(DIR_GLOBAL)/security/data/icm_filter_rules.txt

2) add entry in icm_filter_rules.txt : if % !regimatch ...

RegIRedirectUrl ^/webdynpro/resources/sap. com/tclmitsamuimainframe~wd/(.)*$ /nwa/remote_access_error [QSA]

3) restart java stack

Regards,

Hanif

[Former Member · Accepted solution]

Hi Hanif,

The default profile for the SAP loaded in the path /usr/sap/<your SID >/SYS/profile/DEFAULT.PFL

As my understanding what that note says is you need to edit the profile parameter in the default profile and then you need to maintain the values in the ICM_filter_rules.txt,

For finding the ICM filter file you need to go to the path $(DIR_GLOBAL)/security/data/icm_filter_rules.txt

Hope this helps and let me know if you have any queries.

[former_member261631 · Accepted solution]

Hi Silambharasan,

thanks for the reply,

I  have made the required entries first in DEFULT.PFL file by adding entry ::

icm/HTTP/mod_0 = PREFIX=/,FILE=$(DIR_GLOBAL)/security/data/icm_filter_rules.txt

and then another entry from the file in $(DIR_GLOBAL)/security/data/icm_filter_rules.txt

#if %{REMOTE_ADDR} !stricmp 127.0.0.1 [AND]

#if %{REMOTE_ADDR} !stricmp ::1

#RegIRedirectUrl

^/webdynpro/resources/sap.com/tc~lm~itsam~ui~mainframe~wd/(.)*$

/nwa/remote_access_error [QSA]

but still gettnig the same error while accessing SAP Portal 7.31

Regards

Hanif

[junwu · Accepted solution]

for me, it is working after the server restart.

[former_member261631 · Accepted solution]

Issue resolved

[Former Member · Accepted solution]

How did you solved the problem. I followed the note, but still nothing.

Pls help

[Former Member]

I solved the problem by implemented the note and checked the proxy and the IE connection.

[raj_sapbasis]

Hi

I think many of you people may already solved this problem, but I have provided simple steps here to clear doubts of many people where, what and which files to change.

Please follow the steps mentioned below to solve this problem.

1. Open DEFAULT file which is located in 'usr/sap/SAPSID/SYS/profile/' path
2. Add the following line at the end of all lines
3. icm/HTTP/mod_0 = PREFIX=/,FILE=$(DIR_GLOBAL)/security/data/icm_filter_rules.txt
4. Click Save
5. Open icm_filter_rules.txt file which is located in the path 'usr/sap/SAPSID/SYS/global/security/data/'
6. Comment all the lines available as shown in the following point
7. #if %{REMOTE_ADDR} !stricmp 127.0.0.1 [AND]
8. #if %{REMOTE_ADDR} !stricmp ::1
9. #RegIRedirectUrl ^/webdynpro/resources/sap.com/tc~lm~itsam~ui~mainframe~wd/(.)*$ /nwa/remote_access_error [QSA]
10. Save file
11. Restart the Java AS
12. Now try http://host:port/nwa
13. You should not get remote access error now.

I hope these steps are helpful.

[Former Member]

Hi,

Thanks for the above detailed step by step explaination.

But its still not working for me.

I had this line "

icm/HTTP/mod_0 = PREFIX=/,FILE=$(DIR_GLOBAL)/security/data/icm_filter_rules.txt

already added to my DEFAULT.PFL  file.

And i commented all the lines in the " /security/data/icm_filter_rules.txt" file .

Then, I restarted the server machine and SAP MMC .

Still showing same message:-

403   Forbidden
		SAP NetWeaver Application Server

  Error: Remote access to the NetWeaver Administrator is forbidden. See SAP Note 1451753 for details.

Thank you

Muddassar

[Former Member]

If you followed the note and it still doesnt works, open an OSS. There is no other possibility to activate remote access for NWA as far I know.

cheers

[Former Member]

Hi,

After restarting the SAP MMC again. It worked.

Thanks

Muddassar

[Former Member]

Muddassar, thats pretty strange. In fact there shouldnt be any connection between the MMC and remote accessing of NWA.

regards

[former_member349907]

Thanks bro .. very helpful. issue fixed ..

[Former Member]

Hi Hanif

The correct SAP Note number is 1451753. It is available after the upgrade of  LMNWAUIFRMRK SCA. For more information, see the SP Patch Level section of this SAP note.

[Former Member]

Besides these suggestions, i think you should also restart Windows Services.

Hope this helps too.

[Former Member]

Hi,

Does anyone find a solution for this?
I'm facing that same error.

I've done restart of MMC, SAP, Windows... but the problem stills the same.

Kind regards,
RM

[Former Member]

Hi Rogerio Matos,

Please follow the SAPNote 1451753, still not getting try with downloading the attached file with the note  copy the same content to the original rule file and save.

Restart the sap and try now.

I hope it will work fine for you also.

Points are welcome.

Thanks & Regards,

Praveen

[Former Member]

This message was moderated.

[junwu]

it's the default behavior, just follow that note to open the remote access